Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/w1F0dbqpjLw5sy-zGsq9GG02ftg.roa
File: w1F0dbqpjLw5sy-zGsq9GG02ftg.roa (raw, json)
Hash identifier: qnmp8aC0tcZ39lFgi5x9kVFvX8j2d4iOtdG9YZoGPNc=
Subject key identifier: C3:51:74:75:BA:A9:8C:BC:39:B3:2F:B3:1A:CA:BD:18:6D:36:7E:D8
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018D986A3CC406CEDF4E6DF9AA2848F90C6E
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/w1F0dbqpjLw5sy-zGsq9GG02ftg.roa
Signing time: Sun 11 Feb 2024 13:45:15 +0000
ROA not before: Sun 11 Feb 2024 13:45:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3267
IP address blocks: 80.250.160.0/19 maxlen: 24
82.137.128.0/18 maxlen: 24
82.179.32.0/19 maxlen: 19
82.179.64.0/18 maxlen: 18
82.179.128.0/17 maxlen: 17
83.149.192.0/18 maxlen: 24
85.142.8.0/21 maxlen: 21
85.142.32.0/21 maxlen: 24
85.142.52.0/22 maxlen: 24
85.142.56.0/22 maxlen: 24
85.142.102.0/23 maxlen: 24
85.142.104.0/21 maxlen: 24
85.142.116.0/22 maxlen: 24
85.142.120.0/21 maxlen: 24
85.142.148.0/23 maxlen: 24
85.142.153.0/24 maxlen: 24
85.142.162.0/23 maxlen: 24
85.143.0.0/20 maxlen: 24
85.143.18.0/23 maxlen: 24
85.143.26.0/24 maxlen: 24
85.143.96.0/22 maxlen: 24
85.143.112.0/22 maxlen: 24
85.143.124.0/22 maxlen: 24
85.143.224.0/21 maxlen: 21
85.143.239.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
86.110.112.0/20 maxlen: 20
185.71.96.0/22 maxlen: 22
188.93.107.0/24 maxlen: 24
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
194.85.174.0/23 maxlen: 23
194.149.64.0/24 maxlen: 24
194.190.224.0/19 maxlen: 24
194.190.232.0/21 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
194.226.192.0/20 maxlen: 20
2001:b08:22::/48 maxlen: 48
2001:b08:26::/48 maxlen: 48
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2a07:a6c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 12 Feb 2024 11:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:98:6a:3c:c4:06:ce:df:4e:6d:f9:aa:28:48:f9:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Feb 11 13:45:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3517475baa98cbc39b32fb31acabd186d367ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:8b:fd:58:e7:f7:5d:94:c2:a1:c2:59:47:
99:da:ab:20:5d:41:66:65:b6:33:f2:38:2c:af:a4:
51:07:08:24:36:4a:26:43:b9:8f:7f:46:15:c2:b9:
e0:8f:6e:5d:d5:89:06:9c:d4:5e:22:9c:89:ec:b9:
56:24:05:98:a4:bd:bc:dc:07:a3:c6:d7:1c:eb:4a:
d9:a4:ea:1f:c0:80:2b:5a:6d:d4:71:80:18:1f:bd:
bb:13:f1:32:55:c6:6a:72:46:36:b8:d2:4d:5b:7e:
5a:63:99:6a:4b:f8:1d:27:60:54:bf:46:38:dd:79:
7f:0e:8e:1c:92:7b:b1:85:ff:93:a2:59:a6:ff:0c:
87:28:2f:1b:38:54:87:77:fa:33:f0:fc:79:51:ec:
8c:32:20:d2:e6:ed:22:7e:6d:11:6a:b2:c7:a4:6f:
a8:8c:ef:9b:fa:30:62:a6:ea:15:30:ed:0e:a1:bd:
94:10:be:b3:3f:4f:57:4d:66:e1:a6:4b:40:0d:ac:
ed:0e:44:50:64:3c:3e:84:da:20:f5:9c:b2:4f:25:
4f:8e:35:de:34:c5:4c:7b:9d:e8:8d:2b:e6:95:7c:
03:e9:8e:46:07:9e:37:e8:36:4e:87:27:b2:10:9c:
c0:97:e0:4d:fa:35:ca:78:41:bd:11:52:8e:22:9b:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:51:74:75:BA:A9:8C:BC:39:B3:2F:B3:1A:CA:BD:18:6D:36:7E:D8
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/w1F0dbqpjLw5sy-zGsq9GG02ftg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.128.0/18
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.8.0/21
85.142.32.0/21
85.142.52.0-85.142.59.255
85.142.102.0-85.142.111.255
85.142.116.0-85.142.127.255
85.142.148.0/23
85.142.153.0/24
85.142.162.0/23
85.143.0.0/20
85.143.18.0/23
85.143.26.0/24
85.143.96.0/22
85.143.112.0/22
85.143.124.0/22
85.143.224.0/21
85.143.239.0/24
86.110.96.0/19
185.71.96.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.149.64.0/24
194.190.224.0/19
194.226.192.0/20
IPv6:
2001:b08:22::/48
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
39:85:96:52:56:cd:a2:22:0e:b2:fd:97:d8:0a:a0:58:da:a3:
2b:64:36:e7:7e:db:e2:45:d8:3d:a3:15:20:51:69:df:58:8f:
38:ce:14:42:e0:b4:71:0c:ce:4f:e9:5b:1f:31:db:93:b0:a3:
f7:6c:af:a4:73:98:4d:99:34:13:8d:0a:0e:fd:ca:c6:22:d4:
53:63:54:86:6b:7a:b3:df:ac:49:70:ae:11:d3:69:e6:21:14:
17:e1:45:4b:07:3a:6c:73:a9:7f:9b:f5:bb:14:5d:94:c4:8b:
5e:d8:50:a0:a3:08:a4:98:1b:85:9f:03:50:a4:75:9c:0d:b4:
cf:18:a9:ab:b1:aa:07:5b:55:f9:b2:cf:b1:8f:ee:ac:f4:5c:
28:c8:3e:9a:41:52:4d:9b:7d:b1:5b:35:97:6a:76:b1:c7:e6:
5d:d7:20:da:5a:d3:12:37:d7:04:36:1c:5b:34:40:85:03:64:
6b:0c:1f:46:06:1e:f3:0b:b6:84:4a:87:38:4c:2f:7a:1b:24:
2e:94:f6:b5:f5:08:f1:70:78:cc:24:0d:f3:cd:fc:51:35:27:
c3:a0:64:84:77:b6:92:2d:47:8f:64:da:44:1d:80:db:45:64:
65:ea:ef:1f:28:13:d5:b0:45:fd:d1:ff:dc:55:96:9a:41:d4:
d5:1b:22:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org