Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ydPxw4uSqE4GUBsk3p24raih1Dw.roa
File: ydPxw4uSqE4GUBsk3p24raih1Dw.roa (raw, json)
Hash identifier: mEg8/tRcTNhwFwK4skp3+zcRV45YzVIin5Oo/e4v58o=
Subject key identifier: C9:D3:F1:C3:8B:92:A8:4E:06:50:1B:24:DE:9D:B8:AD:A8:A1:D4:3C
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018C677083B743528F5559EDD49D31F8F34E
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ydPxw4uSqE4GUBsk3p24raih1Dw.roa
Signing time: Thu 14 Dec 2023 08:27:56 +0000
ROA not before: Thu 14 Dec 2023 08:27:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
82.179.128.0/17 maxlen: 17
86.110.112.0/20 maxlen: 20
194.85.174.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
80.250.160.0/19 maxlen: 24
80.250.172.0/23 maxlen: 23
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
185.71.96.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.143.224.0/21 maxlen: 21
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
188.93.107.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
194.190.224.0/19 maxlen: 24
85.142.8.0/21 maxlen: 21
194.190.232.0/21 maxlen: 24
82.179.32.0/19 maxlen: 19
194.190.240.0/24 maxlen: 24
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2001:b08:26::/48 maxlen: 48
2a07:a6c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 15 Dec 2023 12:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:70:83:b7:43:52:8f:55:59:ed:d4:9d:31:f8:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 14 08:27:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9d3f1c38b92a84e06501b24de9db8ada8a1d43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:1f:03:d0:b1:29:fd:85:6b:26:70:39:5a:
23:d1:a0:c5:97:83:8a:f2:1a:92:8a:91:82:c7:02:
f0:e3:19:ce:7c:a7:ab:c2:d0:35:73:e9:53:15:8a:
c3:52:c6:6b:84:47:5a:ef:f7:ba:27:e6:1b:17:91:
3e:f6:48:dd:49:48:52:6c:e5:b6:b0:c1:15:6d:d5:
45:0c:4b:bd:01:0e:fb:c2:b3:5e:d9:a3:00:c9:13:
c4:08:ee:26:69:9e:08:32:ff:99:23:57:c1:1c:36:
56:80:55:2f:ab:8f:5d:16:fb:35:92:ca:15:35:43:
a9:40:89:6e:c9:ed:fd:f7:09:06:4c:e4:66:cf:09:
92:f2:71:6c:c0:dd:80:01:1f:ee:15:f9:63:b8:fc:
b9:b7:a0:bc:4b:7e:e3:35:89:a9:f7:8b:6f:a7:04:
01:29:f6:96:0a:2a:3e:d4:be:ad:22:46:92:75:17:
1e:ba:aa:67:66:07:f4:ff:12:ac:f7:50:07:3f:33:
f5:09:88:da:a8:64:ca:74:45:c1:56:4a:5e:01:83:
ec:7b:0c:9f:2f:f3:68:e7:ae:c3:2f:f8:c4:9f:60:
fd:b8:dd:06:11:7f:db:48:36:15:6f:0d:6d:91:fc:
be:ee:0c:f6:c5:99:64:95:4c:af:de:0a:2e:7a:7d:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:F1:C3:8B:92:A8:4E:06:50:1B:24:DE:9D:B8:AD:A8:A1:D4:3C
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ydPxw4uSqE4GUBsk3p24raih1Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
83.149.192.0/18
85.142.8.0/21
85.142.64.0/24
85.142.78.0/24
85.143.224.0/21
86.110.96.0/19
185.71.96.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:f7:29:54:ca:c3:28:2b:c5:b7:c9:04:48:6f:41:64:e7:8b:
6e:dd:09:2d:dc:50:fb:1e:f7:c2:a9:ac:8f:64:6b:06:7c:8f:
ea:1f:b6:0c:a3:27:bb:ed:34:a5:88:06:2b:3a:47:49:26:20:
7a:e2:0d:50:a1:7e:bf:25:8d:1e:15:a1:21:22:e1:3a:71:62:
ef:2f:1f:8c:78:f9:38:06:fd:36:0a:dd:14:b3:06:34:3e:4e:
d9:cf:91:ec:22:b5:0d:8f:3e:cc:03:1e:a3:f8:53:c1:e0:00:
84:81:be:07:b6:f8:af:de:ec:19:43:4e:b3:6c:ac:f4:c3:60:
9d:e0:e2:92:82:11:00:93:4e:91:37:ec:10:25:a2:44:be:9c:
fd:1c:c7:4a:0f:50:c3:6e:46:03:ad:c3:85:5b:65:07:2a:14:
a3:28:e6:f3:92:88:55:f1:2d:a9:45:cc:69:45:a2:cb:97:ee:
21:8d:ac:2a:a5:e0:e0:fe:60:e2:dc:97:1c:d3:18:cf:9e:cd:
68:75:89:10:53:dc:58:9b:2a:64:53:c8:9a:37:6c:93:53:00:
85:b7:87:68:4a:85:3c:ff:af:dc:0b:6a:60:f3:58:90:a6:62:
9b:3a:de:15:51:5d:b2:a8:b1:b2:6a:10:7d:c2:1c:55:41:64:
01:f3:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org