Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Xtw7QfWKIo7nR-YhAu3XbFVP5m4.roa
File: Xtw7QfWKIo7nR-YhAu3XbFVP5m4.roa (raw, json)
Hash identifier: Qj/vvB44a0lRHMWJDFUjMmcfQeNh5PKULRIe3vaJAG4=
Subject key identifier: 5E:DC:3B:41:F5:8A:22:8E:E7:47:E6:21:02:ED:D7:6C:55:4F:E6:6E
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019005F758987A671C9F6C5A46E1D59171BB
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Xtw7QfWKIo7nR-YhAu3XbFVP5m4.roa
Signing time: Tue 11 Jun 2024 06:23:34 +0000
ROA not before: Tue 11 Jun 2024 06:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 82.140.135.0/24 maxlen: 24
82.140.136.0/24 maxlen: 24
82.140.137.0/24 maxlen: 24
82.140.142.0/24 maxlen: 24
82.140.144.0/24 maxlen: 24
82.140.145.0/24 maxlen: 24
82.140.147.0/24 maxlen: 24
82.140.149.0/24 maxlen: 24
82.140.151.0/24 maxlen: 24
82.140.154.0/24 maxlen: 24
82.140.155.0/24 maxlen: 24
82.140.157.0/24 maxlen: 24
82.140.162.0/24 maxlen: 24
82.140.163.0/24 maxlen: 24
82.140.164.0/24 maxlen: 24
82.140.166.0/24 maxlen: 24
82.140.167.0/24 maxlen: 24
82.140.168.0/24 maxlen: 24
82.140.172.0/24 maxlen: 24
82.140.173.0/24 maxlen: 24
82.140.174.0/24 maxlen: 24
82.140.175.0/24 maxlen: 24
82.140.181.0/24 maxlen: 24
82.140.186.0/24 maxlen: 24
82.140.190.0/24 maxlen: 24
84.46.128.0/24 maxlen: 24
84.46.129.0/24 maxlen: 24
84.46.130.0/24 maxlen: 24
84.46.132.0/24 maxlen: 24
84.46.133.0/24 maxlen: 24
84.46.135.0/24 maxlen: 24
84.46.137.0/24 maxlen: 24
84.46.138.0/24 maxlen: 24
84.46.140.0/24 maxlen: 24
84.46.141.0/24 maxlen: 24
84.46.142.0/24 maxlen: 24
84.46.143.0/24 maxlen: 24
84.46.144.0/24 maxlen: 24
84.46.150.0/24 maxlen: 24
84.46.151.0/24 maxlen: 24
84.46.152.0/24 maxlen: 24
84.46.154.0/24 maxlen: 24
84.46.155.0/24 maxlen: 24
84.46.158.0/24 maxlen: 24
84.46.165.0/24 maxlen: 24
84.46.166.0/24 maxlen: 24
84.46.174.0/24 maxlen: 24
86.38.2.0/24 maxlen: 24
86.38.40.0/24 maxlen: 24
86.38.42.0/24 maxlen: 24
86.38.44.0/24 maxlen: 24
86.38.45.0/24 maxlen: 24
86.38.46.0/24 maxlen: 24
86.38.47.0/24 maxlen: 24
86.38.48.0/24 maxlen: 24
86.38.49.0/24 maxlen: 24
86.38.50.0/24 maxlen: 24
86.38.76.0/24 maxlen: 24
86.38.91.0/24 maxlen: 24
86.38.157.0/24 maxlen: 24
86.38.206.0/24 maxlen: 24
86.38.207.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.231.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.94.0/24 maxlen: 24
89.116.95.0/24 maxlen: 24
89.116.98.0/24 maxlen: 24
89.116.142.0/24 maxlen: 24
89.116.145.0/24 maxlen: 24
89.116.194.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.196.0/24 maxlen: 24
89.116.197.0/24 maxlen: 24
89.116.199.0/24 maxlen: 24
89.116.201.0/24 maxlen: 24
89.116.204.0/24 maxlen: 24
89.116.205.0/24 maxlen: 24
89.116.206.0/24 maxlen: 24
89.116.207.0/24 maxlen: 24
89.116.216.0/24 maxlen: 24
89.116.217.0/24 maxlen: 24
89.116.219.0/24 maxlen: 24
89.116.222.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.4.0/24 maxlen: 24
89.117.34.0/24 maxlen: 24
89.117.131.0/24 maxlen: 24
