Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1CW5e6eJnIpdBAdxdqBFWjYqqpg.roa
File: 1CW5e6eJnIpdBAdxdqBFWjYqqpg.roa (raw, json)
Hash identifier: WN7VsEuyTtKJKOS3+7qPzzIdsWnFzVghINU+C1C6U+c=
Subject key identifier: D4:25:B9:7B:A7:89:9C:8A:5D:04:07:71:76:A0:45:5A:36:2A:AA:98
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018F627FD8B1E3323EC09F93BFD27AFC3D38
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1CW5e6eJnIpdBAdxdqBFWjYqqpg.roa
Signing time: Fri 10 May 2024 12:34:56 +0000
ROA not before: Fri 10 May 2024 12:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.132.0/22 maxlen: 22
82.140.136.0/21 maxlen: 21
82.140.138.0/24 maxlen: 24
82.140.139.0/24 maxlen: 24
82.140.140.0/24 maxlen: 24
82.140.141.0/24 maxlen: 24
82.140.144.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.179.0/24 maxlen: 24
82.140.180.0/23 maxlen: 23
82.140.184.0/22 maxlen: 22
82.140.188.0/24 maxlen: 24
82.140.190.0/23 maxlen: 23
84.46.128.0/19 maxlen: 19
84.46.160.0/21 maxlen: 21
84.46.168.0/23 maxlen: 23
84.46.172.0/22 maxlen: 22
84.46.172.0/24 maxlen: 24
84.46.173.0/24 maxlen: 24
84.46.175.0/24 maxlen: 24
84.46.176.0/20 maxlen: 20
84.46.192.0/21 maxlen: 21
84.46.201.0/24 maxlen: 24
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.0.0/23 maxlen: 23
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.25.0/24 maxlen: 24
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/23 maxlen: 23
86.38.40.0/21 maxlen: 21
86.38.42.0/24 maxlen: 24
86.38.43.0/24 maxlen: 24
86.38.45.0/24 maxlen: 24
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.146.0/23 maxlen: 24
86.38.148.0/23 maxlen: 23
86.38.150.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.208.0/22 maxlen: 22
86.38.212.0/23 maxlen: 23
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.222.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.229.0/24 maxlen: 24
86.38.233.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.236.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
86.38.244.0/23 maxlen: 23
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.165.0/24 maxlen: 24
89.117.166.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.220.0/23 maxlen: 23
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 23
89.117.248.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.253.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
217.9.244.0/23 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 11 May 2024 20:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:7f:d8:b1:e3:32:3e:c0:9f:93:bf:d2:7a:fc:3d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: May 10 12:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d425b97ba7899c8a5d04077176a0455a362aaa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:ef:e3:36:4a:89:52:4b:e3:cf:f1:69:4b:
6b:da:23:70:6c:f2:79:aa:9f:db:ad:e7:21:35:4b:
0c:18:4c:2e:7b:2d:02:c9:b0:61:f8:be:5d:38:71:
f3:00:40:c7:f9:d8:19:14:42:58:4d:2d:d4:73:34:
f8:0a:3d:5e:5a:11:1d:46:f7:ce:cf:e2:dc:d3:83:
e9:da:0c:0c:2d:5e:f7:a0:03:e2:96:74:ec:62:37:
ed:89:9e:35:a6:01:69:2c:a6:0e:f0:eb:a6:c7:47:
df:c5:9f:9d:13:62:88:63:5b:7d:94:7f:1f:3e:21:
fb:48:a2:f6:1c:39:61:b6:54:79:c6:aa:e6:4d:a6:
6c:19:ad:4d:04:55:e8:22:18:09:15:a5:e3:9b:cc:
f4:76:72:39:7c:0f:74:92:33:80:4f:eb:72:d1:c5:
01:6a:48:b9:8c:f9:0b:f3:2a:2a:5e:da:72:0a:64:
fb:c0:5c:c1:25:a3:3d:a7:8f:38:5b:8a:88:f1:5b:
28:19:3f:db:93:61:2b:75:83:5b:fc:4d:94:f1:96:
1c:70:82:89:fc:40:5d:e4:00:25:67:b1:00:8c:77:
0f:4c:56:61:d1:6d:df:9a:37:3a:e3:0e:9c:d3:6d:
