Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/juArwv_DvAXb-2tMP9sAFtU1ce0.roa
File: juArwv_DvAXb-2tMP9sAFtU1ce0.roa (raw, json)
Hash identifier: z6UdeSLooCQLaRXiJmy7sHHpkcW864DkLdwbhAg9CXU=
Subject key identifier: 8E:E0:2B:C2:FF:C3:BC:05:DB:FB:6B:4C:3F:DB:00:16:D5:35:71:ED
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A929F06FA8EBC067229D3F9BF6ECA3985
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/juArwv_DvAXb-2tMP9sAFtU1ce0.roa
Signing time: Thu 14 Sep 2023 07:36:50 +0000
ROA not before: Thu 14 Sep 2023 07:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.138.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 10:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:9f:06:fa:8e:bc:06:72:29:d3:f9:bf:6e:ca:39:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 14 07:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ee02bc2ffc3bc05dbfb6b4c3fdb0016d53571ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:cf:63:ae:b4:f9:9d:5d:80:be:0f:78:fc:
24:40:de:44:d5:50:dd:f9:58:d6:22:80:74:81:cf:
8e:da:db:91:98:38:f5:d5:bc:54:eb:28:71:bd:d7:
f2:db:44:66:c2:93:16:b0:7c:66:e6:ba:6a:67:67:
5c:2e:a0:22:0c:56:5e:2c:1d:73:f5:ab:37:91:ce:
42:30:a6:eb:c9:14:ea:3e:14:ee:2d:e6:7b:a4:92:
e5:4d:2a:6d:3e:3d:d8:fb:26:e9:e3:eb:7c:3a:0d:
0c:81:9b:13:5c:c3:f7:a0:5b:36:f6:5f:61:11:6d:
9c:c5:57:8f:35:4b:47:4b:24:0f:79:7f:c0:be:8e:
1e:14:c7:8b:1a:28:c4:0f:87:49:62:19:6f:a8:25:
06:50:2a:c6:35:9f:02:8c:bb:98:7c:7b:a9:7f:64:
64:2d:cd:db:c9:b7:25:b4:d3:f3:4f:52:ec:c5:b4:
ad:1f:da:69:21:11:79:7e:6f:32:d8:22:af:ac:ee:
b0:07:30:8e:fa:09:0f:d5:4f:f4:42:24:fd:c4:9d:
41:b4:02:af:47:50:83:c7:8e:1c:63:d7:83:32:20:
e8:1e:88:e0:d4:c5:8f:b5:60:bd:9f:ca:7b:89:c8:
e2:c8:86:51:2b:c9:9d:84:e9:e2:17:20:7e:1a:71:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E0:2B:C2:FF:C3:BC:05:DB:FB:6B:4C:3F:DB:00:16:D5:35:71:ED
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/juArwv_DvAXb-2tMP9sAFtU1ce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.250.0/24
89.213.133.0-89.213.139.255
89.213.141.0/24
89.213.145.0-89.213.146.255
89.213.160.0/24
89.213.162.0-89.213.164.255
89.213.168.0/24
89.213.170.0/24
89.213.172.0-89.213.174.255
89.213.184.0/23
89.213.188.0/23
109.176.208.0/23
109.176.211.0/24
109.176.216.0/21
109.176.245.0-109.176.246.255
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0-213.152.62.255
Signature Algorithm: sha256WithRSAEncryption
6f:1e:34:0d:35:75:c2:b2:cd:0f:04:f4:6b:f8:42:3a:fd:63:
f1:de:f0:21:f2:2a:f0:a1:b1:de:6b:d8:4e:cd:df:09:37:27:
88:68:66:61:18:15:ba:59:d0:6e:f2:bb:05:74:0a:a7:50:42:
17:20:d5:09:5b:2f:d5:78:65:ee:0c:fb:ea:46:ef:14:bb:38:
77:11:81:4a:b9:49:29:d3:d5:20:2a:12:c6:b1:08:d7:69:27:
49:b1:e4:d7:76:8c:a5:bd:86:fb:13:61:0b:1f:8c:d3:77:d9:
18:33:f6:38:9b:74:a2:f2:21:27:ea:07:64:53:71:a2:5d:23:
bd:0d:1b:c7:3e:3a:c0:fb:b2:16:43:47:5f:53:99:8c:8c:fe:
9a:fe:fa:61:5c:5d:d4:96:93:83:dd:f2:d2:fe:c6:cd:da:ee:
4a:b9:91:30:9a:1a:67:fa:f6:ac:80:68:51:6c:d4:ac:51:db:
a8:e5:8f:e4:5f:08:3d:29:cc:bb:ec:54:83:3f:18:4b:4a:d0:
f5:dc:93:c0:33:6e:e4:86:83:2c:35:33:69:50:59:40:fc:25:
7f:13:cc:c1:b7:f1:d5:01:9d:6d:af:f4:65:09:a4:f4:2e:f0:
fc:fc:67:33:cb:60:62:d5:aa:02:a3:a7:b7:ae:59:a2:d5:41:
fa:a6:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org