Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dUEbEaB596T7uWAz9m7SdwB7Zr4.roa
File: dUEbEaB596T7uWAz9m7SdwB7Zr4.roa (raw, json)
Hash identifier: vOd9nraL5TkgtPQJLG34dEhk/VhvcCHunyVh/rp8Qmw=
Subject key identifier: 75:41:1B:11:A0:79:F7:A4:FB:B9:60:33:F6:6E:D2:77:00:7B:66:BE
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018BE25C91FDF13F48CDAF7FF2AA833EFE80
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dUEbEaB596T7uWAz9m7SdwB7Zr4.roa
Signing time: Sat 18 Nov 2023 12:16:39 +0000
ROA not before: Sat 18 Nov 2023 12:16:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
86.110.112.0/20 maxlen: 20
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.143.224.0/21 maxlen: 21
188.93.107.0/24 maxlen: 24
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
194.190.232.0/22 maxlen: 22
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
193.27.214.0/24 maxlen: 24
193.27.214.0/23 maxlen: 23
194.85.32.0/20 maxlen: 20
82.179.128.0/17 maxlen: 17
194.85.174.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
80.250.164.0/22 maxlen: 22
80.250.160.0/19 maxlen: 19
80.250.162.0/24 maxlen: 24
80.250.163.0/24 maxlen: 24
80.250.160.0/23 maxlen: 23
80.250.172.0/23 maxlen: 23
80.250.168.0/22 maxlen: 22
80.250.168.0/24 maxlen: 24
80.250.169.0/24 maxlen: 24
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
185.71.96.0/22 maxlen: 22
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
85.142.0.0/20 maxlen: 21
82.179.32.0/19 maxlen: 19
2a07:a6c0::/29 maxlen: 29
2a00:db8::/32 maxlen: 48
2001:b08:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 18 Nov 2023 14:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:5c:91:fd:f1:3f:48:cd:af:7f:f2:aa:83:3e:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Nov 18 12:16:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75411b11a079f7a4fbb96033f66ed277007b66be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:50:d3:0a:37:97:db:86:ad:9b:f6:8a:fc:
79:3c:d6:4b:5c:92:78:13:27:70:ce:b0:c3:23:ad:
b7:e7:a9:f5:46:5a:a7:4a:85:53:30:7d:8e:ce:80:
bb:b1:01:53:c1:96:65:66:14:04:a9:b1:a0:23:9c:
2c:7e:c8:76:31:ba:f4:83:1a:69:5f:2c:8d:2e:f2:
af:52:33:69:12:a1:af:0b:07:c1:c6:78:a2:41:67:
3f:a3:82:02:af:4b:a4:4d:52:0c:5e:23:2f:19:df:
79:47:75:d1:1d:36:28:bc:bf:4e:e4:06:15:23:f9:
60:d1:64:ce:ed:48:83:7f:02:11:5b:e6:1e:f6:9f:
59:98:9e:8b:06:55:a2:6d:4f:f7:09:5a:ad:c1:dc:
9d:13:26:04:27:1e:07:fc:b0:fd:b9:85:1f:6d:9e:
36:3f:b6:b0:da:0b:57:11:e7:1f:e6:45:2e:50:ed:
69:c5:e2:2b:e8:b3:48:da:5d:da:6a:4b:02:bf:97:
92:3e:e8:3c:42:72:cb:c8:e1:27:ce:61:d5:e0:ba:
4b:b2:48:22:08:e2:8c:8b:cf:eb:e1:b6:d4:09:1c:
d3:be:7a:52:d2:14:09:ff:28:03:fe:ce:3b:d9:c9:
33:ed:db:65:99:f5:83:4a:68:79:eb:fc:c5:a1:d0:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:41:1B:11:A0:79:F7:A4:FB:B9:60:33:F6:6E:D2:77:00:7B:66:BE
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dUEbEaB596T7uWAz9m7SdwB7Zr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.0.0/20
85.142.64.0/24
85.142.78.0/24
85.143.224.0/21
86.110.96.0/19
185.71.96.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:33:9c:14:26:9f:7c:81:90:4f:4e:bc:23:8d:76:7b:8c:c2:
04:63:07:04:4d:9e:90:70:13:9c:ea:ff:25:bb:28:d7:ef:8b:
91:88:2b:91:09:f2:43:4b:0a:61:56:51:35:1c:cb:81:32:b1:
92:69:8c:11:39:97:43:9d:d2:36:e9:51:c1:d9:7f:f4:31:da:
ea:9d:35:e0:6c:66:f3:cf:48:6c:a5:81:ab:07:3b:17:d2:49:
09:e7:21:80:79:66:03:56:0f:9b:34:95:e2:6c:9d:2c:f4:f4:
b3:c7:e7:1c:5b:e7:45:33:79:bc:37:5a:11:3e:39:47:2f:f3:
c6:7e:a8:60:06:0b:c5:f9:87:b3:bd:4f:31:8e:77:53:8c:38:
1a:9a:76:fb:6e:0d:7a:b4:a7:c4:cd:ea:f9:14:60:48:c0:9c:
59:c6:83:28:86:58:16:52:8e:d4:04:b5:04:57:1c:18:cc:da:
31:70:5f:18:82:9b:e5:a1:7e:e7:ba:12:37:5b:29:fd:74:92:
2f:f1:94:92:e5:75:36:2d:d2:39:6f:72:47:35:5c:05:0f:8a:
7b:c6:34:5f:45:00:a6:5b:9f:e7:05:3d:c0:f0:e0:e9:21:17:
fd:68:7a:95:b3:a4:21:29:0a:89:83:44:48:9a:45:d9:58:c6:
66:7b:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org