Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Jt0A7bWm7QuwQNSnPSZprF9zN_o.roa
File: Jt0A7bWm7QuwQNSnPSZprF9zN_o.roa (raw, json)
Hash identifier: FMY5hzPZKf+zGegfx4yDW3JATryNvCLMM96RsJnAE8g=
Subject key identifier: 26:DD:00:ED:B5:A6:ED:0B:B0:40:D4:A7:3D:26:69:AC:5F:73:37:FA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AAC7DF4AE7B2D7799C3393B17620CE2FA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Jt0A7bWm7QuwQNSnPSZprF9zN_o.roa
Signing time: Tue 19 Sep 2023 08:10:50 +0000
ROA not before: Tue 19 Sep 2023 08:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.248.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.40.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.138.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.250.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 10:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:7d:f4:ae:7b:2d:77:99:c3:39:3b:17:62:0c:e2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 19 08:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26dd00edb5a6ed0bb040d4a73d2669ac5f7337fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:18:32:71:83:ff:b1:95:42:36:d9:8b:14:
3a:40:0e:86:43:4b:be:ed:e3:5f:ea:ea:f0:39:62:
a3:c9:ea:34:c2:32:69:b0:37:99:38:72:8e:61:21:
89:14:94:b2:2b:08:ff:f4:d1:d3:85:51:81:47:f8:
61:b2:45:45:29:5c:62:25:a6:c2:4d:e4:b1:30:b5:
1a:f3:8e:d2:99:36:e2:4c:4a:5c:19:5b:77:03:b8:
3a:3e:90:5c:c2:c9:22:ce:04:5a:e3:5d:24:6c:c0:
5e:b5:e8:41:03:7b:ff:d5:21:8e:e8:9e:21:4c:b0:
eb:35:00:57:f4:20:2c:28:bc:e6:4e:23:96:32:9a:
72:41:16:9f:b4:c4:63:19:5c:a6:d2:38:14:d6:93:
cd:6c:17:f7:c4:6e:9f:1f:9d:5a:aa:5c:81:51:74:
66:7e:f2:bf:a3:c7:69:7c:71:80:2e:15:da:0f:c7:
82:2b:60:96:4b:ae:59:a5:bb:c5:ca:88:a2:db:16:
83:45:95:52:68:ec:a6:96:1a:32:e6:77:22:25:85:
85:43:77:01:ba:3d:bb:8d:41:60:a4:85:7a:ae:1e:
4b:75:e6:f9:60:86:aa:33:d6:90:58:35:23:a5:c6:
09:71:2a:f1:ff:5b:36:90:ae:e8:84:d2:05:d0:41:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:00:ED:B5:A6:ED:0B:B0:40:D4:A7:3D:26:69:AC:5F:73:37:FA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Jt0A7bWm7QuwQNSnPSZprF9zN_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.250.0/24
82.152.252.0/23
82.152.255.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.227.0/24
82.153.240.0/24
82.153.248.0/24
82.153.250.0/24
89.213.40.0/22
89.213.133.0-89.213.138.255
89.213.141.0/24
89.213.145.0-89.213.146.255
89.213.160.0/24
89.213.163.0-89.213.164.255
89.213.168.0/24
89.213.170.0/24
89.213.172.0-89.213.174.255
89.213.184.0/23
89.213.188.0/23
109.176.208.0/23
109.176.211.0/24
109.176.216.0/21
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0-213.152.62.255
Signature Algorithm: sha256WithRSAEncryption
0c:61:0c:26:c4:ee:8c:3b:57:93:45:6a:18:58:5b:cb:9e:37:
d9:9c:ca:59:30:23:52:ba:de:b3:46:20:a9:9d:bc:41:67:e5:
19:e6:9c:41:4b:2d:21:31:cf:09:2a:59:36:6c:05:9c:ef:5b:
bf:53:18:5f:5d:58:b9:b6:36:13:b3:7e:22:3b:0f:58:ad:f0:
06:67:3a:31:45:c0:41:47:3b:01:66:b2:84:c1:a2:65:e1:0f:
38:f2:db:26:14:42:47:17:1e:33:31:05:17:64:44:e3:c7:b1:
e0:11:e0:cb:2f:bf:9a:2c:68:bb:b5:94:d1:df:5d:03:3b:99:
b6:a9:af:80:fc:d4:fe:ea:fc:48:37:9e:46:ce:42:e4:f9:2f:
01:ed:d1:c5:a2:9a:9f:ed:04:b5:72:a2:b2:55:67:8f:5a:72:
4e:9c:ea:09:ff:97:11:11:fb:71:2b:e6:98:f7:1f:30:a9:79:
3d:32:b3:28:77:8f:df:6a:ca:9b:58:84:06:de:c7:e5:5c:89:
ab:da:88:00:06:71:6b:f2:96:d3:30:ea:65:7e:55:65:26:e6:
12:b1:4c:5c:e5:5d:d2:08:ad:37:25:86:96:32:00:ed:b5:ca:
99:e9:a8:43:19:b9:4d:d9:0e:cc:b7:99:85:5f:a8:f7:cc:d0:
e1:84:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org