Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mB4_gKDtwxPihGOtnfh-IVpXG4k.roa
File: mB4_gKDtwxPihGOtnfh-IVpXG4k.roa (raw, json)
Hash identifier: FTuOJ3F7IeqRMnsQX5L9kWXKE9PSOowYCkfromfb3QE=
Subject key identifier: 98:1E:3F:80:A0:ED:C3:13:E2:84:63:AD:9D:F8:7E:21:5A:57:1B:89
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018E55E18025F3A7797472C2D2F75C9B07F8
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mB4_gKDtwxPihGOtnfh-IVpXG4k.roa
Signing time: Tue 19 Mar 2024 08:43:45 +0000
ROA not before: Tue 19 Mar 2024 08:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.126.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.8.0/24 maxlen: 24
80.97.15.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.238.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.166.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
81.181.251.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.88.0/21 maxlen: 21
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Sat 23 Mar 2024 11:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:e1:80:25:f3:a7:79:74:72:c2:d2:f7:5c:9b:07:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 19 08:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=981e3f80a0edc313e28463ad9df87e215a571b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:c5:99:cf:d0:86:58:b3:e0:1b:25:9a:d7:
71:6e:52:10:a0:7d:bd:af:2b:c9:ec:02:23:be:f1:
44:ba:88:45:2c:8f:d3:5c:84:44:24:d4:e8:43:08:
8e:e5:97:96:3c:8c:57:a6:14:15:a9:8b:bc:1d:80:
74:a9:19:fe:8f:b1:a7:3f:df:8f:2a:d6:19:83:06:
37:be:bc:f9:08:f6:9f:18:14:ab:76:f0:71:81:14:
df:23:cb:ad:89:ea:0b:7a:66:b0:50:25:44:55:9c:
ff:db:00:a3:37:5d:49:72:68:ed:84:49:1c:6c:0a:
26:d7:43:d9:76:55:0c:a7:e4:db:a7:bd:40:3f:c2:
ee:a1:a5:63:c7:2b:78:3d:b5:04:f3:fb:a0:b0:0a:
ba:d1:30:a3:0a:c2:eb:a7:60:80:96:0b:0e:46:da:
a2:66:3c:34:a4:b1:b0:ac:3a:2c:a8:df:b5:fd:1f:
92:7d:7a:dc:6d:08:0d:a3:c5:c7:eb:a6:cb:c1:0f:
87:f6:3a:dd:ee:7d:a4:e5:a9:41:c3:91:6f:10:bf:
5f:79:99:02:56:59:d7:ee:13:29:a8:58:e6:4e:b1:
1b:27:aa:dc:63:fc:96:43:85:31:93:14:bf:a5:b3:
a2:21:07:0c:27:a2:fd:a3:52:b8:4a:2c:07:ee:ee:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1E:3F:80:A0:ED:C3:13:E2:84:63:AD:9D:F8:7E:21:5A:57:1B:89
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mB4_gKDtwxPihGOtnfh-IVpXG4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.126.0/24
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.8.0/24
80.97.15.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.238.0/23
81.181.0.0/24
81.181.74.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.166.0/24
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
81.181.251.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.218.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.96.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
7d:e1:7d:5d:3c:bf:67:49:0a:27:73:d8:b1:91:cd:a0:93:10:
d4:fb:8f:f4:b0:85:0a:31:5e:15:6f:08:23:7e:21:4f:94:01:
7d:c8:ed:a5:d2:fa:bd:2f:53:b5:4a:60:ff:d4:4f:c5:ab:1e:
eb:2c:7b:48:21:1c:40:bb:d3:58:63:db:0b:03:45:2f:15:bc:
3c:70:07:46:6e:9f:1d:c3:78:fa:03:5e:c2:0f:db:b8:6a:07:
ad:b8:4c:9e:86:b4:e7:6c:ad:e3:8e:45:18:f9:75:a5:6c:9b:
6b:14:7f:20:90:eb:84:63:99:65:44:e1:71:bf:ee:0e:22:46:
8d:3e:5c:77:10:78:b2:58:ab:1f:c0:f1:2b:72:e1:56:dc:bf:
4c:43:a7:45:de:7a:af:11:9b:4d:5b:4e:2b:32:62:07:a7:41:
bd:ce:d5:1a:d4:2d:09:ce:0a:65:77:f6:c6:ad:95:78:8b:d2:
00:ba:ac:6a:68:21:6d:e9:06:3f:c1:46:1f:87:2e:00:5f:5f:
48:88:3d:e3:92:75:68:9f:c1:f8:74:2d:38:94:90:35:78:60:
a2:1a:2d:bd:7a:75:7b:63:2d:b6:40:dc:5b:20:8f:4f:0a:95:
0e:3d:e1:3a:b2:fa:16:a5:0e:92:2a:b9:8c:98:8b:e6:ec:46:
b4:97:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 15:39:20 2024 by rpki-client on console-ams.rpki-client.org