Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/6aeFFmFlKuVfA0WEf1qAdIuLALQ.roa
File: 6aeFFmFlKuVfA0WEf1qAdIuLALQ.roa (raw, json)
Hash identifier: ShFvf0ss+jZWg+OMJ5+sPmOsP/H5vIqJEd61u9sRA5g=
Subject key identifier: E9:A7:85:16:61:65:2A:E5:5F:03:45:84:7F:5A:80:74:8B:8B:00:B4
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019006E2A3C1D9A8CA9C222A4180A06CD5A0
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/6aeFFmFlKuVfA0WEf1qAdIuLALQ.roa
Signing time: Tue 11 Jun 2024 10:40:34 +0000
ROA not before: Tue 11 Jun 2024 10:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 82.140.135.0/24 maxlen: 24
82.140.136.0/24 maxlen: 24
82.140.137.0/24 maxlen: 24
82.140.142.0/24 maxlen: 24
82.140.144.0/24 maxlen: 24
82.140.145.0/24 maxlen: 24
82.140.147.0/24 maxlen: 24
82.140.149.0/24 maxlen: 24
82.140.151.0/24 maxlen: 24
82.140.154.0/24 maxlen: 24
82.140.155.0/24 maxlen: 24
82.140.157.0/24 maxlen: 24
82.140.161.0/24 maxlen: 24
82.140.162.0/24 maxlen: 24
82.140.163.0/24 maxlen: 24
82.140.164.0/24 maxlen: 24
82.140.166.0/24 maxlen: 24
82.140.167.0/24 maxlen: 24
82.140.168.0/24 maxlen: 24
82.140.172.0/24 maxlen: 24
82.140.173.0/24 maxlen: 24
82.140.174.0/24 maxlen: 24
82.140.175.0/24 maxlen: 24
82.140.181.0/24 maxlen: 24
82.140.186.0/24 maxlen: 24
82.140.190.0/24 maxlen: 24
84.46.128.0/24 maxlen: 24
84.46.129.0/24 maxlen: 24
84.46.130.0/24 maxlen: 24
84.46.132.0/24 maxlen: 24
84.46.133.0/24 maxlen: 24
84.46.135.0/24 maxlen: 24
84.46.137.0/24 maxlen: 24
84.46.138.0/24 maxlen: 24
84.46.140.0/24 maxlen: 24
84.46.141.0/24 maxlen: 24
84.46.142.0/24 maxlen: 24
84.46.143.0/24 maxlen: 24
84.46.144.0/24 maxlen: 24
84.46.150.0/24 maxlen: 24
84.46.151.0/24 maxlen: 24
84.46.152.0/24 maxlen: 24
84.46.154.0/24 maxlen: 24
84.46.155.0/24 maxlen: 24
84.46.156.0/24 maxlen: 24
84.46.158.0/24 maxlen: 24
84.46.164.0/24 maxlen: 24
84.46.165.0/24 maxlen: 24
84.46.166.0/24 maxlen: 24
84.46.167.0/24 maxlen: 24
84.46.172.0/24 maxlen: 24
84.46.174.0/24 maxlen: 24
84.46.175.0/24 maxlen: 24
84.46.178.0/24 maxlen: 24
84.46.182.0/24 maxlen: 24
84.46.184.0/24 maxlen: 24
84.46.185.0/24 maxlen: 24
84.46.192.0/24 maxlen: 24
84.46.193.0/24 maxlen: 24
84.46.195.0/24 maxlen: 24
84.46.209.0/24 maxlen: 24
84.46.213.0/24 maxlen: 24
84.46.216.0/24 maxlen: 24
84.46.224.0/24 maxlen: 24
84.46.229.0/24 maxlen: 24
86.38.0.0/24 maxlen: 24
86.38.2.0/24 maxlen: 24
86.38.17.0/24 maxlen: 24
86.38.22.0/24 maxlen: 24
86.38.40.0/24 maxlen: 24
86.38.42.0/24 maxlen: 24
86.38.44.0/24 maxlen: 24
86.38.45.0/24 maxlen: 24
86.38.46.0/24 maxlen: 24
86.38.47.0/24 maxlen: 24
86.38.48.0/24 maxlen: 24
