Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iZ68WKz3Fqm5W0sCKRAbmBmoMDA.roa
File: iZ68WKz3Fqm5W0sCKRAbmBmoMDA.roa (raw, json)
Hash identifier: 6K9irXdPxwnLZ/q+zTRv4z7ifNKMy9EEqDGYrUdCU14=
Subject key identifier: 89:9E:BC:58:AC:F7:16:A9:B9:5B:4B:02:29:10:1B:98:19:A8:30:30
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018ACB01093DDBFF95C27F3108A07FC878E3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iZ68WKz3Fqm5W0sCKRAbmBmoMDA.roa
Signing time: Mon 25 Sep 2023 06:22:37 +0000
ROA not before: Mon 25 Sep 2023 06:22:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.40.0/23 maxlen: 23
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
85.121.160.0/22 maxlen: 22
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 16 Oct 2023 12:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:01:09:3d:db:ff:95:c2:7f:31:08:a0:7f:c8:78:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 25 06:22:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=899ebc58acf716a9b95b4b0229101b9819a83030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:e2:9c:75:cf:ba:c8:45:56:06:77:48:e6:
42:1e:72:1c:8a:c7:fe:e3:ba:c3:8c:b1:35:4f:44:
3e:40:63:b8:0e:98:cc:19:ac:76:52:a4:fb:e1:a7:
c1:f2:6b:73:9c:79:f9:96:4b:7b:3e:28:a6:35:a4:
eb:d2:d2:52:ac:6f:fb:30:38:0c:5c:b5:1b:8d:c3:
37:e4:4a:4a:f2:f3:7e:b2:15:00:80:f0:5d:c3:43:
35:95:05:9c:ee:d0:45:8c:bb:f4:8e:e3:3d:32:e2:
5c:16:93:0f:59:3e:7a:e1:bd:cd:6c:78:71:61:b7:
99:f4:b8:49:f1:a9:dd:eb:36:b9:e9:cf:34:8e:97:
14:e0:13:62:b6:8a:02:cc:b1:9a:c9:9a:fb:98:e6:
ac:61:39:fc:cc:e1:ad:fd:f5:c8:75:c2:f9:7a:07:
75:09:88:b8:7e:3b:71:5a:b0:a2:c8:ed:6b:f4:2b:
c7:8a:1f:b5:6d:d9:9d:3b:40:b9:88:45:6c:ab:77:
8d:ad:c5:7b:ed:fb:d4:40:8f:78:c0:f4:0f:78:47:
c6:c2:67:b8:61:d4:f7:53:12:91:41:55:38:c9:8c:
1b:ff:1a:83:a7:d0:9e:43:88:8b:ac:8a:a0:44:a6:
01:b4:24:f3:f0:38:d3:69:35:ea:18:0b:eb:1a:17:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:BC:58:AC:F7:16:A9:B9:5B:4B:02:29:10:1B:98:19:A8:30:30
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iZ68WKz3Fqm5W0sCKRAbmBmoMDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
54:66:f4:36:ff:4c:0d:4d:6e:69:5a:0d:d8:15:09:5c:8f:e1:
09:43:1b:49:de:47:d1:05:20:98:95:cf:98:2d:98:38:d2:e7:
8c:c8:82:7a:d6:86:82:4e:87:25:d8:f3:fc:fe:42:2d:f7:d6:
f6:64:97:ff:9f:20:eb:da:65:dc:24:bf:b8:d8:27:7a:ba:58:
83:30:a7:c6:9b:d5:c8:ba:b7:88:0e:a5:3f:49:22:70:35:8c:
e5:71:a8:b3:91:9b:95:8c:89:00:68:95:7c:0d:42:f0:55:d6:
a1:3e:b6:c3:56:12:ae:57:e7:39:11:95:91:0e:7c:1f:b9:f7:
f1:45:34:02:71:c5:fd:9b:2f:26:08:9a:82:2c:ea:5b:bd:01:
3e:03:ee:de:b8:8d:9d:f2:a1:75:6e:ec:90:5f:3e:ae:43:39:
97:d5:df:4f:f4:3e:1c:8b:e5:ef:a4:85:0e:83:08:3a:94:2f:
91:7f:9b:e0:46:29:e1:25:60:0b:bd:9c:18:6c:89:97:8c:da:
c2:54:a3:9b:f6:a2:5a:83:e6:b3:f7:fd:59:64:26:99:45:3b:
51:61:c3:5f:16:77:e7:0b:03:d9:b2:c3:16:5b:bf:94:be:2a:
87:0a:ef:57:8d:81:e9:b5:a4:b6:92:9b:ea:98:ee:10:d6:44:
8e:6f:ca:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org