Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/u4Jf0ALe9O2fmFk_sBQaxS9xmNY.roa
File: u4Jf0ALe9O2fmFk_sBQaxS9xmNY.roa (raw, json)
Hash identifier: QJtTdOKMqYYatIqdF3YXv4lIXEgeaBYuB5wuU8GzMMk=
Subject key identifier: BB:82:5F:D0:02:DE:F4:ED:9F:98:59:3F:B0:14:1A:C5:2F:71:98:D6
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018BDC5AED55CDFC370C2C6B5C111256A413
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/u4Jf0ALe9O2fmFk_sBQaxS9xmNY.roa
Signing time: Fri 17 Nov 2023 08:17:08 +0000
ROA not before: Fri 17 Nov 2023 08:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
86.110.112.0/20 maxlen: 20
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.143.224.0/21 maxlen: 21
188.93.107.0/24 maxlen: 24
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
194.190.232.0/22 maxlen: 22
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
193.27.214.0/24 maxlen: 24
193.27.214.0/23 maxlen: 23
194.85.32.0/20 maxlen: 20
82.179.128.0/17 maxlen: 17
194.85.174.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
80.250.164.0/22 maxlen: 22
80.250.160.0/19 maxlen: 19
80.250.162.0/24 maxlen: 24
80.250.163.0/24 maxlen: 24
80.250.160.0/23 maxlen: 23
80.250.172.0/23 maxlen: 23
80.250.168.0/22 maxlen: 22
80.250.168.0/24 maxlen: 24
80.250.169.0/24 maxlen: 24
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
185.71.96.0/22 maxlen: 22
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
82.179.32.0/19 maxlen: 19
2a07:a6c0::/29 maxlen: 29
2a00:db8::/32 maxlen: 48
2001:b08:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 18 Nov 2023 12:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:5a:ed:55:cd:fc:37:0c:2c:6b:5c:11:12:56:a4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Nov 17 08:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb825fd002def4ed9f98593fb0141ac52f7198d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:af:f3:c4:e1:42:c5:27:e6:ca:11:1d:49:
a8:14:c6:c3:31:fb:c8:64:44:bc:da:7d:ae:c1:4e:
41:f3:86:03:c2:6a:b1:54:ec:d5:83:63:84:cf:82:
a5:30:86:09:24:8c:29:2e:a1:27:0b:49:e6:03:bf:
d9:78:d9:cb:c1:1c:0d:4d:73:33:fd:7e:26:31:02:
a7:3c:1c:c8:af:50:cd:02:a0:4e:82:9d:e5:83:bf:
5b:da:ef:a1:08:9f:9e:94:fd:64:d7:c4:da:d6:4c:
fd:3b:6f:94:e3:eb:76:a9:f3:a2:2a:ec:48:be:e7:
80:d6:45:6c:0f:ac:1c:62:8f:28:20:39:23:13:0d:
4b:bc:61:af:ce:38:09:8c:ad:31:22:e9:01:af:52:
38:52:14:dd:a1:6c:6e:cb:d3:d9:34:54:ff:e6:fd:
32:00:39:42:10:ed:70:07:16:b6:11:2d:17:69:b7:
ed:eb:03:e2:a4:c7:df:97:7d:af:9e:f9:be:6f:7c:
d6:06:1f:e6:98:93:47:69:67:0c:8a:9e:af:92:6e:
e9:56:e7:6f:51:30:f6:8a:df:46:76:d3:d5:d2:a8:
6e:97:6b:81:5e:e7:52:43:e0:02:10:09:96:e0:4b:
68:a1:74:8e:7b:a1:0e:0d:ff:21:35:da:ed:78:1a:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:82:5F:D0:02:DE:F4:ED:9F:98:59:3F:B0:14:1A:C5:2F:71:98:D6
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/u4Jf0ALe9O2fmFk_sBQaxS9xmNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.64.0/24
85.142.78.0/24
85.143.224.0/21
86.110.96.0/19
185.71.96.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
25:88:40:4e:30:cf:3c:9f:4d:36:28:c1:82:fc:c3:ec:c6:e8:
03:6e:06:83:4f:0a:67:ec:2a:17:73:52:41:0f:58:b5:8c:48:
ee:e5:d4:04:4a:c0:25:47:a4:9b:ae:dd:7a:53:59:b3:0d:3e:
af:98:ab:e6:90:c8:72:f3:69:06:ad:6a:e3:b6:c3:0d:db:49:
db:c5:7b:ae:3c:5d:77:0d:61:29:21:49:bf:ee:8f:f4:10:4a:
f0:26:ae:33:70:f6:90:6d:fe:d8:77:41:e2:59:81:51:53:70:
8e:53:0d:9e:e5:59:c8:00:b6:23:fb:a6:8a:ad:9b:35:24:99:
98:ee:ab:11:d1:eb:c6:11:b9:98:4c:be:40:43:79:f6:21:fa:
a0:48:8f:f2:11:c6:cc:fa:94:17:7e:a1:7c:28:1d:c2:18:90:
e1:59:90:22:ce:9f:55:c2:d2:3f:94:93:7f:2c:77:63:ca:87:
ad:ff:46:87:07:41:26:ba:ec:96:ee:97:28:99:49:97:09:7f:
96:0a:9a:88:5b:89:55:81:85:ab:e5:83:b2:f0:6f:fc:df:5f:
9b:f0:ea:e3:ce:69:f3:98:28:ee:01:32:ff:1c:dc:d0:b1:1f:
76:f8:f1:cd:23:16:41:f4:ee:f5:8a:8a:11:59:91:b0:f6:0c:
8d:30:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org