Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zzVXzaZsQ8AlWiGv2HDxxK2SS8o.roa
File: zzVXzaZsQ8AlWiGv2HDxxK2SS8o.roa (raw, json)
Hash identifier: nHsM/3x/lq+bzG1kYc+aP3SfhlNcfKecJnSFU9C4bOM=
Subject key identifier: CF:35:57:CD:A6:6C:43:C0:25:5A:21:AF:D8:70:F1:C4:AD:92:4B:CA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01865126F4C0C20241C3BD6E7452B5DD009E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zzVXzaZsQ8AlWiGv2HDxxK2SS8o.roa
Signing time: Tue 14 Feb 2023 18:19:12 +0000
ROA not before: Tue 14 Feb 2023 18:19:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8708
IP address blocks: 217.156.14.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.106.0/23 maxlen: 23
217.156.92.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.82.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.12.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 12:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:26:f4:c0:c2:02:41:c3:bd:6e:74:52:b5:dd:00:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 14 18:19:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf3557cda66c43c0255a21afd870f1c4ad924bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:7a:71:29:ea:93:72:7c:82:35:a2:00:b1:
37:64:15:a5:a8:10:33:f3:6b:f4:43:9c:11:9f:43:
5e:f5:b2:1b:e1:a3:17:6b:57:d6:81:d7:0d:1c:35:
3e:e3:b6:6f:42:fb:f5:0b:2f:f8:fc:76:95:78:6e:
f5:11:43:33:55:e1:10:8e:08:71:60:db:45:42:3c:
46:7d:b0:a0:35:08:dc:b5:63:ec:67:70:f5:4d:95:
a0:32:30:c2:9f:d8:a8:f9:5d:19:5f:4f:6a:4b:c1:
91:13:06:d3:7c:82:79:64:8c:76:79:08:0c:41:a9:
c3:5d:41:18:78:c9:c9:dd:0c:f3:5e:da:39:0e:d1:
6a:13:80:c6:f4:fe:09:6c:bc:19:1b:23:2e:7f:14:
e3:12:eb:98:33:bd:0c:b1:bc:4d:0d:14:d0:7d:33:
2d:83:71:b1:9a:a1:28:72:df:2f:96:fa:57:8c:65:
20:3b:82:84:e8:e4:95:6f:a6:98:8b:1a:94:ed:95:
cd:4f:64:32:05:78:76:e9:7d:cf:b3:a0:d6:f9:5a:
94:4e:29:21:0c:b7:f0:24:f8:ce:22:43:06:08:aa:
3a:63:b8:11:32:2d:71:0e:32:36:be:4c:93:ed:21:
3d:4a:0b:b9:af:fa:7d:77:91:10:fb:6e:54:e7:0b:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:57:CD:A6:6C:43:C0:25:5A:21:AF:D8:70:F1:C4:AD:92:4B:CA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zzVXzaZsQ8AlWiGv2HDxxK2SS8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/23
80.96.79.0/24
80.96.82.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.226.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.106.0/23
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6d:8e:60:26:94:cf:c0:3d:f8:b5:a1:3c:03:22:15:f4:ba:
b7:77:8b:c1:7d:2a:b7:60:38:1f:49:7e:48:03:3d:21:24:40:
5b:31:03:42:5f:9e:ed:2a:d5:34:81:ea:15:a8:d6:39:2c:be:
c2:90:a7:0a:45:d2:69:95:dc:32:d1:cb:aa:32:7b:89:7e:ad:
77:bb:ba:9b:25:40:65:6d:61:62:3a:74:42:69:90:01:70:a9:
83:a2:cf:3e:97:66:71:5f:b6:bf:15:5c:31:77:35:59:98:15:
d7:ed:7e:d3:1d:e5:7b:39:19:48:d2:4c:98:df:c4:97:09:d7:
da:b4:7e:c1:02:8e:44:d5:99:e3:3b:b4:cf:39:4b:39:82:a1:
b4:78:ad:bb:f1:dc:45:55:63:2c:91:88:72:2c:39:d1:79:ae:
93:94:ea:9a:d7:b3:4e:73:07:5f:69:fa:a0:3c:9e:33:e6:47:
a5:5b:ff:02:d9:d6:4f:55:1c:4d:e6:55:61:d9:59:4c:b9:2d:
bb:e1:f3:78:2e:e4:dc:ed:76:27:c4:5f:cd:ab:95:52:37:93:
11:e1:dc:52:53:dc:e2:4c:5f:dd:44:2f:90:77:c4:57:6f:91:
91:7f:58:ca:4b:a0:b4:ed:da:48:c1:8e:33:89:18:dc:dc:04:
2e:9c:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org