Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ab18PrMTdtIApvCkcUI1kMpW9jw.roa
File: ab18PrMTdtIApvCkcUI1kMpW9jw.roa (raw, json)
Hash identifier: s0I9JlC3NFUa2yuTJOPSPoJzfl0xbob0w1dguAsoJIs=
Subject key identifier: 69:BD:7C:3E:B3:13:76:D2:00:A6:F0:A4:71:42:35:90:CA:56:F6:3C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A933B95CD8755CE2F0ED3446B1B239A10
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ab18PrMTdtIApvCkcUI1kMpW9jw.roa
Signing time: Thu 14 Sep 2023 10:27:50 +0000
ROA not before: Thu 14 Sep 2023 10:27:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.138.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 14:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:3b:95:cd:87:55:ce:2f:0e:d3:44:6b:1b:23:9a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 14 10:27:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69bd7c3eb31376d200a6f0a471423590ca56f63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:19:8f:3a:11:2b:05:5a:f3:d0:69:47:b9:
20:c6:a9:d5:b8:04:ba:42:c9:05:47:b9:97:fc:43:
de:22:5c:20:52:0f:75:e3:75:37:8d:9a:05:af:67:
41:3f:f5:61:68:2a:9e:c1:cc:fb:11:75:d6:15:f9:
1b:de:90:c2:f1:79:a4:95:20:40:eb:c8:60:81:5d:
d7:cc:fb:6f:60:44:38:38:57:c6:58:1f:96:08:ba:
4c:b1:65:6b:24:0f:fd:48:95:0c:ae:62:11:3c:31:
dd:07:d3:27:a2:fc:fc:bb:0d:d9:c0:4a:47:8d:48:
bd:9d:21:a5:61:d9:7e:32:7b:25:b0:8d:4d:80:06:
f6:2c:a8:3c:6f:51:1f:e6:73:a6:b6:08:5d:74:2e:
29:92:f0:35:bd:52:ac:23:81:3d:22:9c:1d:66:6a:
c7:cc:1f:e8:6e:a5:5d:7a:b6:65:66:42:e5:df:ab:
dd:8f:b8:bb:84:4d:48:be:f8:ce:3b:8a:16:e4:23:
2e:04:78:b2:41:ad:79:8f:28:c0:f6:d1:d5:4b:c2:
06:e3:9f:bb:ef:4b:e0:8f:d6:45:75:c4:d0:82:78:
f6:2d:7b:75:e1:73:01:d5:5d:c4:56:13:d5:96:d3:
a5:36:04:27:d0:1b:b7:fe:12:58:c2:51:ee:1d:c1:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BD:7C:3E:B3:13:76:D2:00:A6:F0:A4:71:42:35:90:CA:56:F6:3C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ab18PrMTdtIApvCkcUI1kMpW9jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.250.0/24
89.213.133.0-89.213.138.255
89.213.141.0/24
89.213.145.0-89.213.146.255
89.213.160.0/24
89.213.162.0-89.213.164.255
89.213.168.0/24
89.213.170.0/24
89.213.172.0-89.213.174.255
89.213.184.0/23
89.213.188.0/23
109.176.208.0/23
109.176.211.0/24
109.176.216.0/21
109.176.245.0-109.176.246.255
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0-213.152.62.255
Signature Algorithm: sha256WithRSAEncryption
4a:6a:3a:72:79:2d:01:30:f9:e1:1e:5c:b1:a2:38:f9:8c:7f:
c5:87:d2:7b:eb:52:ff:c1:eb:25:3f:64:13:8c:d9:09:22:25:
65:06:3a:eb:90:cf:45:61:e5:0b:f0:67:8b:83:60:8a:c4:1c:
64:63:bb:57:4f:ee:da:00:36:44:4c:2f:c4:43:8d:49:f6:a5:
99:70:16:af:ce:5b:94:6e:1e:62:64:9d:1c:c6:99:61:96:56:
a3:25:54:ce:37:af:91:b1:f4:39:5e:fe:c5:d0:78:c7:4d:88:
30:7f:00:07:96:62:4f:7c:2b:ef:bc:45:36:8a:7e:4c:2a:94:
af:5e:98:26:3a:78:01:54:94:6b:0f:7d:7d:2f:38:48:cd:62:
5e:25:63:95:da:f2:5d:8d:d9:fc:39:ca:c4:6d:84:38:a9:81:
05:f3:4f:c0:9d:91:cb:6a:bf:15:21:fc:84:f4:6f:f0:b0:45:
ca:8d:3b:89:de:00:b6:d2:f0:f5:f4:42:bf:1d:32:07:c7:57:
7e:6d:ee:61:71:e6:ba:a7:b0:fc:06:36:c5:4a:0b:44:2c:20:
61:88:c7:90:ee:b7:48:9d:5e:1f:96:6b:f8:fd:bd:3b:b9:48:
8e:08:d2:23:09:1b:88:6a:4c:fd:ed:bf:59:9b:40:5e:55:20:
f8:e6:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org