Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PjNlbZpnx-8BX6yoAsf3UzaZfnA.roa
File: PjNlbZpnx-8BX6yoAsf3UzaZfnA.roa (raw, json)
Hash identifier: Z9F5R1pNvTIlHW9uH+0QJSNbNgQtwMAzc2B1ANAtqvM=
Subject key identifier: 3E:33:65:6D:9A:67:C7:EF:01:5F:AC:A8:02:C7:F7:53:36:99:7E:70
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A64442F73E2D6495DD92CF4E254B8B3E7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PjNlbZpnx-8BX6yoAsf3UzaZfnA.roa
Signing time: Tue 05 Sep 2023 07:35:04 +0000
ROA not before: Tue 05 Sep 2023 07:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.138.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.156.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 07:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:44:2f:73:e2:d6:49:5d:d9:2c:f4:e2:54:b8:b3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 5 07:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e33656d9a67c7ef015faca802c7f75336997e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b0:37:5e:a3:84:25:ee:12:2b:d4:e4:44:d5:
4f:ee:22:e1:76:8c:78:85:2f:92:2d:e7:cc:de:a4:
6a:f0:cd:71:d1:34:a1:f8:3b:d7:28:39:c7:2c:58:
bc:53:89:6c:ef:2e:90:22:8e:cd:a2:94:be:0a:d9:
4c:44:b2:9c:fc:27:85:4c:26:44:29:e4:40:da:8d:
37:19:17:d3:c8:15:e1:b6:64:cf:da:92:f2:8d:a3:
c0:3a:6c:fa:60:50:87:1b:85:32:da:73:36:0c:af:
ea:6d:ae:4f:e1:93:fc:2a:c0:f2:4d:ee:e1:88:b4:
b5:2e:73:3a:9e:3d:e0:62:0c:38:a6:c2:da:5c:b6:
a1:7e:a2:f9:9d:b9:6c:d3:d5:74:df:5c:ea:bf:99:
05:56:57:09:29:a3:f6:de:48:18:fc:75:54:57:ff:
28:6f:bb:4e:df:0d:fb:9b:05:16:0a:11:b7:43:22:
a9:f5:78:bd:a1:c3:d7:bd:cb:21:87:a6:c3:99:b0:
19:9a:a0:31:6f:93:ef:45:48:42:9c:9f:93:cb:8a:
fb:ee:ef:8a:b7:1b:3d:64:ce:85:d5:de:c3:04:bf:
3c:8b:41:0a:25:40:84:4e:04:c6:70:c1:93:9c:67:
6b:4c:8b:7d:ed:2b:ea:25:41:0c:a4:44:94:3c:27:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:33:65:6D:9A:67:C7:EF:01:5F:AC:A8:02:C7:F7:53:36:99:7E:70
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PjNlbZpnx-8BX6yoAsf3UzaZfnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0-82.153.250.255
89.213.133.0-89.213.139.255
89.213.141.0/24
89.213.145.0/24
89.213.156.0-89.213.158.255
89.213.160.0/24
89.213.162.0-89.213.164.255
89.213.167.0-89.213.168.255
89.213.170.0/24
89.213.172.0-89.213.174.255
89.213.184.0/23
89.213.188.0/23
109.176.208.0/23
109.176.211.0/24
109.176.216.0/21
109.176.245.0-109.176.246.255
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1e:89:17:23:b1:52:d5:34:a7:cb:22:70:67:77:67:a8:ab:
41:22:4e:7b:3b:6c:c3:1a:0c:67:e5:f1:45:07:6b:68:fc:df:
f5:35:46:a6:c2:2b:4c:17:7c:ab:b9:e7:4a:92:4d:f2:ab:40:
c9:1f:d1:ed:d3:88:79:c8:41:b4:2f:0c:94:e0:5e:06:a3:07:
30:c5:a9:84:42:98:b2:77:eb:10:e5:52:e0:db:bf:cc:8f:50:
13:31:e4:27:a3:0d:50:73:f2:1b:b2:2f:2a:3f:f9:65:6a:58:
1d:10:c3:b5:0e:6d:bb:00:75:bf:fb:ec:2e:47:50:36:e1:55:
f8:85:2e:42:d7:c1:79:d2:56:12:a7:3f:81:e4:5c:c6:cf:03:
07:3b:85:e0:04:86:fe:1a:67:0d:91:9e:34:69:a8:a1:c1:b3:
ab:1a:3d:69:36:c8:67:38:e8:65:5f:bc:49:13:ad:39:bf:99:
67:15:fd:d7:e1:89:49:34:ee:17:ab:91:6c:b8:18:02:0e:06:
4b:b9:25:41:1c:52:f5:5f:85:29:6c:cd:f7:41:ab:c7:4c:81:
96:c7:59:8a:ba:61:78:9a:dd:b0:e8:3a:78:07:22:c4:d8:d9:
cc:69:66:17:77:2a:54:c1:0e:70:ed:71:a0:c5:02:7b:51:38:
16:b5:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org