Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/IpSllPTooAyaQCZX3QKw__bi2V0.roa
File: IpSllPTooAyaQCZX3QKw__bi2V0.roa (raw, json)
Hash identifier: cFAZjfarVOR7LLcCBCE7tl8DtLvdkHxmBCvfyc2Uvwc=
Subject key identifier: 22:94:A5:94:F4:E8:A0:0C:9A:40:26:57:DD:02:B0:FF:F6:E2:D9:5D
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CB088187B40E7B0EB273E4EB6BFBCA992
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/IpSllPTooAyaQCZX3QKw__bi2V0.roa
Signing time: Thu 28 Dec 2023 13:05:58 +0000
ROA not before: Thu 28 Dec 2023 13:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
86.110.112.0/20 maxlen: 20
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
85.143.96.0/22 maxlen: 24
85.143.112.0/22 maxlen: 24
85.143.124.0/22 maxlen: 24
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.143.224.0/21 maxlen: 21
85.143.239.0/24 maxlen: 24
188.93.107.0/24 maxlen: 24
194.190.224.0/19 maxlen: 24
194.190.232.0/21 maxlen: 24
194.190.240.0/24 maxlen: 24
85.142.148.0/23 maxlen: 24
85.142.153.0/24 maxlen: 24
85.142.162.0/23 maxlen: 24
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
82.179.128.0/17 maxlen: 17
194.149.64.0/24 maxlen: 24
194.85.174.0/23 maxlen: 23
85.143.0.0/20 maxlen: 24
83.149.192.0/18 maxlen: 24
85.143.18.0/23 maxlen: 24
85.143.26.0/24 maxlen: 24
80.250.160.0/19 maxlen: 24
80.250.172.0/23 maxlen: 23
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
185.71.96.0/22 maxlen: 22
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
85.142.8.0/21 maxlen: 21
82.179.32.0/19 maxlen: 19
2a07:a6c0::/29 maxlen: 29
2a07:a6c4::/32 maxlen: 32
2001:b08:22::/48 maxlen: 48
2a00:db8::/32 maxlen: 48
2001:b08:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Dec 2023 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:88:18:7b:40:e7:b0:eb:27:3e:4e:b6:bf:bc:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 28 13:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2294a594f4e8a00c9a402657dd02b0fff6e2d95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8a:ac:d3:bd:60:4d:8b:50:18:ac:17:b9:c5:
2e:12:71:a4:0e:e4:e4:c8:ac:bd:45:c1:2d:20:2b:
d2:8a:48:0f:a4:a0:9f:35:b3:2c:46:44:ad:47:f3:
ae:e8:ec:00:59:47:7a:c7:68:bb:c2:43:c1:5e:c4:
9d:1d:0e:5f:b7:28:c7:6c:2f:59:33:cf:7c:9a:47:
0c:2a:01:3f:79:46:99:5a:5d:51:35:d4:2d:0c:bf:
6b:95:4c:d3:a0:c4:60:15:20:a4:1d:52:cc:57:a7:
17:79:ed:d0:ba:59:dd:ff:93:34:51:c2:8c:77:d1:
10:aa:b0:c8:b5:fd:f0:7b:e6:8f:34:27:25:fc:a8:
4b:35:db:d4:10:bd:81:20:b3:0d:b9:af:e6:8c:5a:
78:b9:60:8c:ee:9b:58:d6:29:63:f6:2f:7f:1f:72:
14:3c:0f:b3:83:12:1f:d8:95:56:4d:2f:3f:44:e9:
64:14:f6:56:9a:4d:3b:02:1b:65:f9:dc:e6:af:94:
73:ac:bb:2a:46:d6:53:80:e9:7f:05:c5:b2:90:78:
fc:ee:de:4c:86:87:ff:93:96:2c:96:2e:57:91:fd:
e6:9f:85:7a:56:b4:25:e7:d7:b6:4d:e5:7d:41:9e:
e6:73:c3:bf:a6:0d:2b:da:62:70:8d:2f:dd:1f:cc:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:A5:94:F4:E8:A0:0C:9A:40:26:57:DD:02:B0:FF:F6:E2:D9:5D
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/IpSllPTooAyaQCZX3QKw__bi2V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.8.0/21
85.142.64.0/24
85.142.78.0/24
85.142.148.0/23
85.142.153.0/24
85.142.162.0/23
85.143.0.0/20
85.143.18.0/23
85.143.26.0/24
85.143.96.0/22
85.143.112.0/22
85.143.124.0/22
85.143.224.0/21
85.143.239.0/24
86.110.96.0/19
185.71.96.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.149.64.0/24
194.190.224.0/19
IPv6:
2001:b08:22::/48
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:0b:8c:8b:15:19:46:41:61:61:a8:51:f2:66:3a:8f:8b:3e:
36:27:d1:73:c0:72:40:06:92:38:b2:94:1b:5d:7a:24:e6:46:
9a:53:f2:2c:37:9b:4d:4a:0f:e2:c1:b4:58:6d:b4:b4:96:6f:
ca:ea:ce:93:fe:88:f1:5e:37:4b:78:f3:3d:76:ae:9c:80:e1:
f9:3f:53:dd:27:3e:a6:b4:f0:b5:c7:b2:27:1a:41:52:49:c2:
c9:71:07:ec:63:48:b4:ce:f9:ce:ae:c6:26:3e:67:ad:56:2f:
3a:f2:d9:2f:61:78:cd:23:d0:6c:fc:eb:f1:8f:c3:ff:f1:09:
bd:24:76:64:a1:36:8b:d7:54:f8:54:b5:dc:20:8e:96:b0:03:
94:92:73:08:a6:9c:d2:db:38:30:b9:f1:63:33:f3:1e:71:58:
1d:ea:a3:ce:0d:94:26:09:25:7a:a6:58:f1:0a:62:ea:15:d1:
b3:a8:ca:bf:09:7c:e2:a3:9f:4e:bc:d3:13:96:9e:b8:e5:1a:
f3:c9:e1:1a:a0:93:07:c0:c7:3e:59:20:04:fe:4c:2c:97:24:
01:62:fe:b2:6e:2d:1d:40:38:d0:6f:40:1f:39:21:39:2a:4c:
0e:9e:14:27:00:bc:dd:22:cf:24:cd:54:76:d1:3e:0e:ca:dc:
74:dc:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org