Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nBi8ySA_e44j-vYaXCtAZU4uX4k.roa
File: nBi8ySA_e44j-vYaXCtAZU4uX4k.roa (raw, json)
Hash identifier: PupCw11jybNX8yXAQ+bZxbcRPiMHZOOLCrRJCm4dDl0=
Subject key identifier: 9C:18:BC:C9:20:3F:7B:8E:23:FA:F6:1A:5C:2B:40:65:4E:2E:5F:89
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01865129B4BCB9C0394DD84344F4BD5F757D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nBi8ySA_e44j-vYaXCtAZU4uX4k.roa
Signing time: Tue 14 Feb 2023 18:22:13 +0000
ROA not before: Tue 14 Feb 2023 18:22:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
85.122.192.0/18 maxlen: 18
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:29:b4:bc:b9:c0:39:4d:d8:43:44:f4:bd:5f:75:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 14 18:22:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c18bcc9203f7b8e23faf61a5c2b40654e2e5f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:36:da:a7:a7:28:9f:02:28:5b:99:8b:c2:
c3:0b:57:de:f4:69:58:14:6f:9d:fb:88:1d:ad:d6:
6b:a1:9f:bf:1b:4e:7f:95:63:24:79:a4:70:c6:ce:
68:35:e2:54:11:87:94:b2:b6:c4:ab:19:c5:d4:49:
84:7c:2a:a7:07:c3:a8:44:97:9e:45:8c:91:dc:13:
13:82:8c:ee:a7:57:e4:f7:61:37:7c:cc:75:ac:78:
a2:d1:9c:b7:32:30:7c:07:48:fa:6c:90:a9:a2:1f:
ec:81:f3:75:73:2f:60:67:d0:61:26:cd:e8:ea:93:
87:a8:79:c7:e1:1f:ca:90:1a:5c:c9:16:dd:4f:d8:
a7:6b:ca:3d:7e:bf:bf:00:cf:d2:37:11:02:a9:1b:
03:0e:66:aa:e7:62:bd:43:88:87:ae:d4:5a:91:51:
76:51:2f:1b:83:fe:81:ab:f7:39:65:98:f0:59:f8:
0a:37:38:42:8a:be:9d:18:61:53:bc:2d:f4:34:6a:
da:f1:2e:40:1c:a0:4b:84:ea:4a:3d:b8:c6:90:b7:
1c:99:cb:ea:f4:22:d1:49:86:ae:60:4c:2e:d6:e2:
70:61:b7:4c:f9:54:05:b1:4e:e9:56:cd:45:e8:4f:
4e:95:e4:a3:bd:ba:c4:f3:a0:e7:01:e2:0d:af:ff:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:BC:C9:20:3F:7B:8E:23:FA:F6:1A:5C:2B:40:65:4E:2E:5F:89
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nBi8ySA_e44j-vYaXCtAZU4uX4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/24
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.181.0-85.122.183.255
85.122.192.0/18
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
bf:e1:71:70:95:b4:ab:f4:c4:6e:b6:b1:83:0a:41:dc:28:6b:
cf:d9:e4:c6:82:5e:8c:33:aa:3b:e4:19:ac:2d:eb:15:11:a1:
ff:43:dc:62:22:f4:47:20:6f:df:ae:18:30:bb:68:99:14:c5:
40:d1:8f:ac:1e:55:32:2e:66:2d:2c:62:c0:4f:ef:83:e6:be:
f8:9d:40:4a:55:61:98:e9:07:d2:d2:3f:b2:9d:c9:97:92:47:
d4:c1:b0:65:82:e8:6b:35:b2:4d:93:24:e5:2e:de:4a:8b:b9:
03:4b:01:a2:c6:bb:86:35:ff:12:f7:d3:b2:87:ef:aa:c0:a5:
eb:50:a8:59:ed:ac:af:12:1a:43:5a:66:10:e9:b7:a3:d5:26:
0f:5f:d4:c3:d3:27:c0:04:21:5e:53:29:65:31:b9:32:19:6d:
83:2f:f7:07:6b:da:c9:1b:7a:c1:af:42:f7:b2:d0:1d:57:0a:
ef:c2:39:be:6c:af:9a:c8:01:9d:e9:d1:6a:c6:0c:95:4a:a0:
5c:89:e2:7f:1e:59:7c:f8:f6:ab:73:5f:c3:f0:1e:d9:b6:de:
af:37:d2:51:f6:d6:06:df:2e:9e:43:7c:a6:75:b5:81:72:b2:
9f:15:95:23:5a:87:64:37:dc:de:10:06:66:f9:05:4a:c2:d4:
12:9d:ad:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org