Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/YIZEv43mVMQ1jUtqoJ-pIFGWpL8.roa
File: YIZEv43mVMQ1jUtqoJ-pIFGWpL8.roa (raw, json)
Hash identifier: Ec98J1+c/Bt7mKG1bv8U+XHTVODE0HtLxHwP3a5hoaE=
Subject key identifier: 60:86:44:BF:8D:E6:54:C4:35:8D:4B:6A:A0:9F:A9:20:51:96:A4:BF
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0188B87CAF48B5047E29C9E2FC4475088896
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/YIZEv43mVMQ1jUtqoJ-pIFGWpL8.roa
Signing time: Wed 14 Jun 2023 05:59:18 +0000
ROA not before: Wed 14 Jun 2023 05:59:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9021
IP address blocks: 213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.136.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.149.0/24 maxlen: 24
213.161.148.0/24 maxlen: 24
213.161.152.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
90.158.136.0/21 maxlen: 21
90.158.139.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.2.0/24 maxlen: 24
212.98.1.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
212.98.0.0/20 maxlen: 20
90.158.160.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
90.158.96.0/22 maxlen: 22
90.158.101.0/24 maxlen: 24
90.158.100.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.104.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.111.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.114.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.116.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.128.0/21 maxlen: 21
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.240.0/21 maxlen: 21
90.158.251.0/24 maxlen: 24
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.0.0/24 maxlen: 24
90.159.0.0/22 maxlen: 22
90.159.3.0/24 maxlen: 24
90.159.0.0/16 maxlen: 16
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
213.143.255.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.53.0/24 maxlen: 24
90.158.52.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.55.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.72.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.75.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.0.0/23 maxlen: 23
90.158.0.0/22 maxlen: 22
90.158.0.0/18 maxlen: 18
90.158.3.0/24 maxlen: 24
90.158.0.0/16 maxlen: 16
90.158.8.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/24 maxlen: 24
213.143.226.0/23 maxlen: 23
213.143.228.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.240.0/22 maxlen: 22
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.241.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.243.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.250.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Jul 2023 16:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:7c:af:48:b5:04:7e:29:c9:e2:fc:44:75:08:88:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jun 14 05:59:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=608644bf8de654c4358d4b6aa09fa9205196a4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:5c:2c:d3:fa:c3:1f:67:21:0e:89:e6:a1:
1c:e3:1a:7c:4b:dc:a8:3b:2f:32:5e:ce:72:21:de:
97:98:ac:0a:47:73:9a:fc:44:5d:aa:2f:c8:45:e0:
46:cc:95:de:65:ff:9d:fe:07:69:f0:af:a0:35:26:
64:4e:39:d4:da:7b:86:38:6e:38:1b:d2:af:c3:d9:
25:78:2e:e5:bc:9d:00:49:89:28:0f:f7:2f:a2:d6:
7f:8b:67:c2:92:85:db:62:23:3b:2f:d5:53:46:58:
c7:d2:73:34:47:fe:a3:66:6e:f1:68:7d:db:12:68:
d8:66:94:c3:2b:b7:3b:77:79:24:2a:b8:c8:31:fe:
c2:c6:b1:07:4f:c3:be:b9:6c:37:b1:ca:7c:03:dd:
ec:24:db:4a:56:2f:79:cd:c3:56:7f:cf:90:f6:10:
0b:79:c4:41:2f:89:42:17:fe:a6:e6:de:0e:76:df:
85:e3:d2:b4:de:48:53:16:21:18:43:b9:86:3c:f2:
f1:1b:7f:0e:34:3e:86:e5:cc:92:b2:be:13:a0:ba:
7f:aa:40:b8:cd:aa:32:6a:e0:83:8a:c4:ac:e0:8c:
f8:8a:51:10:ad:c7:d4:92:ec:ea:d0:32:57:20:d7:
8e:53:26:91:62:ef:c6:01:71:2c:30:ea:55:64:9c:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:86:44:BF:8D:E6:54:C4:35:8D:4B:6A:A0:9F:A9:20:51:96:A4:BF
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/YIZEv43mVMQ1jUtqoJ-pIFGWpL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
a1:66:97:df:31:4c:a1:4d:6d:17:93:88:8f:ce:f6:3d:b0:84:
77:67:b8:7a:42:5b:09:2d:f6:96:16:eb:7c:4a:5c:3b:11:ed:
83:ba:1e:ae:74:47:05:56:b8:8f:04:d6:71:0e:61:30:ac:79:
5f:74:7c:f7:4c:22:f0:f4:f6:c6:09:e5:88:ce:8f:ae:80:a8:
f8:13:13:1b:e6:d2:51:81:ff:e8:ad:db:c2:3a:bc:fd:53:5d:
aa:10:ab:9d:a6:2d:c8:79:8b:d2:03:b5:38:c2:ea:76:e4:7b:
80:3c:12:23:b0:5d:40:39:af:47:27:da:50:f3:d6:23:c5:b3:
f6:d5:83:f0:02:3c:ad:b5:53:b4:aa:ed:77:78:f2:d6:19:b4:
13:90:42:f1:3c:43:54:86:12:ea:3d:8c:67:8f:be:26:45:84:
ad:e0:f3:cd:4a:3c:39:78:71:b6:59:70:42:5a:51:ec:c2:a6:
bb:e8:54:23:c4:1d:1c:52:ce:a4:4d:e1:28:4c:39:4d:dc:10:
30:f9:46:a6:82:21:64:84:d7:08:73:7b:1b:25:77:3d:ab:1a:
f8:00:7d:07:d0:e1:54:a6:05:f8:13:c8:4b:5a:68:26:e4:5f:
b1:70:2e:2c:04:10:f2:3c:15:c7:13:73:c9:b3:af:9e:82:9b:
f4:81:ab:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:16 2024 by rpki-client on console-ams.rpki-client.org