Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/09X_9zhofsizXVnjmWjjAbwazZQ.roa
File: 09X_9zhofsizXVnjmWjjAbwazZQ.roa (raw, json)
Hash identifier: 6gvyD0ahgiexdxKf/6U1hP5tFzhlRTJWLntyXQQBswM=
Subject key identifier: D3:D5:FF:F7:38:68:7E:C8:B3:5D:59:E3:99:68:E3:01:BC:1A:CD:94
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0185BF7479D066F8EF76EF9E6FA12333E0DB
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/09X_9zhofsizXVnjmWjjAbwazZQ.roa
Signing time: Tue 17 Jan 2023 11:19:19 +0000
ROA not before: Tue 17 Jan 2023 11:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9021
IP address blocks: 213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.136.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.149.0/24 maxlen: 24
213.161.148.0/24 maxlen: 24
213.161.152.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
90.158.136.0/21 maxlen: 21
90.158.139.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.2.0/24 maxlen: 24
212.98.1.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
212.98.0.0/20 maxlen: 20
90.158.160.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
90.158.96.0/22 maxlen: 22
90.158.101.0/24 maxlen: 24
90.158.100.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.104.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.111.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.114.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.116.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.128.0/21 maxlen: 21
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.240.0/21 maxlen: 21
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.0.0/24 maxlen: 24
90.159.0.0/22 maxlen: 22
90.159.3.0/24 maxlen: 24
90.159.0.0/16 maxlen: 16
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
213.143.255.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.53.0/24 maxlen: 24
90.158.52.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.55.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.72.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.75.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.0.0/23 maxlen: 23
90.158.0.0/22 maxlen: 22
90.158.0.0/18 maxlen: 18
90.158.3.0/24 maxlen: 24
90.158.0.0/16 maxlen: 16
90.158.8.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/24 maxlen: 24
213.143.226.0/23 maxlen: 23
213.143.228.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.240.0/22 maxlen: 22
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.241.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.243.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.250.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 14 Jun 2023 05:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:74:79:d0:66:f8:ef:76:ef:9e:6f:a1:23:33:e0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 17 11:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3d5fff738687ec8b35d59e39968e301bc1acd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:41:7a:fe:ce:92:3a:b8:c5:2f:ec:40:1c:
47:fe:f0:17:5f:1f:05:c9:07:98:03:8c:ed:54:0e:
a4:d4:3b:4b:8f:4f:bd:66:68:eb:1b:19:ab:04:f3:
f4:e8:27:b1:29:09:86:12:e5:c5:69:ee:31:87:80:
0b:f7:7c:63:ad:f6:de:14:fb:f8:0b:3e:69:ef:f6:
bb:f1:6a:26:41:be:bf:c8:01:ea:c0:42:8f:4b:ad:
b5:5b:00:4e:a0:fa:43:71:09:91:fd:9b:8a:e3:a8:
e0:5b:16:21:a2:4e:d4:f7:07:db:c6:ae:68:31:71:
e6:65:75:6c:e4:ef:fa:0c:15:24:68:aa:02:3d:16:
74:40:36:de:65:52:bc:b2:a2:48:34:c7:75:94:05:
9f:58:d4:3e:bc:72:49:d8:ed:8c:c2:c0:0b:48:b2:
48:a4:ac:d9:cb:a4:1e:2c:dd:4c:f0:b4:c8:aa:ab:
fa:f8:be:82:39:0c:ee:a0:5a:46:ec:47:2a:09:25:
c1:04:8e:f9:35:24:a1:3a:c5:0c:7e:31:29:61:43:
a4:d9:8b:94:37:89:3e:d1:3e:62:27:4a:aa:a0:b8:
5d:67:98:a8:7b:46:6c:ef:06:cd:3a:98:6e:8c:61:
f5:46:50:b4:de:f9:a5:5b:ac:9a:4b:42:ab:f8:f8:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D5:FF:F7:38:68:7E:C8:B3:5D:59:E3:99:68:E3:01:BC:1A:CD:94
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/09X_9zhofsizXVnjmWjjAbwazZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
94:3c:ce:3c:ad:7a:23:d8:c4:26:4c:cd:07:2f:56:02:bd:5f:
b4:11:b3:b2:da:6f:28:a5:b7:d8:18:87:94:5a:33:be:48:13:
03:ed:98:ab:0c:4e:69:b7:8a:f4:cf:2c:60:87:3c:1c:20:d8:
c0:56:70:2f:f6:93:53:8c:a7:bd:3d:d8:2f:5b:cf:31:74:ba:
54:d1:82:39:0d:15:a6:6b:be:62:5e:c8:6b:ee:44:c5:55:c9:
95:e3:55:d2:19:9f:f6:d1:f7:94:24:8c:54:69:4f:d0:8b:4c:
63:31:03:c6:0f:88:d7:ab:ed:0d:86:93:de:31:0c:c6:f9:7e:
9b:50:76:42:e5:81:9a:99:40:5f:c3:fb:68:84:3d:11:21:61:
e1:d4:86:bb:53:1f:ba:d8:6f:c4:00:97:dd:f4:65:f9:fb:e8:
c9:0e:72:97:51:ae:05:36:f8:7e:47:76:f5:c6:5f:9f:f4:4a:
b7:ea:5c:37:9c:1a:00:d6:1f:78:8d:4d:e8:94:fb:b2:7c:ce:
e0:29:68:0f:98:7e:bf:63:c8:f7:0f:b8:3f:04:52:e5:b9:ad:
dd:ee:d1:96:f0:38:00:e9:20:8e:1c:ba:08:df:20:8d:7d:e5:
e3:2a:46:b5:14:78:9a:dc:9a:7a:ae:e9:12:d7:6b:95:6a:4c:
19:c8:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:14 2024 by rpki-client on console-fra.rpki-client.org