Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pWVQjXu8Ed8H_dyriOQr7m9pPnc.roa
File: pWVQjXu8Ed8H_dyriOQr7m9pPnc.roa (raw, json)
Hash identifier: mysOatsoFRPEgUX7qjJ392KyIC6PmzNF90ddtOcgTuc=
Subject key identifier: A5:65:50:8D:7B:BC:11:DF:07:FD:DC:AB:88:E4:2B:EE:6F:69:3E:77
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189D3FFB8C33E7B5B6B4DAA13B28518D1A3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pWVQjXu8Ed8H_dyriOQr7m9pPnc.roa
Signing time: Tue 08 Aug 2023 07:14:58 +0000
ROA not before: Tue 08 Aug 2023 07:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.214.0/24 maxlen: 24
109.176.215.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.243.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.41.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.47.0/24 maxlen: 24
89.213.46.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.186.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.187.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.212.0/24 maxlen: 24
109.176.213.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:ff:b8:c3:3e:7b:5b:6b:4d:aa:13:b2:85:18:d1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 8 07:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a565508d7bbc11df07fddcab88e42bee6f693e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:f9:9d:82:4b:bf:c4:d2:96:79:eb:a5:1b:
b7:1f:0a:3f:3c:a6:f2:14:0b:0c:fd:36:23:48:1f:
17:33:b0:a8:87:16:eb:65:d3:18:88:64:58:d9:9a:
3e:e5:24:1e:fe:06:81:af:59:38:22:02:e6:f9:af:
a2:a0:0b:ff:80:a2:54:a7:b4:f3:d1:34:f1:61:e9:
a4:bb:53:6f:c2:00:50:86:12:a1:32:8f:77:90:00:
96:fe:f3:fa:f7:e4:68:3d:da:b8:27:bd:0e:d5:01:
3d:d5:de:e1:a4:c5:74:98:4d:50:27:84:ad:e2:13:
c4:4b:14:68:35:d5:79:85:27:b0:92:a2:e5:89:7c:
fd:c9:df:b1:e8:ac:58:37:13:92:36:e2:e7:30:b4:
47:50:02:b6:a2:27:8b:bc:ca:f1:a7:6c:61:03:09:
9e:4b:b1:f4:b0:68:8e:73:c9:e2:31:0d:08:73:58:
ad:56:9c:09:4a:e1:ae:22:11:ef:cf:8b:8e:a5:84:
8c:2b:04:7f:02:34:60:fb:f5:7a:87:aa:59:ad:69:
69:76:4f:ad:83:fc:39:02:a2:45:7b:fb:a4:01:29:
c8:c9:e9:8a:ae:51:70:cc:d5:dc:9a:b6:b3:5a:cd:
f7:27:93:6f:f1:91:88:dc:f2:80:90:86:87:3a:0d:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:50:8D:7B:BC:11:DF:07:FD:DC:AB:88:E4:2B:EE:6F:69:3E:77
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pWVQjXu8Ed8H_dyriOQr7m9pPnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0/24
89.213.5.0/24
89.213.41.0-89.213.42.255
89.213.44.0/24
89.213.46.0/23
89.213.136.0/24
89.213.139.0-89.213.141.255
89.213.146.0/24
89.213.148.0-89.213.152.255
89.213.154.0/23
89.213.157.0-89.213.158.255
89.213.160.0/24
89.213.162.0-89.213.164.255
89.213.168.0/23
89.213.173.0-89.213.177.255
89.213.179.0-89.213.182.255
89.213.184.0-89.213.189.255
109.176.211.0-109.176.221.255
109.176.223.0/24
109.176.240.0/24
109.176.242.0/23
109.176.245.0/24
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
99:83:75:45:a9:df:8e:a8:d2:f0:b2:df:d0:97:b9:18:aa:c9:
0e:d7:48:37:95:32:94:e7:6d:78:07:e9:75:c8:fb:dd:7c:ee:
33:00:60:fd:40:b8:1b:5e:6a:b7:d7:f1:ea:28:30:1d:3a:2d:
57:f1:7a:05:27:0d:35:06:88:1f:da:03:2c:66:c6:ab:30:f6:
f8:96:18:43:c4:62:1e:9c:c0:1a:12:b9:a9:96:20:14:d4:71:
8d:80:20:df:18:a9:45:dd:a7:ec:57:3a:f5:0b:d4:fd:d1:59:
8a:38:ef:7c:58:2d:43:f6:cb:f7:34:0b:24:79:49:f1:e5:49:
41:a4:7a:3e:0d:95:7b:fa:0d:0a:67:96:8a:75:ab:bc:0a:1c:
37:45:bd:89:63:18:29:bb:29:68:05:1d:88:8a:9f:a5:dd:52:
f4:c7:f3:2a:a1:b4:14:5e:7b:a5:58:91:e1:f4:ac:84:2b:43:
01:0a:54:6b:26:6b:48:6c:b6:cf:9d:07:ca:08:63:a3:0d:60:
3c:9a:11:12:25:39:84:fa:81:1a:5f:0e:4c:c5:1b:28:4e:3d:
82:0d:c2:8a:d6:a8:52:23:5b:44:c6:7c:ad:a8:f2:65:10:89:
85:3e:85:be:eb:35:2e:d3:9c:72:88:21:77:ce:f2:15:83:be:
1c:31:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org