Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/81Q27VdHPzXFacLIaxQQlEIRm3k.roa
File: 81Q27VdHPzXFacLIaxQQlEIRm3k.roa (raw, json)
Hash identifier: Vkg4ZpKNlBTx1Y1djLZtXM/KG4aODt/ME/Z6OicK1kc=
Subject key identifier: F3:54:36:ED:57:47:3F:35:C5:69:C2:C8:6B:14:10:94:42:11:9B:79
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AE2DFD783DD1EE3367A48E2299662
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/81Q27VdHPzXFacLIaxQQlEIRm3k.roa
Signing time: Sun 01 Jan 2023 11:15:07 +0000
ROA not before: Sun 01 Jan 2023 11:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3343
IP address blocks: 80.250.191.0/24 maxlen: 24
86.110.118.0/24 maxlen: 24
86.110.117.0/24 maxlen: 24
86.110.116.0/24 maxlen: 24
80.250.176.0/23 maxlen: 23
86.110.119.0/24 maxlen: 24
85.143.191.0/24 maxlen: 24
80.250.184.0/24 maxlen: 24
80.250.183.0/24 maxlen: 24
80.250.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e2:df:d7:83:dd:1e:e3:36:7a:48:e2:29:96:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f35436ed57473f35c569c2c86b14109442119b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:54:3a:e0:fe:df:1c:41:bd:77:6f:3d:fb:1c:
ca:58:89:96:0e:b7:a2:ac:7d:b6:09:4a:af:70:41:
cb:65:e4:4d:99:24:f5:ed:61:1f:ae:65:7c:6d:a4:
01:79:8f:bf:b8:80:3c:6e:1c:db:2a:3e:41:cf:68:
cc:ed:d7:24:71:e1:78:84:c2:e1:83:4d:7b:d2:c6:
30:d7:88:bb:e1:43:b7:e4:df:6c:4f:6f:8e:6f:9e:
99:72:1b:18:ba:1d:77:5f:83:bd:53:31:7f:ca:0d:
d1:95:08:ef:52:a0:2e:c4:5f:99:45:85:dd:ec:69:
a8:7c:b2:12:ae:92:7b:24:16:81:34:f6:71:fa:e6:
58:b4:d1:2a:13:2b:a7:17:7e:cc:72:ec:27:99:76:
42:28:52:61:ce:d0:73:57:5e:0d:f4:50:fb:31:3e:
a7:e9:ba:6f:d3:fa:da:29:97:19:09:90:31:68:29:
85:f7:01:86:4c:f7:22:f3:64:51:2d:3b:96:95:03:
2c:71:a4:03:7a:29:37:c0:c2:58:61:34:46:7c:a5:
b7:53:4f:6e:74:86:12:e9:1f:d5:f3:22:d7:15:29:
0e:51:3b:eb:5c:1a:21:ba:5b:b2:0b:77:4a:d9:bb:
d3:62:7d:e8:60:39:b8:8c:c0:32:fb:e9:f1:79:88:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:54:36:ED:57:47:3F:35:C5:69:C2:C8:6B:14:10:94:42:11:9B:79
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/81Q27VdHPzXFacLIaxQQlEIRm3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.176.0/23
80.250.182.0-80.250.184.255
80.250.191.0/24
85.143.191.0/24
86.110.116.0/22
Signature Algorithm: sha256WithRSAEncryption
96:6f:81:b2:9b:5e:aa:7a:90:61:77:d1:80:b2:ee:ab:fc:29:
49:75:af:e6:fc:5e:27:59:d2:78:80:ef:72:74:ad:9c:f6:b3:
c1:a5:1a:9a:93:ca:32:97:86:e9:ca:5a:6e:57:96:50:25:34:
65:72:ab:36:0a:a3:2d:dd:09:2d:21:81:0e:47:5c:f3:c8:8e:
fa:32:6e:59:e6:f7:3f:ed:6e:d8:39:51:2c:24:e9:ee:1b:cf:
5f:f0:6e:81:40:f3:04:36:71:48:1c:5a:31:66:0d:8f:f4:93:
b0:0a:e2:41:80:f4:61:6b:c3:2e:a9:a8:85:2f:9e:6b:a4:64:
26:d0:a8:65:f9:72:44:82:22:b2:7e:5e:b9:76:c6:95:67:99:
05:41:11:d9:36:92:29:93:75:4e:27:24:7a:30:8b:34:c0:72:
56:b6:e0:28:6c:0e:f0:a4:35:72:d6:68:aa:7b:ee:7d:a5:56:
3a:4a:f6:bf:77:66:9e:c8:da:df:87:af:4a:e3:20:80:a7:ec:
5a:ef:9c:9b:64:4c:1c:40:00:5f:f7:87:1b:08:db:6b:d3:3a:
dd:76:22:97:d4:da:93:a8:9a:cd:21:93:91:96:8d:d6:df:13:
06:98:3b:8d:93:8c:ea:c4:c0:59:65:a9:e9:4b:a9:22:45:25:
98:18:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org