86.38.49.0/24 maxlen: 24
86.38.50.0/24 maxlen: 24
86.38.59.0/24 maxlen: 24
86.38.61.0/24 maxlen: 24
86.38.76.0/24 maxlen: 24
86.38.80.0/24 maxlen: 24
86.38.82.0/24 maxlen: 24
86.38.83.0/24 maxlen: 24
86.38.87.0/24 maxlen: 24
86.38.91.0/24 maxlen: 24
86.38.107.0/24 maxlen: 24
86.38.119.0/24 maxlen: 24
86.38.121.0/24 maxlen: 24
86.38.143.0/24 maxlen: 24
86.38.157.0/24 maxlen: 24
86.38.195.0/24 maxlen: 24
86.38.206.0/24 maxlen: 24
86.38.207.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.231.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.94.0/24 maxlen: 24
89.116.95.0/24 maxlen: 24
89.116.98.0/24 maxlen: 24
89.116.142.0/24 maxlen: 24
89.116.145.0/24 maxlen: 24
89.116.194.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.196.0/24 maxlen: 24
89.116.197.0/24 maxlen: 24
89.116.199.0/24 maxlen: 24
89.116.201.0/24 maxlen: 24
89.116.204.0/24 maxlen: 24
89.116.205.0/24 maxlen: 24
89.116.206.0/24 maxlen: 24
89.116.207.0/24 maxlen: 24
89.116.216.0/24 maxlen: 24
89.116.217.0/24 maxlen: 24
89.116.219.0/24 maxlen: 24
89.116.222.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.4.0/24 maxlen: 24
89.117.34.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.131.0/24 maxlen: 24
89.117.189.0/24 maxlen: 24
89.117.191.0/24 maxlen: 24
89.117.230.0/24 maxlen: 24
89.117.231.0/24 maxlen: 24
89.117.244.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
217.9.251.0/24 maxlen: 24
217.9.252.0/24 maxlen: 24
217.9.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 12:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:e2:a3:c1:d9:a8:ca:9c:22:2a:41:80:a0:6c:d5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jun 11 10:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9a7851661652ae55f0345847f5a80748b8b00b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:74:5d:c9:92:a6:56:eb:35:78:02:3c:e6:
0c:11:aa:1c:d1:61:64:e4:6a:ae:90:05:2f:d9:3f:
2c:5c:aa:53:66:6d:66:48:ec:9e:10:83:72:0e:a2:
82:e6:65:36:8b:2c:92:d8:94:8a:66:f3:90:b9:bd:
1b:50:50:9b:2a:39:f8:72:7a:e0:15:88:6f:f1:bf:
90:3c:67:d8:9f:5b:50:b1:06:c3:c3:e4:22:4f:64:
60:9e:48:ee:9d:67:74:28:77:df:84:f6:f5:38:59:
cf:dc:84:43:0f:fb:72:63:e7:2b:75:4e:af:f5:64:
73:78:80:43:2d:fa:d0:bc:c8:65:cb:fb:03:4d:01:
4f:7f:bc:02:b2:2f:1e:89:7d:60:31:81:48:52:aa:
f7:a6:9a:a3:f3:dc:83:77:5c:cf:5b:72:20:a6:32:
39:3a:30:57:15:9f:5d:28:cb:99:89:c5:ad:96:a7:
a7:b6:47:00:de:90:bc:cb:e1:45:f2:ec:80:9b:ef:
fa:11:fa:92:76:27:7b:d3:a0:a7:de:ea:4b:d4:9b:
a4:13:6a:5a:6c:e0:fa:d0:66:e8:b0:3a:9e:fd:0b:
cd:ae:2d:f4:26:05:95:6d:59:88:9a:ac:d6:8f:91:
