Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ir0ZkBHvw7Tg8oy5ao-Jn9H3QrA.roa
File: ir0ZkBHvw7Tg8oy5ao-Jn9H3QrA.roa (raw, json)
Hash identifier: NOwe9y0f7kGB2KO2S+ZVClPBkAdtBWOejZNInPcs2x4=
Subject key identifier: 8A:BD:19:90:11:EF:C3:B4:E0:F2:8C:B9:6A:8F:89:9F:D1:F7:42:B0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01907CE8A099AF5F6F8E5C9E742273533763
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ir0ZkBHvw7Tg8oy5ao-Jn9H3QrA.roa
Signing time: Thu 04 Jul 2024 08:42:18 +0000
ROA not before: Thu 04 Jul 2024 08:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.82.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:e8:a0:99:af:5f:6f:8e:5c:9e:74:22:73:53:37:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 4 08:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8abd199011efc3b4e0f28cb96a8f899fd1f742b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:a8:0d:37:33:55:39:bd:e8:99:a2:a9:91:
01:f1:b9:c5:60:e5:91:53:c4:70:e1:76:6c:97:0c:
39:a8:15:2c:1f:ea:73:45:d3:ab:5f:df:fb:fc:91:
dc:1b:10:19:11:8a:d6:f8:c0:23:ab:3c:ea:99:b7:
11:13:e3:77:ba:d5:bf:b5:a2:8b:27:8d:92:1c:93:
cd:91:dc:ca:53:46:cd:11:ec:d2:bc:02:f3:cb:71:
0b:43:b0:55:ac:69:67:8b:08:5a:5a:71:5e:cd:c2:
80:83:25:4b:7f:68:ba:f9:16:cc:22:2d:8f:e6:8b:
97:2f:29:1d:4e:1e:b9:13:4b:04:12:26:bb:fc:87:
82:b4:ae:30:2a:4f:aa:81:8d:c0:15:bb:ee:70:ce:
be:6d:3e:3c:7e:84:e3:02:57:3a:78:82:98:3a:00:
89:37:32:c0:7c:f4:26:01:ec:b5:6b:94:2a:d0:a3:
74:8d:0e:38:19:ef:8e:36:bd:8f:cf:09:9c:8b:7d:
f4:0b:3d:cb:ae:5a:d9:d6:18:47:78:ea:c6:dd:24:
33:be:5f:9d:0f:86:7a:85:b7:a9:d3:5a:91:51:0c:
57:be:4d:94:ce:f4:c8:f8:22:4e:e4:52:63:5b:9d:
a1:8a:e9:16:49:9e:e6:78:6e:db:13:da:a4:47:72:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:19:90:11:EF:C3:B4:E0:F2:8C:B9:6A:8F:89:9F:D1:F7:42:B0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ir0ZkBHvw7Tg8oy5ao-Jn9H3QrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.82.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.226.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e1:f9:f5:15:0a:6e:a1:4d:86:08:27:d7:c8:f2:82:96:73:
81:bd:08:c5:04:de:46:93:36:fb:f1:8f:30:06:31:19:cd:70:
ee:48:9f:cd:4a:e0:88:8c:7b:fc:9f:ac:b3:6d:c7:ef:9e:3d:
6b:78:00:38:59:e0:4e:c8:3f:a8:11:18:e2:dc:5d:56:79:d5:
4d:4e:4e:ca:36:d0:8a:c4:f5:14:09:9d:a9:9f:c1:4e:2a:23:
91:e2:f2:77:3f:ee:51:5f:72:84:1a:64:0b:e9:fa:9a:69:82:
40:3e:f7:01:aa:c0:76:24:17:2e:3a:6a:91:25:ff:bc:f7:12:
00:66:2f:19:ea:9e:5b:35:44:67:1d:77:cb:f9:ac:5a:6d:26:
6e:f6:7c:48:7e:1c:9a:ad:96:19:87:4a:80:e6:d4:e4:2a:f5:
6a:d7:9b:5f:89:c5:54:f1:5a:54:2b:a0:25:f0:41:3e:2f:c6:
44:2e:1c:0d:c3:90:0c:c8:fa:a1:96:4b:74:68:b2:ee:f8:44:
b0:e5:fc:cd:e2:f9:d8:22:1f:f5:e9:7e:80:f1:be:0b:49:a4:
1f:b9:e1:a8:ae:7b:e4:d2:2a:d2:dd:4a:41:eb:5d:b7:87:09:
3a:b4:48:f5:73:25:f4:20:11:64:90:bb:5a:9e:ae:5f:c2:a8:
25:07:28:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 06:24:13 2024 by rpki-client on console-fra.rpki-client.org