Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lyqa-iWJDyd8Bm3lUBx74kghdTI.roa
File: lyqa-iWJDyd8Bm3lUBx74kghdTI.roa (raw, json)
Hash identifier: gtR49nwyoqkwBRbqZCHMkbTkDjsslVOB/37s068RS/U=
Subject key identifier: 97:2A:9A:FA:25:89:0F:27:7C:06:6D:E5:50:1C:7B:E2:48:21:75:32
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018F51BAF23FEED2CF492484AF8CE2F0124D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lyqa-iWJDyd8Bm3lUBx74kghdTI.roa
Signing time: Tue 07 May 2024 06:25:57 +0000
ROA not before: Tue 07 May 2024 06:25:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.14.0/23 maxlen: 23
80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.8.0/24 maxlen: 24
80.97.15.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.166.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
81.181.251.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.88.0/21 maxlen: 21
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 21 Jun 2024 08:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:ba:f2:3f:ee:d2:cf:49:24:84:af:8c:e2:f0:12:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 7 06:25:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=972a9afa25890f277c066de5501c7be248217532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:dc:8f:fc:25:f6:ae:58:2f:1c:c0:df:ff:
88:e0:ff:76:21:47:e3:6d:9b:3a:cf:28:4e:0d:09:
43:7f:9c:93:50:62:91:57:d3:af:df:3f:1b:66:75:
9c:a5:95:3c:ad:86:5b:76:e6:6b:30:a7:1c:df:f2:
4a:e3:c6:f2:3a:36:16:ca:43:57:c7:af:79:12:07:
34:e2:1f:64:d0:97:b3:74:4a:e1:de:52:52:d7:33:
df:3a:2b:e3:29:25:91:9e:9f:64:76:5a:56:fe:bd:
90:1a:f6:d4:11:46:3b:d0:5d:95:31:7f:69:f6:bc:
06:d7:01:1d:7d:c6:57:b0:6f:e8:4b:d4:45:8c:81:
eb:01:87:e0:d4:a1:73:68:6e:51:3a:48:14:64:00:
f1:d6:b2:b7:40:9d:e3:0f:66:03:2e:9b:fc:6a:0b:
5c:d8:b9:0e:a7:51:c4:9a:84:f4:78:38:41:a9:46:
1b:8a:2e:91:47:b8:d5:34:dc:93:0d:ec:0c:34:26:
86:a4:7e:10:e1:ae:29:59:4d:80:09:22:75:ae:3d:
e0:a2:da:03:f4:fb:8e:bc:d0:bb:58:b8:8f:8e:94:
89:37:be:8f:f2:02:cf:71:26:7f:3e:2c:34:50:a7:
ef:9e:28:e7:5d:ab:54:e9:96:3b:17:23:bf:41:6f:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2A:9A:FA:25:89:0F:27:7C:06:6D:E5:50:1C:7B:E2:48:21:75:32
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lyqa-iWJDyd8Bm3lUBx74kghdTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.14.0/23
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.8.0/24
80.97.15.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.166.0/24
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
81.181.251.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.177.0/24
194.102.218.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.96.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
a1:78:eb:0b:ed:3a:e2:79:2d:e5:af:77:4c:f7:53:df:a7:3d:
68:5e:d4:ae:8b:b5:5d:04:d5:42:13:ff:27:df:c5:9a:f4:4e:
6f:75:9d:7a:0b:a0:83:e0:01:be:a1:f8:0f:63:d3:e8:20:79:
fe:b9:ea:97:87:91:36:1d:b7:77:fa:bb:13:0a:3b:dd:fb:75:
7e:3f:fe:1d:e9:3c:dd:43:33:4a:de:57:64:f3:15:83:b5:fc:
78:17:ff:5f:29:d7:42:b2:cf:17:65:6b:4a:f0:04:f8:c6:4b:
fb:eb:e3:a9:1c:c5:9c:aa:ba:55:2b:fa:1a:a3:01:8b:88:13:
8d:33:e9:79:c1:60:13:3a:49:94:4c:ad:df:6b:de:b7:80:1e:
a4:48:91:00:33:83:c0:ed:67:fd:82:bb:ab:4b:be:3f:3c:a4:
4c:41:f0:fc:0c:10:44:1a:19:f5:3f:74:c7:fa:e7:94:5f:6b:
2d:2f:f4:31:1f:70:13:c0:e7:b3:48:ad:d4:fd:40:aa:30:a3:
db:0e:3e:a5:62:5c:84:e1:68:55:85:a0:ec:9e:c2:d8:3f:ee:
bd:19:00:88:50:df:7a:0a:72:ca:46:d4:58:5b:a3:50:80:a9:
0a:98:95:e7:df:fb:79:ce:c4:fc:31:e1:17:b3:e0:18:86:d5:
4a:11:cc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 11:03:50 2024 by rpki-client on console-fra.rpki-client.org