ed:9d:d1:40:1e:71:87:d7:51:55:ff:95:78:06:8e:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:85:16:61:65:2A:E5:5F:03:45:84:7F:5A:80:74:8B:8B:00:B4
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/6aeFFmFlKuVfA0WEf1qAdIuLALQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.135.0-82.140.137.255
82.140.142.0/24
82.140.144.0/23
82.140.147.0/24
82.140.149.0/24
82.140.151.0/24
82.140.154.0/23
82.140.157.0/24
82.140.161.0-82.140.164.255
82.140.166.0-82.140.168.255
82.140.172.0/22
82.140.181.0/24
82.140.186.0/24
82.140.190.0/24
84.46.128.0-84.46.130.255
84.46.132.0/23
84.46.135.0/24
84.46.137.0-84.46.138.255
84.46.140.0-84.46.144.255
84.46.150.0-84.46.152.255
84.46.154.0-84.46.156.255
84.46.158.0/24
84.46.164.0/22
84.46.172.0/24
84.46.174.0/23
84.46.178.0/24
84.46.182.0/24
84.46.184.0/23
84.46.192.0/23
84.46.195.0/24
84.46.209.0/24
84.46.213.0/24
84.46.216.0/24
84.46.224.0/24
84.46.229.0/24
86.38.0.0/24
86.38.2.0/24
86.38.17.0/24
86.38.22.0/24
86.38.40.0/24
86.38.42.0/24
86.38.44.0-86.38.50.255
86.38.59.0/24
86.38.61.0/24
86.38.76.0/24
86.38.80.0/24
86.38.82.0/23
86.38.87.0/24
86.38.91.0/24
86.38.107.0/24
86.38.119.0/24
86.38.121.0/24
86.38.143.0/24
86.38.157.0/24
86.38.195.0/24
86.38.206.0/23
86.38.224.0/24
86.38.231.0/24
89.116.0.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.79.0/24
89.116.94.0/23
89.116.98.0/24
89.116.142.0/24
89.116.145.0/24
89.116.194.0-89.116.197.255
89.116.199.0/24
89.116.201.0/24
89.116.204.0/22
89.116.216.0/23
89.116.219.0/24
89.116.222.0/24
89.116.251.0/24
89.116.254.0/24
89.117.4.0/24
89.117.34.0/24
89.117.86.0/24
89.117.119.0/24
89.117.131.0/24
89.117.189.0/24
89.117.191.0/24
89.117.230.0/23
89.117.244.0/24
89.117.248.0/24
217.9.251.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
72:55:ec:51:88:88:58:89:cb:1b:f7:0d:97:45:d8:09:7d:d2:
79:f0:26:73:58:61:5f:9e:98:89:b5:11:aa:8e:21:8b:7a:eb:
ba:d0:23:cb:82:ad:d2:96:00:fb:d0:b6:11:33:45:5d:6c:43:
48:ad:dc:0d:43:fc:0f:bf:ee:97:9d:56:60:83:df:34:4a:33:
f7:92:c9:f8:64:82:81:42:91:57:71:62:e7:bc:9c:a8:6d:ba:
c5:c3:9d:d3:8d:65:1d:07:85:41:92:9e:3c:03:aa:d7:9f:9d:
e2:1d:5a:34:61:0c:b3:a8:7b:4d:1f:22:5e:c8:24:25:9b:4c:
11:1f:ef:e9:2e:55:db:1e:ae:79:68:47:04:5f:14:72:0b:01:
55:73:2b:5b:dc:38:64:de:7b:a0:34:56:c3:63:ba:7f:e1:5c:
3b:42:b7:6e:84:41:45:77:82:2b:d2:04:9e:16:4e:61:7b:d5:
35:39:64:38:5b:a0:05:cc:a1:cc:29:59:dd:a4:92:e8:4c:56:
35:c8:05:ed:f6:53:a3:43:68:a2:d9:0d:30:da:3f:a2:12:38:
21:6c:1b:47:ef:0e:32:7e:ca:70:b7:4b:8c:4f:41:de:d8:13:
6b:61:66:36:a3:26:51:c1:a4:79:e1:df:d0:b7:78:bd:9d:cb:
6e:66:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 15:45:57 2024 by rpki-client on console-ams.rpki-client.org