Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/7NduY5UhmzX6DjNOXjTLJIO3wvU.roa
File: 7NduY5UhmzX6DjNOXjTLJIO3wvU.roa (raw, json)
Hash identifier: Nu1xlptRF2TG7a8GwcSPEipHpD258KaGn514XwICPf0=
Subject key identifier: EC:D7:6E:63:95:21:9B:35:FA:0E:33:4E:5E:34:CB:24:83:B7:C2:F5
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018F3875D28CC1F81C43C71295450192B802
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/7NduY5UhmzX6DjNOXjTLJIO3wvU.roa
Signing time: Thu 02 May 2024 08:39:56 +0000
ROA not before: Thu 02 May 2024 08:39:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 82.140.136.0/24 maxlen: 24
82.140.137.0/24 maxlen: 24
82.140.142.0/24 maxlen: 24
82.140.144.0/24 maxlen: 24
82.140.145.0/24 maxlen: 24
82.140.147.0/24 maxlen: 24
82.140.149.0/24 maxlen: 24
82.140.151.0/24 maxlen: 24
82.140.154.0/24 maxlen: 24
82.140.155.0/24 maxlen: 24
82.140.157.0/24 maxlen: 24
82.140.181.0/24 maxlen: 24
84.46.165.0/24 maxlen: 24
84.46.166.0/24 maxlen: 24
84.46.174.0/24 maxlen: 24
86.38.2.0/24 maxlen: 24
86.38.44.0/24 maxlen: 24
86.38.46.0/24 maxlen: 24
86.38.91.0/24 maxlen: 24
86.38.157.0/24 maxlen: 24
86.38.206.0/24 maxlen: 24
86.38.207.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.231.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.94.0/24 maxlen: 24
89.116.95.0/24 maxlen: 24
89.116.98.0/24 maxlen: 24
89.116.142.0/24 maxlen: 24
89.116.145.0/24 maxlen: 24
89.116.194.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.196.0/24 maxlen: 24
89.116.197.0/24 maxlen: 24
89.116.199.0/24 maxlen: 24
89.116.201.0/24 maxlen: 24
89.116.204.0/24 maxlen: 24
89.116.205.0/24 maxlen: 24
89.116.206.0/24 maxlen: 24
89.116.207.0/24 maxlen: 24
89.116.216.0/24 maxlen: 24
89.116.217.0/24 maxlen: 24
89.116.219.0/24 maxlen: 24
89.116.222.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.4.0/24 maxlen: 24
89.117.34.0/24 maxlen: 24
89.117.131.0/24 maxlen: 24
89.117.189.0/24 maxlen: 24
89.117.191.0/24 maxlen: 24
89.117.230.0/24 maxlen: 24
89.117.231.0/24 maxlen: 24
89.117.244.0/24 maxlen: 24
217.9.251.0/24 maxlen: 24
217.9.252.0/24 maxlen: 24
217.9.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 12:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:75:d2:8c:c1:f8:1c:43:c7:12:95:45:01:92:b8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: May 2 08:39:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecd76e6395219b35fa0e334e5e34cb2483b7c2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:ec:06:29:1a:5b:33:ca:f7:b0:ec:62:9e:
b5:e5:57:fd:7b:89:ea:4e:61:0d:a9:d0:2c:02:05:
1f:94:26:77:56:75:04:21:1a:c6:ac:01:cf:24:49:
eb:9a:be:ee:ea:d0:a7:3c:23:33:6c:0f:7c:a3:fe:
41:ed:e4:46:69:77:93:0a:69:f4:14:07:0f:67:6e:
fe:73:65:2e:2b:3b:3d:d5:1a:29:62:a6:ab:53:e3:
3e:64:29:31:1d:cc:a9:b8:81:63:e9:ee:c7:5a:10:
41:a9:a0:2e:53:7d:7b:a3:b2:ca:d8:b0:b0:6d:16:
48:47:75:99:1a:23:a3:b5:43:20:2b:02:25:a3:44:
47:91:92:9d:32:da:d6:26:2f:02:8b:32:f1:f9:b7:
bc:8d:d8:52:a3:ba:ce:1b:a2:29:f9:15:b3:c0:31:
2b:7f:07:26:09:99:e8:18:54:fe:90:d1:9c:c6:ee:
c7:b6:83:db:93:92:81:a6:ff:13:2b:a4:49:08:b9:
68:33:be:a6:e1:57:d3:31:6a:82:68:39:d3:07:19:
59:19:cb:98:d0:73:71:9b:ff:17:57:81:e4:c1:61:
43:9c:58:9f:a3:1a:6c:54:42:4d:52:98:92:17:a6:
07:0b:b7:6f:ec:aa:47:24:19:ae:d2:13:89:fa:59:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D7:6E:63:95:21:9B:35:FA:0E:33:4E:5E:34:CB:24:83:B7:C2:F5
