Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ODgl6_ymBBpxl8AwTgf0IZRcIgg.roa
File: ODgl6_ymBBpxl8AwTgf0IZRcIgg.roa (raw, json)
Hash identifier: OtWPyXwXxqlzEzCwHj3oQDQ9MdDLnPEKnAvBfFeFtuA=
Subject key identifier: 38:38:25:EB:FC:A6:04:1A:71:97:C0:30:4E:07:F4:21:94:5C:22:08
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A6005734C809925FBE70F676B41387893
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ODgl6_ymBBpxl8AwTgf0IZRcIgg.roa
Signing time: Mon 04 Sep 2023 11:48:04 +0000
ROA not before: Mon 04 Sep 2023 11:48:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.178.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.138.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 11:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:05:73:4c:80:99:25:fb:e7:0f:67:6b:41:38:78:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 4 11:48:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383825ebfca6041a7197c0304e07f421945c2208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:02:82:fd:5a:bf:7b:66:02:ac:ca:ed:95:5f:
6e:22:96:0c:a9:1f:34:31:5e:5e:08:30:92:13:c2:
23:3d:77:2b:1d:12:41:fc:44:db:5a:08:67:f2:5a:
ab:e9:4b:20:f1:48:82:43:bc:98:26:3b:6a:62:fd:
31:06:ca:09:75:c2:c1:83:cc:05:46:0a:d9:43:49:
e2:8a:62:b6:b6:be:ab:ca:41:1c:65:f6:35:27:6f:
b1:14:34:a6:fc:22:0d:54:09:bf:1f:85:3b:e4:94:
9d:a8:c3:9d:74:af:a9:6e:87:c5:96:81:cb:5b:d9:
91:41:80:bd:30:4d:a6:4d:e8:1e:ba:0c:39:f9:85:
4f:d5:92:77:19:b3:5a:e4:15:38:e5:41:39:a6:21:
e2:e4:c4:a5:69:68:e8:f1:0e:92:0e:3c:8c:d4:71:
cb:12:12:a5:8a:e0:d6:4a:bf:4a:ae:09:09:bf:1c:
3b:af:2a:96:5e:5f:47:7b:93:aa:e9:5c:4f:d7:b6:
2a:2b:47:07:a7:11:13:cc:18:c4:da:30:d2:14:9d:
ab:20:81:c9:23:43:7c:49:c6:a4:17:18:e4:39:54:
21:97:c9:a2:13:e0:95:80:30:a6:b5:06:7e:a1:52:
0a:69:de:c6:55:67:bd:01:1c:94:d4:4f:10:a1:3d:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:38:25:EB:FC:A6:04:1A:71:97:C0:30:4E:07:F4:21:94:5C:22:08
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ODgl6_ymBBpxl8AwTgf0IZRcIgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0-82.153.250.255
89.213.5.0/24
89.213.133.0-89.213.141.255
89.213.145.0/24
89.213.148.0-89.213.155.255
89.213.157.0-89.213.160.255
89.213.162.0-89.213.164.255
89.213.167.0-89.213.168.255
89.213.170.0/24
89.213.172.0-89.213.185.255
89.213.188.0/23
109.176.208.0/23
109.176.211.0/24
109.176.216.0/21
109.176.240.0/24
109.176.245.0-109.176.246.255
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:50:a0:3d:b6:62:7d:90:2d:e4:88:c5:e4:af:50:ec:db:f0:
55:a0:e2:c3:6c:92:e4:22:6e:dd:76:d2:10:81:3c:25:0f:95:
57:91:39:64:5a:da:41:09:bf:da:af:ae:34:59:d1:d6:a7:8e:
39:5a:3a:86:f8:b4:56:21:56:04:7a:9e:ba:7d:07:5e:5c:da:
d1:fa:b5:cf:a7:b2:bd:2a:16:c3:dd:75:c4:5f:e0:5e:12:75:
9e:fe:f6:d7:46:24:91:38:25:48:d3:dd:d1:01:20:64:02:66:
6c:06:50:d6:39:40:a7:0e:57:b7:9e:c4:f2:e4:7e:da:5f:fb:
69:f9:50:b4:0f:b0:b2:0f:ce:2d:94:a1:1c:f8:eb:a4:91:3f:
a7:d3:01:ac:79:09:4a:db:fe:28:69:d2:47:15:38:45:22:70:
92:13:ef:68:bb:ae:32:34:fc:ad:c7:16:60:b5:a7:81:a9:d0:
0a:11:27:fe:20:77:7e:50:62:19:e6:30:6a:da:04:68:0f:c9:
97:a9:5f:3a:75:17:97:23:11:44:03:de:08:46:f5:47:3c:5a:
21:27:5b:f8:b1:d2:b0:4e:99:cb:2b:ac:88:eb:72:a2:2f:e9:
bf:44:76:c9:c7:f6:83:f9:9f:94:97:e3:4a:06:0a:2c:8d:de:
f6:23:c1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org