Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iJe-I4Doq27cGygbKJNzkYS69kc.roa
File: iJe-I4Doq27cGygbKJNzkYS69kc.roa (raw, json)
Hash identifier: 1GlE9AzFK76KSSfrZVA2iy2EynMpYWe2SX7ozQrcYgA=
Subject key identifier: 88:97:BE:23:80:E8:AB:6E:DC:1B:28:1B:28:93:73:91:84:BA:F6:47
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AACF064DF680D9E334B77FD71EE9B41B1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iJe-I4Doq27cGygbKJNzkYS69kc.roa
Signing time: Tue 19 Sep 2023 10:15:50 +0000
ROA not before: Tue 19 Sep 2023 10:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.248.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.40.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.138.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.250.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 14:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:f0:64:df:68:0d:9e:33:4b:77:fd:71:ee:9b:41:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 19 10:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8897be2380e8ab6edc1b281b2893739184baf647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:04:40:8c:8a:a5:03:3b:a5:3a:bb:55:42:96:
07:f8:1a:7b:b5:da:f4:b0:e6:ca:34:fd:77:67:b8:
5c:2b:3f:d2:78:4b:90:f6:2c:52:ce:5d:63:8b:81:
c9:14:db:07:b6:95:77:96:42:03:d1:30:b7:81:fb:
ee:96:96:22:4d:78:d3:49:a6:42:b1:c1:42:80:1c:
16:9e:8c:5e:19:6f:ff:42:81:e3:7e:99:e9:76:00:
69:34:d4:6a:b7:18:34:f7:1a:1a:d5:4b:d6:ce:7c:
04:b2:b9:6f:69:d0:4a:9a:33:25:50:c4:91:5e:51:
04:c4:48:31:17:b1:dc:08:14:a4:8f:bf:c2:1f:be:
71:3c:4e:18:31:97:5b:c6:57:1c:d8:b9:3e:b7:8a:
b5:62:93:7c:47:32:4d:24:81:53:ba:8e:39:88:fb:
70:6e:02:4f:2c:3c:2c:52:a8:4d:cb:1d:b7:56:e2:
f1:9b:7a:92:0c:7a:e7:f2:fb:2d:5c:c8:3b:c6:23:
b7:ff:38:3b:a3:32:5e:81:31:63:b1:d1:49:31:b1:
37:cb:7f:a5:93:f0:1e:c2:ba:65:d8:c4:7e:05:1d:
dc:7f:e5:83:5d:3c:47:c6:2b:3b:97:74:c9:ee:18:
7d:43:86:29:07:09:ef:17:0d:5e:b0:d4:79:53:cc:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:BE:23:80:E8:AB:6E:DC:1B:28:1B:28:93:73:91:84:BA:F6:47
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iJe-I4Doq27cGygbKJNzkYS69kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.250.0/24
82.152.252.0/23
82.152.255.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.227.0/24
82.153.240.0/24
82.153.248.0/24
82.153.250.0/24
89.213.40.0/22
89.213.133.0-89.213.138.255
89.213.141.0/24
89.213.145.0-89.213.146.255
89.213.160.0/24
89.213.163.0-89.213.164.255
89.213.168.0/24
89.213.170.0/24
89.213.172.0-89.213.174.255
89.213.184.0/23
89.213.188.0/23
109.176.209.0/24
109.176.211.0/24
109.176.216.0/21
