Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c5EU4h57Vp6uVCOEVng4gHEH-s8.roa
File: c5EU4h57Vp6uVCOEVng4gHEH-s8.roa (raw, json)
Hash identifier: ySz87nSeq6UdmO4eh74kkdTCJJwg4o4GgeKZUoeDh6w=
Subject key identifier: 73:91:14:E2:1E:7B:56:9E:AE:54:23:84:56:78:38:80:71:07:FA:CF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189CEFCD263A0EF2D2CD74229977A504599
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c5EU4h57Vp6uVCOEVng4gHEH-s8.roa
Signing time: Mon 07 Aug 2023 07:53:42 +0000
ROA not before: Mon 07 Aug 2023 07:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.214.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.243.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.41.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.186.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.187.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.213.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 09:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:fc:d2:63:a0:ef:2d:2c:d7:42:29:97:7a:50:45:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 07:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=739114e21e7b569eae542384567838807107facf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cf:2a:1f:25:46:cd:18:0b:b0:68:5c:6a:d7:
7e:d5:4a:5a:44:fa:d1:6c:4d:54:f1:04:9e:54:7a:
7f:51:65:90:ba:a8:2a:aa:fa:3f:99:30:a7:1a:64:
8c:cc:38:0a:f3:a8:95:13:55:8d:a8:83:c7:58:66:
fb:3c:99:1d:a9:0a:db:7c:f4:b3:cf:d1:03:17:6c:
c9:00:87:63:f5:36:14:16:06:4a:04:c1:85:03:93:
b1:15:ed:9d:3a:cb:04:f6:71:1c:e2:bd:9b:f9:76:
3c:4b:63:5d:5e:36:dc:6e:c5:f5:7b:25:48:41:8b:
89:d6:aa:f1:42:cd:58:67:36:05:9a:28:0b:3e:69:
03:b3:70:55:1f:a8:4c:62:40:f9:ed:19:3f:56:ab:
e3:ef:36:5a:98:19:a9:1c:d0:d1:98:7f:6a:09:b6:
bd:22:c4:e3:9e:3a:bb:39:15:31:d7:ff:12:c4:d0:
43:0f:f7:63:fb:f0:fa:9e:eb:60:a6:6b:0f:95:81:
b2:b5:7b:91:f4:3d:07:ed:b3:89:99:97:a9:86:ba:
bb:e6:fc:84:be:e9:eb:56:92:74:aa:70:33:db:e7:
1b:08:c3:29:69:fa:ae:cf:fc:b9:ae:a8:17:aa:18:
7a:58:98:8f:5f:38:f1:fa:ae:c1:5c:6c:1f:a2:8f:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:14:E2:1E:7B:56:9E:AE:54:23:84:56:78:38:80:71:07:FA:CF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c5EU4h57Vp6uVCOEVng4gHEH-s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0/24
89.213.7.0/24
89.213.41.0-89.213.42.255
89.213.44.0/24
89.213.136.0/24
89.213.139.0-89.213.140.255
89.213.148.0-89.213.150.255
89.213.152.0/24
89.213.155.0-89.213.158.255
89.213.160.0/24
89.213.162.0/23
89.213.168.0/23
89.213.173.0/24
89.213.175.0-89.213.177.255
89.213.179.0-89.213.182.255
89.213.184.0/22
109.176.211.0/24
109.176.213.0-109.176.214.255
109.176.218.0/24
109.176.220.0/24
109.176.240.0/24
109.176.242.0-109.176.244.255
