Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/1XuGGHtwrk6DhZrjsThWiBPOxrc.roa
File: 1XuGGHtwrk6DhZrjsThWiBPOxrc.roa (raw, json)
Hash identifier: jZMreyT0XZCjGE0IY2WAwCDhPYFhavTjgGgWyZjblqg=
Subject key identifier: D5:7B:86:18:7B:70:AE:4E:83:85:9A:E3:B1:38:56:88:13:CE:C6:B7
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AE228947AEE9F58A710E3F154BE7F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/1XuGGHtwrk6DhZrjsThWiBPOxrc.roa
Signing time: Sun 01 Jan 2023 11:15:07 +0000
ROA not before: Sun 01 Jan 2023 11:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
193.27.214.0/24 maxlen: 24
193.27.214.0/23 maxlen: 23
194.85.32.0/20 maxlen: 20
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
82.179.128.0/17 maxlen: 17
86.110.112.0/20 maxlen: 20
194.85.174.0/23 maxlen: 23
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
80.250.164.0/22 maxlen: 22
80.250.160.0/19 maxlen: 19
80.250.162.0/24 maxlen: 24
80.250.163.0/24 maxlen: 24
80.250.160.0/23 maxlen: 23
80.250.172.0/23 maxlen: 23
80.250.168.0/22 maxlen: 22
80.250.168.0/24 maxlen: 24
80.250.169.0/24 maxlen: 24
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
194.190.232.0/22 maxlen: 22
82.179.32.0/19 maxlen: 19
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
2a07:a6c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Apr 2023 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e2:28:94:7a:ee:9f:58:a7:10:e3:f1:54:be:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d57b86187b70ae4e83859ae3b138568813cec6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:03:00:69:d3:38:ae:a0:c4:9c:ba:32:ab:
2f:c6:83:a1:35:07:3f:3d:11:00:57:c8:0d:47:0c:
e0:f6:b0:0f:80:fe:05:c1:27:dc:ce:65:f4:a0:fe:
27:7d:11:0b:fa:53:5f:35:f5:d0:94:f5:c9:f9:87:
88:cf:08:b6:ae:91:49:8f:19:2f:d4:eb:1b:51:b1:
12:7a:fe:88:bb:96:33:fe:d3:f9:c6:d4:63:1b:3e:
9e:b6:f4:74:12:c1:fa:05:cc:6e:70:03:09:7a:b8:
10:5c:15:11:4d:7c:e7:f7:3e:da:90:e3:d5:70:32:
5e:0a:4c:d4:ad:9c:5c:7c:4d:a9:9a:f0:89:da:30:
5d:eb:8e:1d:8a:73:4e:6a:78:9a:95:67:53:c0:4a:
77:32:5b:f5:19:4e:ab:48:e0:f3:7a:26:70:cc:a6:
12:cf:e8:f5:4b:47:a0:e5:1b:5f:98:60:4b:78:2d:
9d:97:d7:70:08:46:e7:43:e2:44:e1:f6:c3:97:69:
19:fb:3f:1b:4c:1e:05:9d:e3:8c:1f:90:de:eb:03:
d3:c8:20:26:93:3f:f0:93:45:20:a9:93:a2:cc:84:
83:e8:6d:2c:88:10:8b:20:62:87:89:a9:d2:b8:2b:
dc:35:fe:c8:aa:29:1b:4b:6a:9e:a7:89:69:d7:10:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7B:86:18:7B:70:AE:4E:83:85:9A:E3:B1:38:56:88:13:CE:C6:B7
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/1XuGGHtwrk6DhZrjsThWiBPOxrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
85.142.64.0/24
85.142.78.0/24
86.110.96.0/19
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:0f:a8:4d:8d:d5:dc:63:04:63:32:66:bc:09:ea:20:15:14:
88:a1:5d:c1:99:18:ee:66:8b:b8:dc:4c:4e:98:9b:d3:0d:12:
d1:cc:65:6d:02:95:69:3c:35:85:63:4c:c2:52:7c:46:f8:7a:
4b:4a:a7:50:14:91:9d:11:8a:df:24:88:b7:e8:f1:0f:f7:1f:
65:5d:c6:60:ca:84:47:30:8b:b5:c9:ba:d0:7e:59:9d:ed:56:
22:00:9d:73:cd:4d:00:ce:66:02:4c:d6:45:6b:43:be:21:77:
c0:05:b9:e5:ef:f1:de:98:97:9a:76:d1:53:e2:07:db:7c:e4:
fd:d9:dd:d9:84:1b:cf:37:bc:18:48:6b:18:a3:9f:21:7a:d6:
0c:3b:20:4a:fb:ee:1c:f9:58:ed:07:c9:e8:d9:49:11:5e:89:
c3:ac:17:80:17:4f:bc:a2:af:b2:83:7d:c9:c0:09:79:cd:a7:
9a:29:a2:ac:d9:bb:f0:95:f6:95:29:e1:d1:ed:fe:27:5c:75:
29:14:6b:ca:cd:b4:2a:1a:2f:39:73:1f:ec:a4:0d:b5:88:2c:
88:03:8e:4a:0b:65:16:99:bd:3a:93:89:be:61:2c:b4:3c:a9:
c6:26:7d:9d:db:59:f0:24:75:66:1a:04:48:f9:3c:a1:11:a8:
cc:45:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org