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/7NduY5UhmzX6DjNOXjTLJIO3wvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.136.0/23
82.140.142.0/24
82.140.144.0/23
82.140.147.0/24
82.140.149.0/24
82.140.151.0/24
82.140.154.0/23
82.140.157.0/24
82.140.181.0/24
84.46.165.0-84.46.166.255
84.46.174.0/24
86.38.2.0/24
86.38.44.0/24
86.38.46.0/24
86.38.91.0/24
86.38.157.0/24
86.38.206.0/23
86.38.224.0/24
86.38.231.0/24
89.116.0.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.79.0/24
89.116.94.0/23
89.116.98.0/24
89.116.142.0/24
89.116.145.0/24
89.116.194.0-89.116.197.255
89.116.199.0/24
89.116.201.0/24
89.116.204.0/22
89.116.216.0/23
89.116.219.0/24
89.116.222.0/24
89.116.251.0/24
89.116.254.0/24
89.117.4.0/24
89.117.34.0/24
89.117.131.0/24
89.117.189.0/24
89.117.191.0/24
89.117.230.0/23
89.117.244.0/24
217.9.251.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
99:f1:5f:d0:43:ec:5c:93:d2:af:cf:ed:0b:b4:e4:57:ac:be:
f1:a6:b2:8a:18:3d:b5:72:50:4a:75:af:06:22:df:7d:2c:00:
7d:df:47:30:1b:81:0b:94:5a:6c:5a:13:38:a0:cc:f2:00:26:
fd:80:73:ab:4e:30:6b:f1:57:80:f4:bf:65:c0:2d:98:da:88:
14:ee:d6:57:a0:0e:dc:7e:90:a8:0a:5c:96:08:7d:ae:59:22:
cd:dd:5c:d2:54:7a:f6:37:b5:5d:20:27:76:2c:13:4b:de:8c:
3d:21:ca:e7:68:b7:52:22:58:92:e7:ea:81:53:76:c6:bc:12:
fe:dc:be:89:d6:9a:8e:93:8d:d1:3f:dd:bd:c7:ef:b2:dc:97:
d2:e5:5d:c1:5b:06:74:fe:50:dd:1a:80:57:66:30:98:7d:e8:
7c:d5:57:55:15:1d:96:71:eb:3c:e2:93:19:42:81:73:00:7c:
fd:23:c9:87:e1:d7:ae:51:94:a3:65:f2:bc:4e:e3:96:56:57:
1c:24:96:c4:b3:35:70:87:2c:aa:30:65:d0:7a:e2:46:b5:1e:
c5:85:7b:de:d5:be:4b:05:57:59:17:3f:39:6a:f7:20:93:a9:
4c:30:57:d9:0d:e7:58:24:8c:c9:e3:ef:13:bf:fb:10:11:5e:
17:af:60:f0
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgISAY84ddKMwfgcQ8cSlUUBkrgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjQwNTAyMDgzOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2Q3NmU2Mzk1MjE5YjM1ZmEwZTMzNGU1ZTM0Y2IyNDgzYjdjMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QTsBikaWzPK97DsYp615Vf9e4nq
TmENqdAsAgUflCZ3VnUEIRrGrAHPJEnrmr7u6tCnPCMzbA98o/5B7eRGaXeTCmn0
FAcPZ27+c2UuKzs91RopYqarU+M+ZCkxHcypuIFj6e7HWhBBqaAuU317o7LK2LCw
bRZIR3WZGiOjtUMgKwIlo0RHkZKdMtrWJi8CizLx+be8jdhSo7rOG6Ip+RWzwDEr
fwcmCZnoGFT+kNGcxu7HtoPbk5KBpv8TK6RJCLloM76m4VfTMWqCaDnTBxlZGcuY
0HNxm/8XV4HkwWFDnFifoxpsVEJNUpiSF6YHC7dv7KpHJBmu0hOJ+lmZCQIDAQAB
o4IDOTCCAzUwHQYDVR0OBBYEFOzXbmOVIZs1+g4zTl40yySDt8L1MB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvN05kdVk1VWhtelg2RGpOT1hqVExKSU8zd3ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBTQYIKwYBBQUHAQcBAf8EggE8MIIBODCCATQEAgABMIIB
LAMEAVKMiAMEAFKMjgMEAVKMkAMEAFKMkwMEAFKMlQMEAFKMlwMEAVKMmgMEAFKM
nQMEAFKMtTAMAwQAVC6lAwQAVC6mAwQAVC6uAwQAViYCAwQAViYsAwQAViYuAwQA
ViZbAwQAViadAwQBVibOAwQAVibgAwQAVibnAwQAWXQAAwQAWXQSAwQAWXQoAwQA
WXQ3AwQAWXQ5AwQAWXRPAwQBWXReAwQAWXRiAwQAWXSOAwQAWXSRMAwDBAFZdMID
BAFZdMQDBABZdMcDBABZdMkDBAJZdMwDBAFZdNgDBABZdNsDBABZdN4DBABZdPsD
BABZdP4DBABZdQQDBABZdSIDBABZdYMDBABZdb0DBABZdb8DBAFZdeYDBABZdfQw
DAMEANkJ+wMEAdkJ/DANBgkqhkiG9w0BAQsFAAOCAQEAmfFf0EPsXJPSr8/tC7Tk
V6y+8aayihg9tXJQSnWvBiLffSwAfd9HMBuBC5RabFoTOKDM8gAm/YBzq04wa/FX
gPS/ZcAtmNqIFO7WV6AO3H6QqApclgh9rlkizd1c0lR69je1XSAndiwTS96MPSHK
52i3UiJYkufqgVN2xrwS/ty+idaajpON0T/dvcfvstyX0uVdwVsGdP5Q3RqAV2Yw
mH3ofNVXVRUdlnHrPOKTGUKBcwB8/SPJh+HXrlGUo2XyvE7jllZXHCSWxLM1cIcs
qjBl0HriRrUexYV73tW+SwVXWRc/OWr3IJOpTDBX2Q3nWCSMyePvE7/7EBFeF69g
8A==
-----END CERTIFICATE-----
Generated at Mon Jun 10 15:24:33 2024 by rpki-client on console-ams.rpki-client.org