Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/y8ZHfUtkuHZ1qAdVjYXjYJyiRyg.roa
File: y8ZHfUtkuHZ1qAdVjYXjYJyiRyg.roa (raw, json)
Hash identifier: 2mY/D5KaEWVj7dfR/CkvR88fvXWV/bkrvRsnkwCKawk=
Subject key identifier: CB:C6:47:7D:4B:64:B8:76:75:A8:07:55:8D:85:E3:60:9C:A2:47:28
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018755927C034CE390402B902EE811B99586
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/y8ZHfUtkuHZ1qAdVjYXjYJyiRyg.roa
Signing time: Thu 06 Apr 2023 07:57:56 +0000
ROA not before: Thu 06 Apr 2023 07:57:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
194.102.184.0/22 maxlen: 22
193.230.184.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Apr 2023 10:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:92:7c:03:4c:e3:90:40:2b:90:2e:e8:11:b9:95:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 6 07:57:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbc6477d4b64b87675a807558d85e3609ca24728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:19:36:93:5d:9a:f4:47:21:b5:2f:56:f7:
1b:3f:75:bb:bf:ad:6f:53:15:7f:3d:9a:ff:ce:2e:
05:e1:04:03:14:52:f9:ea:d0:5f:eb:0a:ef:6a:e4:
cf:7f:96:c6:3c:59:51:50:23:15:17:90:a0:89:d0:
05:e7:a3:f0:19:a5:c6:65:ab:6c:ce:96:82:9b:36:
0e:d1:61:c2:35:86:e5:7c:4b:54:ba:6e:cc:e3:29:
e7:d7:63:0b:ab:5b:b2:f1:98:0d:ee:39:12:3a:84:
a6:4e:25:78:18:d5:bc:60:0e:88:36:57:0a:4a:05:
62:ba:be:f8:34:79:6c:91:a5:1c:e3:41:fe:b8:e0:
88:7b:d6:30:2a:f5:2a:d9:cb:81:e2:33:fd:c3:39:
72:42:b3:a8:09:74:ca:26:09:1f:3a:80:ec:28:c0:
96:74:55:be:8f:41:28:c3:9b:b8:ea:ee:6d:07:10:
10:af:40:fe:3b:7f:bc:e7:b3:d3:01:52:68:b4:10:
3b:92:a5:f5:16:c9:ff:53:65:0c:3d:d7:6c:c6:3e:
59:64:ab:83:59:3d:75:0e:93:05:98:3f:f6:14:49:
9e:1a:41:b3:b0:bc:07:f6:8f:19:4e:68:5e:99:81:
bd:06:57:b7:d8:7a:95:3d:60:0d:3f:22:72:6b:4c:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:47:7D:4B:64:B8:76:75:A8:07:55:8D:85:E3:60:9C:A2:47:28
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/y8ZHfUtkuHZ1qAdVjYXjYJyiRyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/24
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0-194.102.187.255
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
b9:13:27:c4:15:f9:a0:bd:ab:71:fe:36:06:90:eb:51:d5:b8:
86:61:81:fb:46:3c:81:9c:70:6e:c1:22:b8:0c:99:e3:c2:d0:
21:56:f1:f8:94:77:1d:a5:af:03:6c:f2:ce:05:8d:1e:b9:c5:
0c:4e:db:d6:c7:77:ac:80:34:ac:89:86:e4:ff:0d:93:95:23:
f0:ca:47:6e:ba:30:94:20:a9:6b:7c:dc:5a:9d:80:19:72:c9:
20:0a:6f:f4:46:5e:31:de:57:06:5d:15:26:9e:be:9a:9c:d5:
02:01:90:b5:f6:65:c5:17:68:30:c3:d8:15:c0:8f:27:37:ab:
40:08:03:55:10:a1:ea:f2:68:87:71:b1:46:ab:f2:52:f9:7a:
87:55:8a:cf:2a:cd:30:5e:55:67:9c:85:53:bd:4b:4a:41:2d:
16:db:bb:e1:3f:84:32:a7:3f:47:aa:c5:95:5b:fc:78:c2:0f:
5e:66:b1:d1:12:ca:2d:b6:2d:72:dc:a7:f4:3f:22:d1:69:21:
cf:b1:64:31:01:e2:1c:ef:c3:37:6e:c0:94:41:73:2b:1b:6e:
8d:c5:07:a6:84:67:e7:b6:63:67:aa:78:94:00:b4:78:f1:69:
90:c2:a5:d1:25:4b:8b:8e:a0:61:c8:ba:88:87:e0:02:bd:a6:
73:cb:ab:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org