Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/omlQnDJcIkTdrWW6BQP6A9aSIkM.roa
File: omlQnDJcIkTdrWW6BQP6A9aSIkM.roa (raw, json)
Hash identifier: h+8Hnn8tX8fzUHBdu+D7mi7pI0VeKYcHwjhnkwQVEeU=
Subject key identifier: A2:69:50:9C:32:5C:22:44:DD:AD:65:BA:05:03:FA:03:D6:92:22:43
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018B96515C1905241E192D8E568E34A42FE9
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/omlQnDJcIkTdrWW6BQP6A9aSIkM.roa
Signing time: Fri 03 Nov 2023 17:53:16 +0000
ROA not before: Fri 03 Nov 2023 17:53:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.166.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.42.0/24 maxlen: 24
85.120.40.0/23 maxlen: 23
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
85.122.82.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
85.121.160.0/22 maxlen: 22
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 Nov 2023 10:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:51:5c:19:05:24:1e:19:2d:8e:56:8e:34:a4:2f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 3 17:53:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a269509c325c2244ddad65ba0503fa03d6922243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:d5:2c:ce:07:2e:d2:4e:0c:d5:e8:aa:38:
06:8d:42:46:40:bb:d5:b4:0f:d0:12:13:c9:30:c0:
a5:a0:7b:d7:eb:f6:5a:d2:d8:b8:71:c8:32:78:bc:
8c:16:ff:c2:51:09:89:8e:ba:b3:8b:08:a3:62:1b:
f8:2e:d8:7e:d8:c7:6d:d5:34:d8:5c:67:de:61:7b:
4f:a4:1f:72:14:77:51:6e:ab:06:6c:f2:04:a0:d9:
e1:c6:58:d0:0e:08:1a:d8:3b:72:67:8e:f9:d1:5b:
ae:76:74:74:6d:63:c0:2d:4e:99:d8:5a:1e:df:a0:
d9:79:33:d5:6b:82:d2:04:5b:1d:2e:9d:1d:9e:d9:
73:7a:e2:45:be:5d:a5:76:3b:aa:74:a0:3c:6d:b1:
4b:77:4c:09:a1:72:30:8b:c5:8b:b6:fd:30:b1:44:
b7:0f:1b:26:bc:aa:96:bc:8e:d9:5a:4f:cb:a2:91:
8e:59:1e:1b:94:ce:9f:3b:cf:ca:21:26:22:d5:f5:
54:d4:51:60:7b:d8:ac:53:8f:61:60:4f:cd:48:c7:
a1:39:ef:4e:74:f9:be:0b:6b:3e:ad:87:54:41:10:
fb:d3:c9:18:4e:ec:f9:d6:88:47:02:22:1f:48:74:
28:25:cf:c2:0c:04:24:d8:97:02:d0:43:f2:13:65:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:50:9C:32:5C:22:44:DD:AD:65:BA:05:03:FA:03:D6:92:22:43
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/omlQnDJcIkTdrWW6BQP6A9aSIkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.166.0/24
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.12.0/23
85.120.40.0-85.120.42.255
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.218.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
02:25:53:7c:eb:eb:73:4e:7f:c6:30:eb:b9:88:12:66:25:1e:
3d:2d:87:12:56:64:a5:59:d2:d2:8e:38:3a:89:d5:b7:72:e5:
a5:88:7c:16:fb:ca:fc:98:48:0f:78:6b:7c:89:c9:29:24:df:
aa:5b:ce:6c:95:d1:36:ce:02:76:ad:71:fa:cd:bc:55:c6:7e:
c1:95:fb:7a:a1:a5:f7:ef:cb:2b:37:f6:a0:1c:c5:42:18:1d:
6d:41:aa:c5:6c:8a:6e:21:3a:4b:d6:ee:45:4f:02:d4:8b:58:
a5:29:e6:ea:4d:4d:91:5b:98:4e:cd:00:6b:5b:a5:8c:61:df:
7e:61:a5:42:52:50:9d:f5:0e:86:f3:2d:a5:a2:47:5b:35:d5:
a9:e1:fc:1b:e4:d3:18:7e:42:00:7f:86:69:a1:a2:b1:59:ea:
de:b9:8f:ca:fc:43:7a:33:69:17:a9:69:e5:40:13:38:99:27:
c1:ba:da:f8:ff:e9:54:d4:37:1a:f4:f7:df:72:f1:f3:e7:b3:
0d:f4:8b:a0:6e:53:26:f5:e9:72:42:25:7a:91:fb:4b:cc:75:
46:66:3e:a9:8f:b7:bd:43:74:9d:5d:71:89:e8:47:e3:d5:62:
f8:b3:38:cd:42:48:94:15:23:b0:a3:d4:ca:49:20:23:cf:ff:
5b:e7:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org