Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8_F31PaRJzEX7AvoZEJHI21Ddjs.roa
File: 8_F31PaRJzEX7AvoZEJHI21Ddjs.roa (raw, json)
Hash identifier: i7S5uctItOQ0EeoklFawB4QZhgDJQzEvkeggpEJodpQ=
Subject key identifier: F3:F1:77:D4:F6:91:27:31:17:EC:0B:E8:64:42:47:23:6D:43:76:3B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AA73A4BC623FA6DC3D2F485AB0EB211E1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8_F31PaRJzEX7AvoZEJHI21Ddjs.roa
Signing time: Mon 18 Sep 2023 07:38:50 +0000
ROA not before: Mon 18 Sep 2023 07:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.248.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.40.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.138.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.250.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 08:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:3a:4b:c6:23:fa:6d:c3:d2:f4:85:ab:0e:b2:11:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 18 07:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3f177d4f691273117ec0be8644247236d43763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:65:b8:c4:bf:fc:3c:91:74:4d:0c:d9:5c:
d4:4b:db:f8:2f:54:ee:79:88:bf:6f:8e:91:01:b4:
91:80:27:89:fa:09:4c:a4:16:b9:bd:08:32:39:97:
15:af:60:0e:c9:2e:d4:9c:4e:5b:f3:06:e6:be:14:
c7:bc:b6:6d:ad:22:d2:d8:68:12:19:3d:0d:3e:a4:
7e:e0:42:51:e3:a4:80:11:f3:59:70:29:8e:5b:18:
d1:47:00:ba:0b:a9:1a:5c:3e:24:cf:64:5d:5d:fe:
99:31:52:b8:98:b0:f3:b4:0f:99:9b:b5:47:3a:46:
02:c7:d0:a4:ea:55:4d:3b:61:f2:b9:7a:87:55:36:
c9:e2:ac:c5:33:26:15:24:af:2b:89:4a:cd:96:6a:
12:d0:3d:25:26:c2:ac:2e:d0:d9:fe:25:5e:73:36:
a1:57:ad:f9:ff:11:56:eb:99:a4:1e:c4:fc:b1:40:
5a:07:c4:cc:ed:85:ed:50:3e:4b:c3:92:07:2b:6b:
bd:3e:bf:23:9c:03:5b:55:b9:56:a8:de:35:94:32:
42:22:a2:89:98:a4:92:b6:a8:d6:5f:a8:56:92:46:
b0:13:ae:82:fb:9f:ce:cc:63:98:3e:48:fa:2c:ff:
11:cb:35:3b:90:9c:c7:b0:93:c9:f2:56:54:a5:b6:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F1:77:D4:F6:91:27:31:17:EC:0B:E8:64:42:47:23:6D:43:76:3B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8_F31PaRJzEX7AvoZEJHI21Ddjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.250.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.248.0/24
82.153.250.0/24
89.213.40.0/22
89.213.133.0-89.213.138.255
89.213.141.0/24
89.213.145.0-89.213.146.255
89.213.160.0/24
89.213.163.0-89.213.164.255
89.213.168.0/24
89.213.170.0/24
89.213.172.0-89.213.174.255
89.213.184.0/23
89.213.188.0/23
109.176.208.0/23
109.176.211.0/24
109.176.216.0/21
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0-213.152.62.255
Signature Algorithm: sha256WithRSAEncryption
41:b1:ca:61:07:f4:8f:49:1f:71:56:95:fe:41:b2:47:b5:71:
f3:f2:88:32:e6:d2:3a:d4:69:e0:50:40:80:58:9e:9c:dd:1a:
38:f3:0f:b3:37:c1:7e:d2:37:88:55:fb:65:0c:04:70:4f:5d:
51:f0:af:46:94:06:45:7b:88:3e:01:a1:2c:75:f6:f9:d2:77:
11:6f:e1:87:1d:3e:10:19:c9:1c:af:c3:91:3e:2d:8b:fd:26:
bb:95:a7:9f:b2:0e:0c:0e:8b:4a:ba:3a:00:f6:48:8a:6f:28:
b9:8b:8d:5a:ed:79:8d:e0:21:af:b3:dc:18:c1:6c:9b:5f:30:
27:6d:af:c5:26:8a:a1:56:21:c6:c7:dd:36:f8:7e:95:de:bb:
4e:42:78:6a:5c:44:1d:4c:8b:53:ff:ad:22:e8:31:63:94:3f:
57:7e:69:3f:71:4e:b7:95:f1:54:c8:64:07:2f:bc:4f:88:b5:
04:7c:4b:4f:20:5f:cc:d4:99:67:64:5f:87:e5:dd:db:d5:ac:
52:ca:c6:50:ee:a9:bc:9b:62:53:f2:3d:8f:df:6e:c8:07:85:
df:07:98:f1:43:5a:ea:72:5a:85:84:ce:d4:a7:d1:87:82:e3:
87:cc:bf:53:7c:8f:20:9f:89:81:de:2e:c3:fc:2a:eb:90:4f:
f1:df:f4:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org