Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nWiKhG6b-PCJ91LKjpE9bpRk2ag.roa
File: nWiKhG6b-PCJ91LKjpE9bpRk2ag.roa (raw, json)
Hash identifier: V9546ECJP7hIRkJuvmD+fifD0yY+Kn996z99dfD/wsk=
Subject key identifier: 9D:68:8A:84:6E:9B:F8:F0:89:F7:52:CA:8E:91:3D:6E:94:64:D9:A8
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018755CC4CC58E18107667D6807D350A6413
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nWiKhG6b-PCJ91LKjpE9bpRk2ag.roa
Signing time: Thu 06 Apr 2023 09:01:04 +0000
ROA not before: Thu 06 Apr 2023 09:01:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
193.27.214.0/24 maxlen: 24
193.27.214.0/23 maxlen: 23
194.85.32.0/20 maxlen: 20
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
82.179.128.0/17 maxlen: 17
86.110.112.0/20 maxlen: 20
194.85.174.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
80.250.164.0/22 maxlen: 22
80.250.160.0/19 maxlen: 19
80.250.162.0/24 maxlen: 24
80.250.163.0/24 maxlen: 24
80.250.160.0/23 maxlen: 23
80.250.172.0/23 maxlen: 23
80.250.168.0/22 maxlen: 22
80.250.168.0/24 maxlen: 24
80.250.169.0/24 maxlen: 24
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
194.190.232.0/22 maxlen: 22
82.179.32.0/19 maxlen: 19
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
2a07:a6c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 18 May 2023 21:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:cc:4c:c5:8e:18:10:76:67:d6:80:7d:35:0a:64:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 6 09:01:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d688a846e9bf8f089f752ca8e913d6e9464d9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:5e:2e:74:6e:a1:4b:0d:c0:96:b9:4c:a8:
f3:1d:c0:d2:1d:a3:b5:50:4f:90:37:3a:0c:c7:ea:
31:9b:04:27:f1:94:86:e7:ea:e7:c1:57:10:57:60:
4e:34:03:44:a5:9f:51:c3:f7:93:39:80:4b:d4:63:
8d:96:52:cb:5b:10:c1:b3:d8:d8:2f:9f:2a:0a:77:
a0:b4:04:ab:cc:73:cc:55:87:56:04:01:26:cf:13:
bd:a2:88:a5:10:06:73:bc:3b:9f:e1:66:9a:76:ec:
17:97:43:7e:53:57:69:c0:d6:b2:d1:82:33:fe:bc:
00:af:05:e1:7f:d1:4c:a5:ca:20:2b:c5:7c:cc:4f:
c9:e8:12:b0:6b:58:9c:61:f8:89:12:f8:92:0b:33:
fe:fd:b0:c7:64:f4:3c:09:4a:b4:ec:ca:4e:30:b7:
71:17:73:55:c7:88:50:90:af:4c:33:b4:46:bc:0a:
de:43:1f:8b:64:87:dd:17:c8:e3:5d:db:1f:ae:36:
84:b3:88:33:d7:09:f5:85:4e:d7:8a:78:ae:55:8a:
4c:ac:76:bc:4b:8f:e7:6e:24:18:9e:83:d1:c5:c0:
75:60:34:5f:ca:6a:69:85:81:7d:eb:50:68:06:21:
4a:6f:f5:80:ca:63:ff:51:e9:56:b1:44:46:38:75:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:8A:84:6E:9B:F8:F0:89:F7:52:CA:8E:91:3D:6E:94:64:D9:A8
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nWiKhG6b-PCJ91LKjpE9bpRk2ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.64.0/24
85.142.78.0/24
86.110.96.0/19
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:62:5c:5a:b3:d6:cc:52:b9:6f:05:75:1e:c1:b2:a2:92:e3:
b7:50:92:58:dd:80:d4:01:10:ab:90:2d:e1:42:e5:ae:fc:c2:
77:62:66:ca:f5:43:f7:c4:cc:bf:60:dc:61:0b:bd:1a:01:cc:
b5:1b:74:d5:a7:b4:4c:81:af:c0:63:60:61:e3:21:1d:b4:83:
d3:2d:a5:52:d8:b5:95:44:ac:64:26:ad:8b:61:8f:44:a5:1c:
6b:ce:07:42:a0:51:2e:0d:f5:ca:44:91:61:b4:3a:c6:29:fe:
1c:1e:cb:17:e9:a0:d0:8b:41:91:a2:10:e5:d1:d1:78:d2:fe:
e3:e7:98:fb:25:5b:03:35:c1:5d:f8:d4:5b:f9:d0:90:14:0f:
79:6f:23:c7:6e:27:31:5a:68:b4:7f:f4:1d:10:f2:a3:b7:2b:
47:7f:19:5d:cf:e2:74:e4:c5:60:2a:3c:65:f0:bf:6a:22:e8:
df:29:2a:c4:7a:0b:70:0c:65:66:c2:a9:a4:f2:88:fc:0e:6e:
58:f0:b8:73:40:9c:89:e8:4e:4e:91:bb:4d:6f:f3:6c:94:55:
5f:52:7e:2c:5a:e3:6c:a4:04:86:34:86:db:95:19:b7:47:a9:
26:3e:6e:49:43:b1:42:b4:cb:22:1d:e0:30:16:4d:8e:cc:db:
bc:1e:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org