Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/haTkJvT1-rL57xaXAuOdZ5h6w-c.roa
File: haTkJvT1-rL57xaXAuOdZ5h6w-c.roa (raw, json)
Hash identifier: H8BtAmTz5xOexZAB+mKpQNWzvmgH9O0fwnPF3mjEh1Q=
Subject key identifier: 85:A4:E4:26:F4:F5:FA:B2:F9:EF:16:97:02:E3:9D:67:98:7A:C3:E7
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018EDC97E92EF4AA7144D14F8EB5DDA0EDE6
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/haTkJvT1-rL57xaXAuOdZ5h6w-c.roa
Signing time: Sun 14 Apr 2024 12:32:06 +0000
ROA not before: Sun 14 Apr 2024 12:32:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3267
IP address blocks: 80.250.160.0/19 maxlen: 24
82.137.128.0/18 maxlen: 24
82.137.176.0/20 maxlen: 22
82.179.32.0/20 maxlen: 24
82.179.63.0/24 maxlen: 24
82.179.64.0/19 maxlen: 24
82.179.140.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
85.142.8.0/21 maxlen: 21
85.142.16.0/20 maxlen: 24
85.142.32.0/21 maxlen: 24
85.142.52.0/22 maxlen: 24
85.142.56.0/22 maxlen: 24
85.142.102.0/23 maxlen: 24
85.142.104.0/21 maxlen: 24
85.142.116.0/22 maxlen: 24
85.142.120.0/21 maxlen: 24
85.142.148.0/23 maxlen: 24
85.142.153.0/24 maxlen: 24
85.142.162.0/23 maxlen: 24
85.143.0.0/20 maxlen: 24
85.143.18.0/23 maxlen: 24
85.143.26.0/24 maxlen: 24
85.143.96.0/22 maxlen: 24
85.143.112.0/22 maxlen: 24
85.143.124.0/22 maxlen: 24
85.143.224.0/21 maxlen: 21
85.143.239.0/24 maxlen: 24
86.110.96.0/24 maxlen: 24
86.110.101.0/24 maxlen: 24
86.110.102.0/23 maxlen: 24
185.71.96.0/22 maxlen: 22
185.141.124.0/22 maxlen: 22
188.93.107.0/24 maxlen: 24
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
194.85.168.0/23 maxlen: 23
194.85.174.0/23 maxlen: 23
194.149.64.0/24 maxlen: 24
194.190.232.0/21 maxlen: 24
194.190.240.0/23 maxlen: 24
194.190.247.0/24 maxlen: 24
194.190.249.0/24 maxlen: 24
194.190.254.0/23 maxlen: 23
194.226.192.0/20 maxlen: 20
2001:b08:22::/48 maxlen: 48
2001:b08:26::/48 maxlen: 48
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2a07:a6c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 14 Apr 2024 13:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:97:e9:2e:f4:aa:71:44:d1:4f:8e:b5:dd:a0:ed:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 14 12:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85a4e426f4f5fab2f9ef169702e39d67987ac3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:a5:b1:76:f3:df:24:05:bc:69:ef:44:8a:
9b:c1:2d:2d:d7:aa:78:03:6a:88:ba:b0:ac:0c:38:
85:99:91:19:7b:0b:63:15:35:f4:95:39:b5:a2:91:
91:b6:81:39:23:4b:f9:55:2b:6c:99:a9:87:43:80:
eb:41:91:45:e3:81:fe:ff:e2:31:8a:b4:a1:78:f9:
c0:48:6a:f9:11:b2:71:57:da:0a:a0:53:8c:7e:73:
2f:ed:87:a6:90:33:4f:9c:df:5e:8b:8a:bd:ea:d6:
bc:b6:c8:80:c3:85:cf:ce:aa:bd:dd:4d:c9:b7:ba:
ed:99:4d:0c:51:dd:54:98:c5:5e:45:fb:fc:10:dd:
cf:bf:29:cd:1e:53:ee:cd:05:5f:bb:d3:04:f9:12:
e2:a3:89:08:74:e5:76:58:9e:9b:9b:9d:45:01:c9:
bf:4a:40:85:04:08:ba:6a:37:db:08:25:67:d5:11:
84:a3:ce:e1:cc:c4:fd:8e:1a:7c:94:bf:5c:8b:94:
62:41:82:9c:84:bc:af:e3:8b:9e:77:03:e6:f6:57:
ef:f1:88:be:2a:21:e9:60:dc:c4:c5:e7:03:36:9c:
f6:c1:0c:35:33:11:9e:3e:f0:94:cf:ce:e6:60:64:
88:bb:f5:21:8e:74:48:25:84:8d:98:8a:16:4f:22:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:E4:26:F4:F5:FA:B2:F9:EF:16:97:02:E3:9D:67:98:7A:C3:E7
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/haTkJvT1-rL57xaXAuOdZ5h6w-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.128.0/18
82.179.32.0/20
82.179.63.0-82.179.95.255
82.179.140.0/23
83.149.192.0/18
85.142.8.0-85.142.39.255
85.142.52.0-85.142.59.255
85.142.102.0-85.142.111.255
85.142.116.0-85.142.127.255
85.142.148.0/23
85.142.153.0/24
85.142.162.0/23
85.143.0.0/20
85.143.18.0/23
85.143.26.0/24
85.143.96.0/22
85.143.112.0/22
85.143.124.0/22
85.143.224.0/21
85.143.239.0/24
86.110.96.0/24
86.110.101.0-86.110.103.255
185.71.96.0/22
185.141.124.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.168.0/23
194.85.174.0/23
194.149.64.0/24
194.190.232.0-194.190.241.255
194.190.247.0/24
194.190.249.0/24
194.190.254.0/23
194.226.192.0/20
IPv6:
2001:b08:22::/48
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:4d:79:c5:0e:6d:28:45:ee:20:ea:ac:c7:66:72:d5:7d:9a:
84:00:86:19:3a:31:cb:99:9a:a7:d0:c1:fd:b6:8a:3a:25:36:
a4:75:ad:88:0e:58:4b:ff:ec:c4:a9:48:aa:23:21:5b:47:3f:
11:09:9d:66:4f:fa:31:1f:df:61:89:a6:d1:74:39:26:13:a6:
72:b6:b0:be:ea:c3:04:50:41:e9:e6:88:eb:02:b7:54:8b:c2:
e5:92:2d:f0:07:48:4e:32:d1:7e:79:26:0e:d6:19:36:3f:a7:
b3:9c:94:68:dd:3d:9f:84:7f:eb:19:7e:02:f3:ed:3c:c2:0c:
0d:a7:13:92:01:69:43:10:f8:69:d3:c4:40:f4:16:52:a9:37:
c0:8e:48:f2:0f:b9:0b:99:d0:38:cf:a9:f4:5c:eb:64:98:a2:
58:ef:99:1d:23:ee:27:ee:d1:f5:ec:2b:4f:c5:31:af:27:0f:
3c:c1:c0:9c:fb:a1:43:9d:96:7a:ad:36:b6:09:3f:10:d3:ff:
8f:4f:2a:03:15:e0:3d:2b:bb:3b:27:4c:0f:fa:56:ab:c9:1e:
38:06:54:a9:41:7e:4e:ed:bd:8d:dc:b6:9a:83:4d:bd:1a:72:
22:c9:05:97:68:34:de:9f:ba:20:ab:95:82:00:bc:71:c7:b3:
ad:29:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org