Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/oAFC3y_LEMMw1--SkC2odcp8Vz0.roa
File: oAFC3y_LEMMw1--SkC2odcp8Vz0.roa (raw, json)
Hash identifier: yf+OLjN9RrV1eB8JoQnYKqNUWzz5NF0gMle9EfIBoqM=
Subject key identifier: A0:01:42:DF:2F:CB:10:C3:30:D7:EF:92:90:2D:A8:75:CA:7C:57:3D
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018C38F56463633B2EC0397DA31E77871A9E
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/oAFC3y_LEMMw1--SkC2odcp8Vz0.roa
Signing time: Tue 05 Dec 2023 07:50:55 +0000
ROA not before: Tue 05 Dec 2023 07:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
82.179.128.0/17 maxlen: 17
86.110.112.0/20 maxlen: 20
194.85.174.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
80.250.160.0/19 maxlen: 24
80.250.172.0/23 maxlen: 23
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
185.71.96.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.143.224.0/21 maxlen: 21
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
188.93.107.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
85.142.8.0/21 maxlen: 21
194.190.232.0/22 maxlen: 22
82.179.32.0/19 maxlen: 19
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2001:b08:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Dec 2023 08:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:f5:64:63:63:3b:2e:c0:39:7d:a3:1e:77:87:1a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 5 07:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00142df2fcb10c330d7ef92902da875ca7c573d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:5c:16:89:65:b6:6e:e8:51:eb:84:72:6a:
b0:20:0e:26:00:db:0d:70:7a:0a:ca:c7:22:5a:3e:
35:06:e4:7a:fb:5e:46:bb:37:b3:0c:42:83:bf:9f:
d1:0c:20:68:89:28:e5:e0:99:55:50:1c:79:6f:46:
02:da:b1:22:47:5e:8c:f1:91:a7:c1:66:52:72:43:
76:a6:0c:6a:4a:cd:bb:29:1a:b3:64:b3:1f:64:04:
5b:bd:71:7a:86:cb:fe:a5:9c:d8:9a:dd:a6:c7:28:
d7:29:56:c8:45:18:c5:54:bf:03:85:5f:5a:8a:e8:
68:94:a1:91:31:4f:0d:73:c8:18:54:98:da:63:8b:
d0:3e:18:53:17:50:1e:3d:73:56:1a:8b:9a:a2:d9:
06:25:bc:9a:6d:5e:58:47:2b:af:5d:cf:aa:ed:60:
ee:9a:68:77:f6:f5:ef:da:62:c8:5b:c5:40:18:f3:
7a:0a:2b:c1:25:67:71:5a:02:6d:32:95:21:5a:92:
1e:ee:83:0c:a2:ea:44:17:85:15:d7:d0:f6:fa:e5:
df:7a:73:e4:3e:2a:a8:98:a6:39:90:db:04:f4:87:
db:09:2c:65:23:6e:e2:61:e1:47:0c:4e:d1:ea:fc:
af:5e:73:c0:32:68:c8:34:af:3f:f4:ea:02:8e:f6:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:42:DF:2F:CB:10:C3:30:D7:EF:92:90:2D:A8:75:CA:7C:57:3D
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/oAFC3y_LEMMw1--SkC2odcp8Vz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.8.0/21
85.142.64.0/24
85.142.78.0/24
85.143.224.0/21
86.110.96.0/19
185.71.96.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:9c:87:f2:bb:d6:9b:a3:5c:1e:d6:24:c2:75:6f:5d:c4:a3:
2e:b1:10:43:9d:16:7f:8b:63:bb:87:43:c6:cb:ca:60:86:c6:
a6:dc:f3:2a:b3:4a:62:af:db:59:a0:65:e9:38:ab:cb:54:c7:
1e:6a:50:02:6c:d3:ca:6e:aa:df:51:8d:29:7b:a5:32:6e:07:
85:31:08:8f:df:65:ff:c0:8e:f5:9c:a0:c6:7e:c3:de:60:90:
68:de:ea:cf:a0:ed:07:0e:50:fa:16:b0:9b:b5:ae:13:8e:53:
52:5c:ef:d4:c2:aa:6a:d3:40:24:74:75:fb:69:ab:45:b0:1a:
a9:68:08:ef:6f:37:9c:23:92:9f:53:7b:2e:e6:58:94:a6:93:
3f:7d:37:44:a7:37:fa:58:c1:86:a6:4e:29:5b:8b:bf:1d:8e:
ec:eb:9e:aa:43:64:ef:81:d0:cb:71:9d:99:83:a9:e9:f7:e8:
a6:52:36:98:0f:cd:22:33:98:cc:7c:bc:b3:0f:fd:a7:72:c4:
3a:e3:31:02:ec:89:76:4c:4b:63:7e:13:9f:f3:a4:92:08:45:
83:b4:31:6b:1b:80:b2:d1:14:40:c1:c9:38:3f:c9:a7:1e:4e:
8a:a6:ca:68:2b:39:ff:8b:5a:e6:a8:44:dc:a7:07:61:eb:cb:
19:07:aa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org