Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/IjtGSVuy0njwed9vCfC1wWIV-b8.roa
File: IjtGSVuy0njwed9vCfC1wWIV-b8.roa (raw, json)
Hash identifier: +n6hO2qVwO/hmSDrF8/oSrB+c6NGtC/D0OQjZBaqz+I=
Subject key identifier: 22:3B:46:49:5B:B2:D2:78:F0:79:DF:6F:09:F0:B5:C1:62:15:F9:BF
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018BF186223D0C8959A732EAADBBB33A77F5
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/IjtGSVuy0njwed9vCfC1wWIV-b8.roa
Signing time: Tue 21 Nov 2023 10:56:21 +0000
ROA not before: Tue 21 Nov 2023 10:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
193.27.214.0/24 maxlen: 24
193.27.214.0/23 maxlen: 23
194.85.32.0/20 maxlen: 20
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
82.179.128.0/17 maxlen: 17
86.110.112.0/20 maxlen: 20
194.85.174.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
80.250.160.0/19 maxlen: 24
80.250.172.0/23 maxlen: 23
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
185.71.96.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.143.224.0/21 maxlen: 21
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
188.93.107.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
85.142.8.0/21 maxlen: 21
194.190.232.0/22 maxlen: 22
82.179.32.0/19 maxlen: 19
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2001:b08:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Dec 2023 07:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:86:22:3d:0c:89:59:a7:32:ea:ad:bb:b3:3a:77:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Nov 21 10:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=223b46495bb2d278f079df6f09f0b5c16215f9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:7a:0b:54:98:5f:64:a1:88:93:bb:12:83:
35:1d:a0:7a:0e:06:30:0f:a2:fd:fc:f2:9d:bb:a9:
3b:20:fa:37:c1:ee:89:e9:9b:47:92:fa:86:13:24:
7e:8f:9b:76:5e:92:40:92:11:0d:98:64:92:85:c8:
c8:ba:ff:8e:6b:b1:62:62:f9:4e:1c:e6:17:ef:29:
48:bb:c7:1e:dc:f5:d2:ee:e7:f9:ac:f9:0d:63:62:
01:63:8c:ee:4c:48:c8:03:e0:df:fa:1b:09:0b:3d:
f2:4c:47:1f:59:46:ce:2c:59:5a:5b:29:7a:de:cc:
19:9d:a7:0e:31:b2:8b:31:5d:ab:13:96:a5:18:d1:
c0:d6:1b:8d:19:c5:64:96:d6:52:7a:7b:6b:b0:83:
85:10:2b:50:eb:1f:2c:9c:14:ec:ba:e5:53:83:82:
5b:89:98:da:ba:28:e1:4c:34:ee:cb:97:80:b6:0c:
72:58:69:60:8d:57:b2:63:f0:02:a3:76:1a:c7:6f:
52:69:f4:11:a1:b1:5d:29:e3:6e:3b:82:98:08:7b:
5d:ed:f2:71:25:1c:e8:1d:86:ba:2c:60:46:be:75:
10:b3:90:79:6d:42:67:7c:4e:09:62:28:af:0e:cd:
b1:74:93:38:d8:4a:3d:34:f7:d6:34:e0:28:be:a8:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3B:46:49:5B:B2:D2:78:F0:79:DF:6F:09:F0:B5:C1:62:15:F9:BF
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/IjtGSVuy0njwed9vCfC1wWIV-b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.8.0/21
85.142.64.0/24
85.142.78.0/24
85.143.224.0/21
86.110.96.0/19
185.71.96.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:c0:29:e6:5d:37:19:ff:9d:c8:f8:ec:ac:87:af:c7:81:c5:
fd:53:42:71:04:e4:43:fa:43:e8:f4:3d:e9:8f:53:86:d9:c7:
aa:0c:fd:da:fe:8a:23:02:aa:bb:aa:2b:e8:43:b0:6e:52:3e:
17:78:46:8c:3e:69:ad:6c:dc:f9:f2:43:9d:08:27:78:67:8f:
cb:cc:44:fd:19:6e:39:48:a6:23:a2:46:48:95:33:41:e1:b1:
a1:4a:01:65:94:8b:1d:91:01:f4:0b:42:a9:2e:1f:d4:af:40:
62:72:4c:10:25:2e:c7:f6:03:91:e2:d5:df:d3:e5:e7:41:74:
12:95:c5:5e:44:a2:70:78:63:23:78:b1:18:94:84:e0:c8:ac:
68:98:2e:f3:55:d6:b7:8f:6e:25:3b:40:db:13:15:d6:0d:da:
c9:4d:bb:1b:db:56:48:e1:83:eb:24:6d:f3:1e:a6:0a:9e:5d:
4f:2d:3f:bc:87:47:2a:54:d5:93:bb:01:84:c1:8f:9d:d8:93:
06:f4:25:d9:6f:02:b3:08:67:7e:59:20:8f:aa:74:90:91:c2:
fe:70:0f:69:ed:2e:ef:d4:ee:60:b5:b0:fd:9f:75:b0:36:de:
a2:19:92:05:0e:d0:6f:7a:f5:52:af:f4:a5:a6:22:99:70:dd:
aa:ad:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org