Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/SvqXJ3FYJ7FTPuQLI5JfTsujdJo.roa
File: SvqXJ3FYJ7FTPuQLI5JfTsujdJo.roa (raw, json)
Hash identifier: x98sfczxnoprfvGXCBD53LC2w+RWh1f/WLHPpBWlwcs=
Subject key identifier: 4A:FA:97:27:71:58:27:B1:53:3E:E4:0B:23:92:5F:4E:CB:A3:74:9A
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CB4F2C565BB89DD65D327539B71B2C5FB
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/SvqXJ3FYJ7FTPuQLI5JfTsujdJo.roa
Signing time: Fri 29 Dec 2023 09:40:58 +0000
ROA not before: Fri 29 Dec 2023 09:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
86.110.112.0/20 maxlen: 20
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
85.143.96.0/22 maxlen: 24
85.143.112.0/22 maxlen: 24
85.143.124.0/22 maxlen: 24
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.143.224.0/21 maxlen: 21
85.143.239.0/24 maxlen: 24
188.93.107.0/24 maxlen: 24
194.190.224.0/19 maxlen: 24
194.190.232.0/21 maxlen: 24
194.190.240.0/24 maxlen: 24
85.142.148.0/23 maxlen: 24
85.142.153.0/24 maxlen: 24
85.142.162.0/23 maxlen: 24
193.27.214.0/23 maxlen: 24
85.142.104.0/21 maxlen: 24
194.85.32.0/20 maxlen: 20
85.142.102.0/23 maxlen: 24
85.142.116.0/22 maxlen: 24
82.179.128.0/17 maxlen: 17
85.142.120.0/21 maxlen: 24
194.149.64.0/24 maxlen: 24
194.85.174.0/23 maxlen: 23
85.143.0.0/20 maxlen: 24
83.149.192.0/18 maxlen: 24
85.143.18.0/23 maxlen: 24
85.143.26.0/24 maxlen: 24
80.250.160.0/19 maxlen: 24
80.250.172.0/23 maxlen: 23
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
185.71.96.0/22 maxlen: 22
85.142.32.0/21 maxlen: 24
85.142.52.0/22 maxlen: 24
85.142.56.0/22 maxlen: 24
82.179.64.0/18 maxlen: 18
85.142.8.0/21 maxlen: 21
82.179.32.0/19 maxlen: 19
2a07:a6c0::/29 maxlen: 29
2a07:a6c4::/32 maxlen: 32
2001:b08:22::/48 maxlen: 48
2a00:db8::/32 maxlen: 48
2001:b08:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:f2:c5:65:bb:89:dd:65:d3:27:53:9b:71:b2:c5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 29 09:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4afa9727715827b1533ee40b23925f4ecba3749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2e:1f:8b:8d:53:90:07:2f:d7:bb:02:ba:cc:
7c:c1:37:de:f2:d9:1f:15:1a:b6:90:54:34:ab:e8:
39:aa:e9:2a:d1:8a:30:b2:08:a5:70:46:1d:88:c0:
68:1d:a1:79:48:b5:8b:2e:90:7e:22:bf:33:2a:93:
ce:81:4b:62:aa:3e:e2:a0:83:a1:ff:5b:ad:53:13:
4a:17:15:12:f9:59:80:d8:7e:de:6d:3e:2a:d7:0b:
9d:e2:12:c9:9f:6d:28:59:a5:ea:3b:04:47:1f:ec:
14:8c:00:87:e2:34:51:a4:f3:60:5d:42:6c:32:b7:
5c:04:68:10:fc:fc:ac:25:27:89:37:c8:11:89:4e:
43:5a:a2:7d:1c:99:a6:93:3b:15:96:cd:53:f0:95:
09:2b:9a:1f:72:4e:32:cb:93:4b:d6:f4:6b:50:59:
7e:b9:12:3d:80:fe:c8:da:be:28:36:3a:83:e2:fb:
06:43:0e:d9:10:be:c3:68:38:ea:be:22:56:cd:2f:
18:aa:ce:eb:a3:fe:38:bd:38:28:eb:89:0e:b6:3b:
bd:40:73:e6:07:00:da:c6:86:de:89:5d:56:a6:5a:
8c:c8:52:20:91:d2:df:16:62:41:b1:e1:c8:18:05:
8f:b4:f7:e0:b8:57:e6:92:26:cc:6d:db:dc:de:ef:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:97:27:71:58:27:B1:53:3E:E4:0B:23:92:5F:4E:CB:A3:74:9A
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/SvqXJ3FYJ7FTPuQLI5JfTsujdJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.8.0/21
85.142.32.0/21
85.142.52.0-85.142.59.255
85.142.102.0-85.142.111.255
85.142.116.0-85.142.127.255
85.142.148.0/23
85.142.153.0/24
85.142.162.0/23
85.143.0.0/20
85.143.18.0/23
85.143.26.0/24
85.143.96.0/22
85.143.112.0/22
85.143.124.0/22
85.143.224.0/21
85.143.239.0/24
86.110.96.0/19
185.71.96.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.149.64.0/24
194.190.224.0/19
IPv6:
2001:b08:22::/48
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
18:f3:81:06:b4:e6:f0:a9:ea:bb:bd:8d:06:f8:15:fa:34:1e:
01:3c:32:9a:5e:49:79:15:ba:b9:5a:c9:c3:53:d4:1e:7d:cc:
71:ac:b4:9c:c4:44:8e:a8:03:ac:08:a9:7d:f8:46:12:c8:a3:
1a:aa:11:d9:3b:df:5f:87:ca:2d:77:48:1d:a1:83:da:bc:6e:
6e:e6:e0:67:38:a0:df:7e:63:3a:ba:11:60:6a:ab:03:5a:39:
8f:6b:57:45:5a:ac:eb:93:3c:ba:55:dd:3f:07:f9:44:9a:0b:
ee:f8:44:61:24:4c:d4:e1:09:cf:b0:b1:54:48:e3:b6:e4:6d:
68:0b:f5:d3:cb:08:f6:78:f0:79:1c:48:8d:af:10:c2:64:84:
aa:fe:39:cb:64:c8:66:a3:0d:53:2f:54:0e:01:c7:d6:42:6e:
c0:e7:a2:04:11:9b:84:9e:89:93:d2:ca:94:bc:c4:17:f8:fa:
55:48:1f:02:46:73:0c:4d:ad:87:e8:c9:90:6b:2c:60:de:7c:
b1:b4:5e:1d:e1:62:89:88:03:4b:0e:6f:15:9c:8d:0d:a7:34:
bf:33:df:22:25:4e:dc:b0:c8:b4:bd:ac:1e:85:b3:61:49:00:
eb:a9:7d:0a:42:14:fd:08:12:2d:92:fb:d8:17:c0:5f:3c:53:
98:22:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org