b9:00:8b:b3:6b:ea:2d:d9:62:06:e9:f8:0c:45:62:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:B9:7B:A7:89:9C:8A:5D:04:07:71:76:A0:45:5A:36:2A:AA:98
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1CW5e6eJnIpdBAdxdqBFWjYqqpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0/23
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.160.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.208.0-86.38.213.255
86.38.215.0/24
86.38.222.0/23
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.251.255
Signature Algorithm: sha256WithRSAEncryption
5c:85:9f:84:de:8d:0c:ea:3c:16:7e:c4:aa:ed:e5:05:7c:65:
10:a4:83:d4:e1:a4:73:b3:83:f8:9b:4e:c7:a4:af:72:63:dc:
d7:0d:4a:34:30:75:87:b4:68:e1:c5:16:d0:74:5e:13:51:59:
5c:43:69:60:a2:9e:7b:ed:9c:52:20:bd:4b:da:bc:89:87:f4:
47:8c:dd:c5:9a:d8:d1:ec:67:c6:58:13:66:32:7c:e1:3a:37:
d7:9e:f3:79:5c:6d:87:38:05:ee:d1:66:e7:15:32:77:b8:24:
29:36:10:37:7a:bf:18:2b:19:f9:49:e3:ed:56:bc:7d:78:45:
1e:a1:80:eb:16:c1:3f:b5:b2:cb:b7:60:0f:ae:b8:9b:12:9b:
59:ba:c5:50:77:3e:88:c8:23:1e:2c:a2:49:18:25:5f:92:3c:
9e:4f:f2:37:03:99:4f:42:ad:d3:a1:0c:74:3c:c0:c5:e7:01:
3b:9b:dc:3b:a8:f2:61:91:79:3d:39:2e:1a:10:2c:e2:a5:9f:
1b:4c:8b:17:e0:6f:6e:97:ec:35:d3:08:76:9f:2e:e4:5b:ea:
72:53:d8:4e:69:3e:66:58:48:09:69:04:e7:05:ec:3e:f8:e2:
c2:5b:f8:e3:b6:80:43:84:66:cc:57:c2:54:3b:4a:17:02:b9:
cf:67:79:6a
-----BEGIN CERTIFICATE-----
MIIHiTCCBnGgAwIBAgISAY9if9ix4zI+wJ+Tv9J6/D04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjQwNTEwMTIzNDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDI1Yjk3YmE3ODk5YzhhNWQwNDA3NzE3NmEwNDU1YTM2MmFhYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrHv4zZKiVJL48/xaUtr2iNwbPJ5
qp/brechNUsMGEwuey0CybBh+L5dOHHzAEDH+dgZFEJYTS3UczT4Cj1eWhEdRvfO
z+Lc04Pp2gwMLV73oAPilnTsYjftiZ41pgFpLKYO8Oumx0ffxZ+dE2KIY1t9lH8f
PiH7SKL2HDlhtlR5xqrmTaZsGa1NBFXoIhgJFaXjm8z0dnI5fA90kjOAT+ty0cUB
aki5jPkL8yoqXtpyCmT7wFzBJaM9p484W4qI8VsoGT/bk2ErdYNb/E2U8ZYccIKJ
/EBd5AAlZ7EAjHcPTFZh0W3fmjc64w6c0225AIuza+ot2WIG6fgMRWLfHwIDAQAB
o4IElTCCBJEwHQYDVR0OBBYEFNQluXuniZyKXQQHcXagRVo2KqqYMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvMUNXNWU2ZUpuSXBkQkFkeGRxQkZXallxcXBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICqQYIKwYBBQUHAQcBAf8EggKYMIIClDCCApAEAgABMIIC
iDAMAwQCUoyEAwQBUoywMAwDBABSjLMDBAFSjLQwDAMEA1KMuAMEAFKMvAMEAVKM
vjAMAwQHVC6AAwQBVC6oMAwDBAJULqwDBANULsAwDAMEAFQuyQMEAVQu6AMEAVYm
AAMEAFYmBgMEA1YmEDAMAwQAViYZAwQFViYAAwQAViYhAwQAViYkMAwDBAFWJiYD
BABWJpYDBAJWJpgwDAMEBVYmoAMEAFYmrgMEAFYmsAMEAFYmvAMEA1YmwAMEAFYm
yTAMAwQEVibQAwQBVibUAwQAVibXAwQBVibeMAwDBABWJuMDBANWJuAwDAMEAFYm
6QMEAFYm6gMEAVYm7DAMAwQAVibvAwQAVibwAwQBVib0AwQAWXQOAwQAWXRHMAwD
BABZdE0DBABZdE4DBABZdFoDBABZdF0DBABZdGEDBABZdHwDBABZdIEDBABZdI8D
BABZdJcDBABZdJsDBABZdKADBABZdKIDBABZdK4DBABZdLADBABZdLIDBABZdOgD
BABZdOsDBABZdO4DBABZdPADBABZdPUDBABZdPkDBABZdQoDBABZdQ4DBABZdRoD
BABZdScDBABZdUUDBABZdVYDBAFZdVwDBABZdWQDBABZdWwDBABZdW4DBABZdXcD
BABZdX0wDAMEAFl1fwMEAFl1gDAMAwQAWXWJAwQAWXWKAwQBWXWMMAwDBABZdaUD
BABZdaYDBABZdaowDAMEBFl1sAMEAll1uDAMAwQGWXXAAwQBWXXUMAwDBABZddsD
BAFZddwwDAMEAFl13wMEAVl14DAMAwQDWXXoAwQCWXXwMAwDBABZdfcDBAFZdfgD
BABZdf0DBADZCfAwDAMEANkJ8wMEAtkJ+DANBgkqhkiG9w0BAQsFAAOCAQEAXIWf
hN6NDOo8Fn7Equ3lBXxlEKSD1OGkc7OD+JtOx6SvcmPc1w1KNDB1h7Ro4cUW0HRe
E1FZXENpYKKee+2cUiC9S9q8iYf0R4zdxZrY0exnxlgTZjJ84To3157zeVxthzgF
7tFm5xUyd7gkKTYQN3q/GCsZ+Unj7Va8fXhFHqGA6xbBP7Wyy7dgD664mxKbWbrF
UHc+iMgjHiyiSRglX5I8nk/yNwOZT0Kt06EMdDzAxecBO5vcO6jyYZF5PTkuGhAs
4qWfG0yLF+BvbpfsNdMIdp8u5FvqclPYTmk+ZlhICWkE5wXsPvjiwlv447aAQ4Rm
zFfCVDtKFwK5z2d5ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:47 2024 by rpki-client on console-fra.rpki-client.org