Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/GdA4EoZIjWPCsxgJLaBkxMsCgg4.roa
File: GdA4EoZIjWPCsxgJLaBkxMsCgg4.roa (raw, json)
Hash identifier: Z88yvIwPYKNf8WhADodJbu8ptViX5PzrCOQl0AszVbY=
Subject key identifier: 19:D0:38:12:86:48:8D:63:C2:B3:18:09:2D:A0:64:C4:CB:02:82:0E
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018EDC4498AE5CD4E14B641421308EC7B4E1
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/GdA4EoZIjWPCsxgJLaBkxMsCgg4.roa
Signing time: Sun 14 Apr 2024 11:01:06 +0000
ROA not before: Sun 14 Apr 2024 11:01:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3267
IP address blocks: 80.250.160.0/19 maxlen: 24
82.137.128.0/18 maxlen: 24
82.137.176.0/20 maxlen: 22
82.179.32.0/20 maxlen: 24
82.179.63.0/24 maxlen: 24
82.179.64.0/19 maxlen: 24
82.179.140.0/23 maxlen: 23
83.149.192.0/18 maxlen: 24
85.142.8.0/21 maxlen: 21
85.142.16.0/20 maxlen: 24
85.142.32.0/21 maxlen: 24
85.142.52.0/22 maxlen: 24
85.142.56.0/22 maxlen: 24
85.142.102.0/23 maxlen: 24
85.142.104.0/21 maxlen: 24
85.142.116.0/22 maxlen: 24
85.142.120.0/21 maxlen: 24
85.142.148.0/23 maxlen: 24
85.142.153.0/24 maxlen: 24
85.142.162.0/23 maxlen: 24
85.143.0.0/20 maxlen: 24
85.143.18.0/23 maxlen: 24
85.143.26.0/24 maxlen: 24
85.143.96.0/22 maxlen: 24
85.143.112.0/22 maxlen: 24
85.143.124.0/22 maxlen: 24
85.143.224.0/21 maxlen: 21
85.143.239.0/24 maxlen: 24
86.110.96.0/24 maxlen: 24
86.110.101.0/24 maxlen: 24
86.110.102.0/23 maxlen: 24
185.71.96.0/22 maxlen: 22
185.141.124.0/22 maxlen: 22
188.93.107.0/24 maxlen: 24
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
194.85.168.0/23 maxlen: 23
194.85.174.0/23 maxlen: 23
194.149.64.0/24 maxlen: 24
194.190.224.0/19 maxlen: 24
194.190.232.0/21 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
194.226.192.0/20 maxlen: 20
2001:b08:22::/48 maxlen: 48
2001:b08:26::/48 maxlen: 48
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2a07:a6c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 14 Apr 2024 11:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:44:98:ae:5c:d4:e1:4b:64:14:21:30:8e:c7:b4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 14 11:01:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19d0381286488d63c2b318092da064c4cb02820e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2d:52:5b:f8:ab:30:f1:fb:b1:7f:55:c4:a9:
e4:4e:2d:3a:b7:9e:34:cd:bb:d3:34:44:02:74:22:
be:64:b4:79:98:c5:34:f5:8c:61:5e:b7:ad:07:8d:
77:3c:bd:1e:8d:f5:a1:e2:f6:cd:3c:8c:fd:13:ab:
36:b1:64:39:43:65:2c:b1:04:50:f1:8f:0f:22:89:
bb:8e:d4:d4:17:db:83:86:ff:e7:9d:b6:8c:46:49:
1b:b1:9f:1b:31:0d:23:87:09:ef:08:f1:85:4a:06:
db:49:5d:09:5c:81:1f:cb:89:3c:94:df:68:34:75:
83:94:cb:52:cf:04:10:74:2d:34:bb:7c:b3:1b:d6:
28:96:34:ae:2c:42:0f:a0:c7:35:6d:ae:80:73:6a:
1a:bb:f2:52:d3:01:15:d1:94:66:0d:8d:ec:53:8e:
4d:e8:ad:55:3e:6e:e8:ce:28:88:7f:65:62:7b:b6:
f4:f0:a0:51:a9:e1:33:fc:49:8e:fe:37:02:8d:b2:
1f:1a:9f:4b:ef:36:ed:ed:92:d3:c3:26:ac:9f:5f:
4b:1d:11:32:6a:0b:02:7f:34:0e:c7:65:68:39:7e:
8c:28:9d:93:8f:31:53:5e:fa:6f:27:9c:bd:33:c1:
58:ed:4c:d5:35:5c:eb:fe:c6:1c:11:c1:93:7c:3f:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:38:12:86:48:8D:63:C2:B3:18:09:2D:A0:64:C4:CB:02:82:0E
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/GdA4EoZIjWPCsxgJLaBkxMsCgg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.128.0/18
82.179.32.0/20
82.179.63.0-82.179.95.255
82.179.140.0/23
83.149.192.0/18
85.142.8.0-85.142.39.255
85.142.52.0-85.142.59.255
85.142.102.0-85.142.111.255
85.142.116.0-85.142.127.255
85.142.148.0/23
85.142.153.0/24
85.142.162.0/23
85.143.0.0/20
85.143.18.0/23
85.143.26.0/24
85.143.96.0/22
85.143.112.0/22
85.143.124.0/22
85.143.224.0/21
85.143.239.0/24
86.110.96.0/24
86.110.101.0-86.110.103.255
185.71.96.0/22
185.141.124.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.168.0/23
194.85.174.0/23
194.149.64.0/24
194.190.224.0/19
194.226.192.0/20
IPv6:
2001:b08:22::/48
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:ad:59:bb:7f:c7:65:6c:46:03:60:65:16:6c:80:b0:61:67:
d0:a1:37:59:50:ea:b6:36:d7:97:e7:40:7b:cc:48:a6:f5:de:
dd:9f:c9:fc:9b:93:cf:71:65:f3:5d:e7:dd:6a:f5:31:99:36:
50:df:03:00:ce:68:a0:55:80:43:f1:ff:bf:05:c5:6e:88:00:
a7:1b:30:1f:39:6c:12:bc:c4:6c:2c:1a:57:be:51:18:d6:ba:
fd:6f:75:6f:f5:e2:7b:57:cf:47:4b:f4:82:9c:4c:d2:e2:76:
12:69:06:31:2a:6e:2a:f3:13:bf:c1:0e:41:cf:a6:e9:54:02:
ce:7f:76:c7:4b:5b:44:ba:b3:ad:7c:02:74:42:e6:2e:17:5e:
2a:b3:a5:a1:94:bd:07:e1:7c:7f:e2:22:d6:0b:6b:f2:33:1d:
fc:31:68:95:33:d0:2e:25:2e:68:b0:05:6b:70:1f:1c:23:12:
75:88:70:bd:46:db:b3:26:1d:0c:9f:38:aa:32:1b:23:60:28:
c8:e9:da:9c:d1:40:f8:c3:b2:cf:75:7f:e1:8a:70:05:47:01:
c7:e5:2b:5d:c8:54:18:81:53:0d:4e:39:94:ad:28:7c:a4:50:
22:3b:f2:9b:b6:4d:ed:80:d1:85:e9:56:59:39:14:f4:aa:a2:
19:56:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 16:37:36 2024 by rpki-client on console.sobornost.net