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0-213.152.62.255
Signature Algorithm: sha256WithRSAEncryption
99:44:b4:67:33:6c:66:20:11:e1:71:d8:68:0b:db:02:b2:3d:
cb:05:0c:30:27:4a:99:72:a1:b6:2e:29:52:54:bb:5b:c9:89:
e2:05:47:70:fe:f4:68:35:5b:5e:02:58:37:49:97:df:be:05:
c7:cf:76:2d:02:e1:c8:0d:1e:13:4f:7f:a0:a3:55:9f:0e:a5:
f9:0d:fd:f7:20:c8:b6:01:bc:3d:fc:c0:2e:17:e2:65:c4:1c:
32:f0:5c:d0:57:ac:d1:9b:eb:64:73:2b:57:da:6b:22:30:1e:
9d:81:f9:b9:2d:c4:e7:7e:a1:54:29:42:b1:74:88:ea:10:a3:
12:06:05:81:d1:25:c7:5c:81:45:0f:e7:9f:ec:79:cd:d9:2d:
ce:23:6a:c3:1d:10:b4:82:42:f1:0e:91:0a:dd:64:ac:75:52:
08:73:89:2b:a4:34:3c:99:22:23:f3:49:f9:1d:76:18:f1:f6:
bc:bd:ca:e8:79:b7:b3:30:24:bb:ad:30:bd:8c:b1:4e:f7:b1:
d1:5e:1e:2b:ed:f8:da:e7:f0:5e:03:3d:08:cc:62:d4:63:ff:
bf:59:08:df:68:65:cb:c8:4b:70:b1:e2:0e:9a:11:5e:43:11:
9e:4b:07:a9:33:ed:e3:5a:24:79:72:b3:0d:bd:8b:e2:a9:65:
33:e8:ce:56
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgISAYqs8GTfaA2eM0t3/XHum0GxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwOTE5MTAxNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODk3YmUyMzgwZThhYjZlZGMxYjI4MWIyODkzNzM5MTg0YmFmNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwRAjIqlAzulOrtVQpYH+Bp7tdr0
sObKNP13Z7hcKz/SeEuQ9ixSzl1ji4HJFNsHtpV3lkID0TC3gfvulpYiTXjTSaZC
scFCgBwWnoxeGW//QoHjfpnpdgBpNNRqtxg09xoa1UvWznwEsrlvadBKmjMlUMSR
XlEExEgxF7HcCBSkj7/CH75xPE4YMZdbxlcc2Lk+t4q1YpN8RzJNJIFTuo45iPtw
bgJPLDwsUqhNyx23VuLxm3qSDHrn8vstXMg7xiO3/zg7ozJegTFjsdFJMbE3y3+l
k/Aewrpl2MR+BR3cf+WDXTxHxis7l3TJ7hh9Q4YpBwnvFw1esNR5U8x36QIDAQAB
o4IDJTCCAyEwHQYDVR0OBBYEFIiXviOA6Ktu3BsoGyiTc5GEuvZHMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvaUplLUk0RG9xMjdjR3lnYktKTnprWVM2OWtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOQYIKwYBBQUHAQcBAf8EggEoMIIBJDCCASAEAgABMIIB
GAMEAFEFnAMEAFGoKQMEAFGodwMEAFGoewMEAFKYbwMEAFKY+gMEAVKY/AMEAFKY
/wMEAFKZQwMEAFKZSQMEAFKZTjAMAwQDUpmIAwQAUpmMAwQAUpndAwQAUpnfAwQA
UpnjAwQAUpnwAwQAUpn4AwQAUpn6AwQCWdUoMAwDBABZ1YUDBABZ1YoDBABZ1Y0w
DAMEAFnVkQMEAFnVkgMEAFnVoDAMAwQAWdWjAwQAWdWkAwQAWdWoAwQAWdWqMAwD
BAJZ1awDBABZ1a4DBAFZ1bgDBAFZ1bwDBABtsNEDBABtsNMDBANtsNgwDAMEA22w
+AMEAG2w+jAMAwQAuTF9AwQHuTEAAwQA1ZgqMAwDBADVmD0DBADVmD4wDQYJKoZI
hvcNAQELBQADggEBAJlEtGczbGYgEeFx2GgL2wKyPcsFDDAnSplyobYuKVJUu1vJ
ieIFR3D+9Gg1W14CWDdJl9++BcfPdi0C4cgNHhNPf6CjVZ8OpfkN/fcgyLYBvD38
wC4X4mXEHDLwXNBXrNGb62RzK1faayIwHp2B+bktxOd+oVQpQrF0iOoQoxIGBYHR
JcdcgUUP55/sec3ZLc4jasMdELSCQvEOkQrdZKx1UghziSukNDyZIiPzSfkddhjx
9ry9yuh5t7MwJLutML2MsU73sdFeHivt+Nrn8F4DPQjMYtRj/79ZCN9oZcvIS3Cx
4g6aEV5DEZ5LB6kz7eNaJHlysw29i+KpZTPozlY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org