Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nY17RwHLSqKeh-SXUaUy6NCr-JM.roa
File: nY17RwHLSqKeh-SXUaUy6NCr-JM.roa (raw, json)
Hash identifier: Cg5u24NRqpQf8CY3JiubPz+DqSk6pBgG1Z2G27vAih4=
Subject key identifier: 9D:8D:7B:47:01:CB:4A:A2:9E:87:E4:97:51:A5:32:E8:D0:AB:F8:93
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189DE54B0F3413C96F6C837EE2F1477AA61
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nY17RwHLSqKeh-SXUaUy6NCr-JM.roa
Signing time: Thu 10 Aug 2023 07:23:59 +0000
ROA not before: Thu 10 Aug 2023 07:23:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.214.0/24 maxlen: 24
109.176.215.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.243.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.41.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.47.0/24 maxlen: 24
89.213.46.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.186.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.187.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 09:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:54:b0:f3:41:3c:96:f6:c8:37:ee:2f:14:77:aa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 10 07:23:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d8d7b4701cb4aa29e87e49751a532e8d0abf893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:e7:59:81:2d:c3:d5:54:ca:f6:a0:9c:0c:
14:c6:f2:69:01:9f:d8:05:4f:30:cf:33:5b:d8:d0:
38:d0:49:d8:07:7a:74:33:03:27:15:a9:c5:2c:e1:
3c:69:11:c1:b1:ef:6f:5c:4d:7a:09:b5:db:38:7c:
aa:c1:38:f4:ee:cc:c0:c9:f2:99:89:f0:3a:3c:34:
9b:c8:9c:fc:01:f8:e3:28:1b:5f:ba:ba:b5:63:b0:
75:2c:92:d2:53:b5:b7:64:16:4f:de:73:9b:84:22:
fd:ba:95:7e:0b:21:06:fc:54:34:0f:f3:80:74:99:
59:d6:c1:19:17:ea:f9:e5:8f:76:9e:2a:74:a2:7c:
67:44:39:ca:5c:05:74:78:e5:56:19:3d:03:03:c9:
0b:2c:fe:80:ef:c1:8e:3e:a7:45:c0:35:6f:68:7f:
7e:b0:5e:d7:a6:29:df:be:95:57:85:9d:9e:1e:70:
4b:09:0d:15:f5:d1:a2:9b:a9:96:98:6b:2b:ca:56:
2b:ac:b2:8e:c9:1c:36:b6:e7:9e:ed:82:e2:e0:ab:
95:00:7b:e5:4d:87:44:2f:91:f2:13:b3:d1:e0:ef:
c7:19:12:be:88:63:bc:e5:00:f9:90:17:67:c3:7f:
c7:65:ea:92:bc:28:d9:61:19:3f:0c:e2:7c:65:12:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:7B:47:01:CB:4A:A2:9E:87:E4:97:51:A5:32:E8:D0:AB:F8:93
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nY17RwHLSqKeh-SXUaUy6NCr-JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0/24
89.213.5.0/24
89.213.41.0-89.213.42.255
89.213.44.0/24
89.213.46.0/23
89.213.136.0/24
89.213.139.0-89.213.141.255
89.213.146.0/24
89.213.148.0-89.213.155.255
89.213.157.0-89.213.160.255
89.213.162.0-89.213.164.255
89.213.168.0/23
89.213.173.0-89.213.177.255
89.213.179.0-89.213.182.255
89.213.184.0-89.213.189.255
109.176.211.0/24
109.176.214.0-109.176.223.255
109.176.240.0/24
109.176.242.0/23
109.176.245.0-109.176.246.255
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:2f:80:b3:9b:28:7d:d6:37:17:b2:93:90:4b:39:ba:ef:4c:
80:84:64:1c:45:4f:8f:4f:f2:7d:c3:a1:c4:62:87:be:a3:e4:
53:c4:04:77:14:73:aa:a2:81:05:ad:f7:2e:17:b6:63:ca:1d:
c7:e4:54:90:bc:8a:3a:b7:54:34:67:07:6c:db:b3:2a:4c:ee:
c9:1c:3e:af:ec:25:dd:0e:47:fa:51:a6:15:00:58:a3:64:2c:
97:c9:de:bf:71:d3:0f:89:39:4e:97:15:9f:fc:1f:f9:c4:c6:
66:b8:36:c1:d2:4e:2d:0d:57:b1:69:bd:1e:a8:f5:63:c6:03:
c5:1b:b8:b5:96:50:ff:30:e4:da:9f:80:d8:82:68:43:c2:02:
97:24:49:e9:fc:6d:5d:4e:08:70:aa:7d:33:f3:e3:90:c9:62:
2a:3c:fe:9a:04:e4:5c:4e:e0:09:ec:d1:2d:18:f3:89:2a:67:
ba:26:0d:c3:83:99:24:65:6a:fc:63:4f:eb:8e:15:dd:b4:22:
4f:4b:cc:ef:12:ab:de:bf:35:16:f4:79:a6:37:b6:07:e9:78:
ad:25:bb:2e:35:61:20:00:d0:45:31:7c:95:d3:0b:35:88:39:
fd:a1:b6:31:8c:d3:34:12:94:6d:97:c5:e2:60:aa:c6:53:a0:
b4:85:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org