Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hpacncD4crrN22fzYsYEd3-HCSI.roa
File: hpacncD4crrN22fzYsYEd3-HCSI.roa (raw, json)
Hash identifier: pRh+kStY6TvnTNKzuDnrQ7w/ZgJhKa1P8YB0othQPjg=
Subject key identifier: 86:96:9C:9D:C0:F8:72:BA:CD:DB:67:F3:62:C6:04:77:7F:87:09:22
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018AAD7E4D2EF6DBD61BF066C61431511F3E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hpacncD4crrN22fzYsYEd3-HCSI.roa
Signing time: Tue 19 Sep 2023 12:50:50 +0000
ROA not before: Tue 19 Sep 2023 12:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.40.0/23 maxlen: 23
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
85.121.160.0/22 maxlen: 22
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:7e:4d:2e:f6:db:d6:1b:f0:66:c6:14:31:51:1f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 19 12:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86969c9dc0f872bacddb67f362c604777f870922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:ea:73:a8:c3:af:92:13:a3:9f:b5:1f:28:
fc:f8:ac:0a:1a:06:76:a4:95:07:27:88:eb:16:54:
b9:03:df:95:cb:b3:57:67:5e:8e:5c:ba:0f:93:48:
2a:93:23:a9:88:86:f7:b1:b5:23:c4:00:db:45:53:
96:82:3f:de:f7:e3:63:9d:38:c2:d8:f4:5c:33:af:
43:65:c1:6c:b7:f9:86:6a:f0:96:8f:c0:a6:1b:ae:
ed:38:09:85:00:06:ba:c8:b1:4d:cd:01:4e:77:3a:
6f:fc:f0:fe:04:47:fa:87:b0:d0:fa:69:d1:d7:a8:
70:74:36:a7:e5:99:37:a7:44:ee:81:7a:27:e4:e6:
84:9a:fe:97:46:65:34:1d:a8:17:91:f4:7a:83:bd:
2b:1f:8c:6c:00:0d:9e:27:c1:40:f0:b8:0a:56:81:
49:47:06:b7:ef:05:d2:9f:e4:ab:d2:7b:2e:17:29:
60:01:7e:21:81:cf:10:54:c9:32:a0:bf:89:1c:b4:
2c:ce:8a:99:b6:06:5e:71:ca:2e:9c:67:68:33:1a:
46:0d:ac:b9:47:1c:64:f2:15:e9:f6:47:4f:78:8b:
42:9c:77:26:c8:8a:ee:3c:5a:db:d2:33:4c:b5:e0:
62:db:fa:37:92:92:b4:a4:3d:26:40:2a:68:92:5a:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:9C:9D:C0:F8:72:BA:CD:DB:67:F3:62:C6:04:77:7F:87:09:22
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hpacncD4crrN22fzYsYEd3-HCSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
31:9d:49:d8:fd:bf:f7:dd:0f:fb:93:b2:1b:4c:cd:39:8f:39:
72:7f:c3:b9:af:f3:ee:9a:49:29:98:5c:14:c9:84:3e:89:c2:
ca:53:40:72:79:ec:bf:ee:ba:0a:fb:f6:8d:14:3c:64:c9:61:
3f:a3:ef:46:e8:3e:96:41:6a:11:53:45:11:86:80:15:6d:7c:
bb:98:e7:0a:13:5d:23:ed:26:ad:e8:31:e6:de:86:49:ea:a9:
b3:1d:7e:72:51:be:dc:c4:d1:bb:51:4b:02:b1:22:85:5b:21:
15:a2:b2:a1:15:5b:b1:1a:d3:64:67:18:31:8e:00:37:51:19:
e0:c9:40:bd:71:d6:7b:91:63:62:43:83:e8:c6:17:4f:bf:62:
5e:c3:fd:b1:28:85:be:ec:de:3f:88:a2:6d:a8:f0:37:93:73:
9b:2d:d0:37:47:28:70:d4:b4:1c:fd:ef:26:95:b1:2b:e1:05:
3c:e9:2b:23:e6:51:10:d7:1e:37:4d:48:2d:9d:67:b1:b6:94:
a8:bd:f0:cb:56:84:df:e2:21:ee:11:cb:2f:58:3f:d7:70:a0:
0b:92:5c:7c:3a:16:e1:b5:c9:9c:cf:cb:92:d7:08:64:62:15:
c7:06:74:05:84:7b:92:a8:7a:17:50:d3:82:98:c1:5e:ae:88:
8e:90:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 06:55:54 2023 by rpki-client on console-ams.rpki-client.org