Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z7uykE48vd3Au0aRZWzQxYZzisM.roa
File: z7uykE48vd3Au0aRZWzQxYZzisM.roa (raw, json)
Hash identifier: E4iBTZZgadGI8ad2kg6OtzJB/YDYxHXKaOOk67l8Fh4=
Subject key identifier: CF:BB:B2:90:4E:3C:BD:DD:C0:BB:46:91:65:6C:D0:C5:86:73:8A:C3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189D4E118587418C29C322A1A5FB9CC8B77
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z7uykE48vd3Au0aRZWzQxYZzisM.roa
Signing time: Tue 08 Aug 2023 11:21:08 +0000
ROA not before: Tue 08 Aug 2023 11:21:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.214.0/24 maxlen: 24
109.176.215.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.243.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.41.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.47.0/24 maxlen: 24
89.213.46.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.186.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.187.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.212.0/24 maxlen: 24
109.176.213.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 16:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:e1:18:58:74:18:c2:9c:32:2a:1a:5f:b9:cc:8b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 8 11:21:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfbbb2904e3cbdddc0bb4691656cd0c586738ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:ad:d5:f2:55:c9:8c:e2:5d:4c:66:92:b8:
fd:dc:9d:ca:31:52:22:29:3e:e5:02:41:bf:54:22:
51:8a:ad:07:5b:b7:33:29:b1:95:0b:8c:2f:c0:e9:
52:9e:d2:84:3b:e9:cf:ed:47:cb:ad:ff:5c:18:78:
1b:60:9a:81:00:88:fe:4c:74:f4:4d:17:e0:84:a2:
8c:5e:0e:da:8c:df:aa:ef:93:65:e0:28:ef:4a:3c:
52:5a:73:9a:61:aa:39:84:4e:f3:47:1d:98:da:43:
23:76:42:72:3e:d3:e8:f0:7b:98:0c:bb:43:50:c6:
e3:46:0d:ed:44:b6:e6:4f:c1:36:c3:0e:6a:89:0e:
05:28:d0:5c:28:e2:a1:f4:5a:c2:39:87:aa:b6:5f:
66:e4:d8:4e:15:08:28:59:0a:99:51:70:c2:f9:95:
72:ab:68:78:b4:b6:90:d7:e2:f2:bc:30:e1:86:3e:
bd:97:73:c6:23:0a:ef:e6:75:df:99:ea:84:18:ae:
99:eb:93:ab:e9:0b:d2:60:a4:c0:d3:2d:22:8c:c3:
f4:13:1c:39:f7:b3:0f:d0:c6:5f:70:8e:4b:89:27:
44:58:71:6a:ce:2b:92:72:7d:df:3e:14:25:ca:07:
80:02:0a:09:32:cb:fd:bc:15:7d:8a:14:92:ed:77:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BB:B2:90:4E:3C:BD:DD:C0:BB:46:91:65:6C:D0:C5:86:73:8A:C3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z7uykE48vd3Au0aRZWzQxYZzisM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0/24
89.213.5.0/24
89.213.41.0-89.213.42.255
89.213.44.0/24
89.213.46.0/23
89.213.136.0/24
89.213.139.0-89.213.141.255
89.213.146.0/24
89.213.148.0-89.213.155.255
89.213.157.0-89.213.158.255
89.213.160.0/24
89.213.162.0-89.213.164.255
89.213.168.0/23
89.213.173.0-89.213.177.255
89.213.179.0-89.213.182.255
89.213.184.0-89.213.189.255
109.176.211.0-109.176.223.255
109.176.240.0/24
109.176.242.0/23
109.176.245.0-109.176.246.255
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d1:fc:41:9e:8a:65:f8:c7:59:b6:6d:e5:7a:1a:9f:1c:bf:
7d:29:6c:a7:66:f9:93:c6:83:c1:3e:b7:8d:d4:ca:29:41:1c:
3e:80:d9:7b:eb:2f:b1:63:10:11:c6:51:83:cc:01:b0:3f:43:
d5:24:ec:fd:f9:51:a1:c4:2e:97:cb:c0:b8:3d:92:7f:1c:29:
20:7a:99:2b:2c:c5:a9:fb:bd:50:45:6a:8c:b8:f7:1c:89:e1:
17:68:d0:3e:8a:7c:b2:7f:f6:10:fc:91:06:3e:94:a7:c4:0b:
d9:5e:8d:d8:26:f6:34:6c:22:32:a0:ef:d4:6f:bf:28:ff:44:
46:e6:16:b2:4a:9a:2a:53:1e:16:43:b7:75:d9:b2:73:4a:28:
6d:9d:8c:f2:3c:cb:ed:5f:c8:cb:37:28:6e:6c:74:25:96:38:
0b:07:36:66:3b:33:62:64:dc:06:0b:8a:c5:b0:47:18:0b:be:
9e:de:cb:06:23:22:cf:a1:cf:e6:56:86:d0:a9:f3:68:b3:24:
0f:10:ce:45:bd:e9:af:a5:c4:15:7a:25:2a:2a:8a:23:3b:92:
c6:8c:56:a2:ae:be:85:ed:a9:0d:fb:25:d1:28:b5:00:6a:c2:
26:4e:d3:37:d0:71:0b:8b:ee:4a:1c:2c:cc:da:c7:3f:6c:72:
e7:4b:1b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:32 2024 by rpki-client on console-ams.rpki-client.org