Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yn8_wFSm8-43kWvW648zNV2QFaM.roa
File: yn8_wFSm8-43kWvW648zNV2QFaM.roa (raw, json)
Hash identifier: Xn5tX9NGS7RzKh9qCwkgyO+GyfNt0bsUB1AmH+EG+Zw=
Subject key identifier: CA:7F:3F:C0:54:A6:F3:EE:37:91:6B:D6:EB:8F:33:35:5D:90:15:A3
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01947FDC87F94CCC25D38FAD9082B03AE1B4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yn8_wFSm8-43kWvW648zNV2QFaM.roa
Signing time: Sun 19 Jan 2025 18:39:06 +0000
ROA not before: Sun 19 Jan 2025 18:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.14.0/23 maxlen: 23
80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.115.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.183.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.8.0/24 maxlen: 24
80.97.15.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.64.0/21 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
85.123.64.0/18 maxlen: 18
85.123.128.0/17 maxlen: 17
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.191.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.168.0/24 maxlen: 24
194.102.169.0/24 maxlen: 24
194.102.170.0/24 maxlen: 24
194.102.171.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.105.11.0/24 maxlen: 24
194.105.16.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
194.176.189.0/24 maxlen: 24
212.35.128.0/19 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 27 Jan 2025 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7f:dc:87:f9:4c:cc:25:d3:8f:ad:90:82:b0:3a:e1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 19 18:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca7f3fc054a6f3ee37916bd6eb8f33355d9015a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:1f:84:0f:ab:eb:17:eb:1a:46:8d:4f:e3:
36:4a:0a:0a:f1:03:6a:3f:08:83:cb:d9:e8:29:9b:
d5:13:09:14:98:06:36:84:b2:e0:55:f8:e3:17:51:
cc:fc:5d:86:33:49:32:a8:ce:23:b3:c7:f5:66:2c:
79:bb:19:7a:4f:7a:ea:2a:ce:ef:6d:13:7e:6b:27:
d6:58:d5:6f:67:7a:57:58:e0:80:97:a0:c0:2e:b3:
db:d8:f3:66:b9:d0:43:c1:e7:8e:7c:f5:4c:44:7b:
ba:32:ba:a6:0a:2c:91:e3:90:ee:7b:56:e2:99:c1:
01:84:ef:19:4d:96:b6:cf:c4:c7:59:85:f1:d8:09:
c7:2c:8d:fe:91:21:ca:9c:2d:7e:1d:fc:42:ac:64:
04:7f:6a:e3:08:a6:75:5e:0f:bd:16:40:33:bf:6e:
3f:6d:8d:d0:1c:a2:13:52:bb:7f:48:0d:02:1f:7a:
5d:e0:e7:8b:5a:5c:77:3d:5a:20:80:10:f2:a9:c5:
e1:03:a6:c3:51:fe:f0:3d:d8:54:fd:46:8e:5a:49:
dd:e4:46:56:03:98:1c:64:d5:46:48:6b:23:3c:02:
58:30:ee:91:c0:22:71:a5:51:4d:6a:b6:25:d6:d6:
13:62:77:28:f0:a6:85:53:1e:87:6c:34:27:fd:99:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7F:3F:C0:54:A6:F3:EE:37:91:6B:D6:EB:8F:33:35:5D:90:15:A3
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yn8_wFSm8-43kWvW648zNV2QFaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.14.0/23
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.115.0/24
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.183.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.8.0/24
80.97.15.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
85.120.12.0/23
85.120.40.0/23
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0-85.121.71.255
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
85.123.64.0-85.123.255.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.191.0-193.230.192.255
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.168.0/22
194.102.177.0/24
194.102.247.0/24
194.105.6.0/24
194.105.11.0/24
194.105.16.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.176.189.0/24
212.35.128.0/19
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.96.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
90:00:b3:83:78:a4:76:db:0e:e8:ad:8a:99:fb:44:cd:40:0e:
99:3e:d9:03:ff:39:a3:e0:d6:86:4b:b6:61:2b:8e:11:23:9e:
6c:d7:2f:5e:1b:03:ae:94:b7:91:68:c2:82:56:8d:de:7c:9c:
d5:aa:e9:6e:3c:74:d0:21:0c:9c:7e:b4:f6:78:ca:52:8b:32:
ea:24:c1:82:ef:64:1f:c5:1b:3c:94:a3:d3:19:89:5c:c7:c0:
e6:67:04:0b:d6:7a:65:e8:f2:ed:05:de:f3:2d:9a:f0:a9:f8:
8c:b8:50:5a:d5:db:28:77:0c:ec:94:0c:c8:36:eb:c5:af:3e:
11:27:2d:01:b5:61:32:39:98:be:cd:78:b3:96:c4:42:de:39:
c8:c3:6b:d8:fb:62:7f:aa:e3:a5:2c:1c:91:9d:04:e7:27:5b:
1e:d6:d6:61:d0:a0:09:36:52:74:1e:57:23:4d:96:03:33:c5:
e5:08:32:bd:8d:69:69:50:34:7e:cc:6c:ea:28:1a:97:d0:6b:
a2:c4:ff:62:ed:c4:c1:4f:ca:21:d6:15:d0:c9:9a:ec:2c:61:
e7:6e:47:ec:de:dd:5d:18:33:3b:a4:95:84:55:af:1f:84:f8:
61:10:58:ff:06:37:3b:01:72:d6:bf:51:11:92:b5:42:ea:f9:
a5:7d:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:46 2025 by rpki-client