109.176.247.0-109.176.248.255
109.176.250.0/24
185.49.125.0-185.49.127.255
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
05:98:0d:91:30:10:fb:97:2b:3b:35:d9:49:f0:86:a5:ae:9f:
e6:c6:e0:da:18:0c:5d:0a:bb:7f:ae:98:f0:45:a4:ee:10:9a:
55:2c:ef:4b:36:65:39:4c:8c:9f:8f:54:67:9d:67:92:1b:96:
4a:d7:56:a5:e9:55:07:bf:7c:58:69:a5:95:40:23:0c:18:ce:
0d:72:55:48:39:ef:5a:ef:8f:d8:82:6a:08:9a:95:c4:8a:64:
8c:49:17:ad:11:52:b5:f0:2a:22:82:26:48:08:3b:6d:c4:78:
7b:a4:4e:d5:93:22:87:58:7a:36:a7:c8:2d:20:00:f5:a4:62:
f9:a9:d7:b9:b0:a7:0d:28:1e:df:50:c9:74:7e:94:12:96:4a:
e6:89:01:a9:0c:91:c6:7c:d0:b9:93:f0:38:a4:57:10:b5:c1:
bd:7a:42:23:43:d9:2b:7d:d5:17:f7:ee:46:fa:7d:12:7c:5e:
bd:db:be:61:d5:48:6d:ff:8d:c8:02:d6:d0:6f:91:7e:e5:ae:
ac:5c:1b:cc:19:89:a9:e0:35:90:f2:ea:57:3a:b1:7e:3e:a4:
3e:91:9e:45:cf:f0:63:60:9a:be:51:61:31:3b:a7:bb:6c:d2:
bb:aa:1a:32:44:98:02:39:05:82:48:5e:57:1d:ac:a4:8b:72:
dc:9b:d4:e4
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISAYnO/NJjoO8tLNdCKZd6UEWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODA3MDc1MzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzkxMTRlMjFlN2I1NjllYWU1NDIzODQ1Njc4Mzg4MDcxMDdmYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi88qHyVGzRgLsGhcatd+1UpaRPrR
bE1U8QSeVHp/UWWQuqgqqvo/mTCnGmSMzDgK86iVE1WNqIPHWGb7PJkdqQrbfPSz
z9EDF2zJAIdj9TYUFgZKBMGFA5OxFe2dOssE9nEc4r2b+XY8S2NdXjbcbsX1eyVI
QYuJ1qrxQs1YZzYFmigLPmkDs3BVH6hMYkD57Rk/Vqvj7zZamBmpHNDRmH9qCba9
IsTjnjq7ORUx1/8SxNBDD/dj+/D6nutgpmsPlYGytXuR9D0H7bOJmZephrq75vyE
vunrVpJ0qnAz2+cbCMMpafquz/y5rqgXqhh6WJiPXzjx+q7BXGwfoo+q8QIDAQAB
o4IDYTCCA10wHQYDVR0OBBYEFHORFOIee1aerlQjhFZ4OIBxB/rPMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYzVFVTRoNTdWcDZ1VkNPRVZuZzRnSEVILXM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBdQYIKwYBBQUHAQcBAf8EggFkMIIBYDCCAVwEAgABMIIB
VAMEAFEFnAMEAFGoKQMEAFGodAMEAFGodwMEAFGoewMEAFKYbwMEAVKY/AMEAFKY
/wMEAFKZAQMEAFKZSQMEAFKZTjAMAwQDUpmIAwQAUpmMAwQAUpndAwQAUpnfAwQA
UpnjAwQAUpnwAwQAUpn5AwQAWdUHMAwDBABZ1SkDBABZ1SoDBABZ1SwDBABZ1Ygw
DAMEAFnViwMEAFnVjDAMAwQCWdWUAwQAWdWWAwQAWdWYMAwDBABZ1ZsDBABZ1Z4D
BABZ1aADBAFZ1aIDBAFZ1agDBABZ1a0wDAMEAFnVrwMEAVnVsDAMAwQAWdWzAwQA
WdW2AwQCWdW4AwQAbbDTMAwDBABtsNUDBABtsNYDBABtsNoDBABtsNwDBABtsPAw
DAMEAW2w8gMEAG2w9DAMAwQAbbD3AwQAbbD4AwQAbbD6MAwDBAC5MX0DBAe5MQAD
BADVmCowDQYJKoZIhvcNAQELBQADggEBAAWYDZEwEPuXKzs12UnwhqWun+bG4NoY
DF0Ku3+umPBFpO4QmlUs70s2ZTlMjJ+PVGedZ5IblkrXVqXpVQe/fFhppZVAIwwY
zg1yVUg571rvj9iCagialcSKZIxJF60RUrXwKiKCJkgIO23EeHukTtWTIodYejan
yC0gAPWkYvmp17mwpw0oHt9QyXR+lBKWSuaJAakMkcZ80LmT8DikVxC1wb16QiND
2St91Rf37kb6fRJ8Xr3bvmHVSG3/jcgC1tBvkX7lrqxcG8wZiangNZDy6lc6sX4+
pD6RnkXP8GNgmr5RYTE7p7ts0ruqGjJEmAI5BYJIXlcdrKSLctyb1OQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org