89.117.189.0/24 maxlen: 24
89.117.191.0/24 maxlen: 24
89.117.230.0/24 maxlen: 24
89.117.231.0/24 maxlen: 24
89.117.244.0/24 maxlen: 24
217.9.251.0/24 maxlen: 24
217.9.252.0/24 maxlen: 24
217.9.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 10:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:05:f7:58:98:7a:67:1c:9f:6c:5a:46:e1:d5:91:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jun 11 06:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5edc3b41f58a228ee747e62102edd76c554fe66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:0a:5e:6b:7d:5a:8f:bf:e2:ce:bb:bb:db:
a1:a8:40:d8:be:61:a8:02:31:e5:77:ed:fb:ed:fa:
94:2c:35:f8:52:31:eb:60:16:16:71:6c:ec:3d:0e:
7d:58:93:04:ad:ea:8f:4b:b7:75:67:88:79:9d:ec:
17:58:bd:eb:8b:94:ce:99:7e:90:2a:05:25:34:9b:
a0:4d:b8:42:e6:d0:54:65:4a:fd:5a:41:5f:93:fb:
5d:1a:0a:51:48:a7:b5:8a:75:5b:ee:1e:01:e7:e4:
bc:36:a7:be:16:4e:8b:0a:4a:99:6c:69:99:ca:d3:
40:13:2f:35:6c:1d:6a:04:0f:61:2b:51:d3:8a:bf:
44:62:16:cb:a1:f6:6b:8a:fa:dc:56:d2:50:d7:cd:
4f:8d:95:e7:77:ca:d5:72:d1:58:da:96:4f:0b:e7:
20:8d:30:f2:8e:91:0c:f6:2e:3a:16:9a:50:ee:88:
23:10:2f:7a:c0:af:4f:e4:30:72:4f:14:7a:27:4f:
37:2a:61:89:d4:15:5e:be:cc:fc:a4:ec:cc:be:b7:
bc:74:72:a0:4d:d5:16:09:7f:8f:3d:3c:0b:19:80:
f1:68:fa:6e:b9:4b:dc:48:7c:0c:f9:eb:ed:eb:c3:
3a:bf:6f:9e:25:82:ab:f6:7a:e6:dc:81:fc:a5:81:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DC:3B:41:F5:8A:22:8E:E7:47:E6:21:02:ED:D7:6C:55:4F:E6:6E
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Xtw7QfWKIo7nR-YhAu3XbFVP5m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.135.0-82.140.137.255
82.140.142.0/24
82.140.144.0/23
82.140.147.0/24
82.140.149.0/24
82.140.151.0/24
82.140.154.0/23
82.140.157.0/24
82.140.162.0-82.140.164.255
82.140.166.0-82.140.168.255
82.140.172.0/22
82.140.181.0/24
82.140.186.0/24
82.140.190.0/24
84.46.128.0-84.46.130.255
84.46.132.0/23
84.46.135.0/24
84.46.137.0-84.46.138.255
84.46.140.0-84.46.144.255
84.46.150.0-84.46.152.255
84.46.154.0/23
84.46.158.0/24
84.46.165.0-84.46.166.255
84.46.174.0/24
86.38.2.0/24
86.38.40.0/24
86.38.42.0/24
86.38.44.0-86.38.50.255
86.38.76.0/24
86.38.91.0/24
86.38.157.0/24
86.38.206.0/23
86.38.224.0/24
86.38.231.0/24
89.116.0.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.79.0/24
89.116.94.0/23
89.116.98.0/24
89.116.142.0/24
89.116.145.0/24
89.116.194.0-89.116.197.255
89.116.199.0/24
89.116.201.0/24
89.116.204.0/22
89.116.216.0/23
89.116.219.0/24
89.116.222.0/24
89.116.251.0/24
89.116.254.0/24
89.117.4.0/24
89.117.34.0/24
89.117.131.0/24
89.117.189.0/24
89.117.191.0/24
89.117.230.0/23
89.117.244.0/24
217.9.251.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
5c:d0:29:82:df:72:b1:8f:89:d1:e5:1e:68:e7:c8:99:40:37:
df:36:70:ea:d5:99:0c:11:99:28:c2:10:3d:5d:69:0d:f7:db:
d7:db:50:76:ee:14:9a:ff:23:88:30:b3:76:b6:70:13:77:ec:
c8:94:bf:e5:de:7d:cd:8d:ae:d8:df:ae:5a:c5:a0:c7:27:d9:
19:46:d6:1e:28:1a:49:74:d8:da:ff:ec:da:27:54:f9:b9:74:
14:e6:8c:9d:f8:5c:fa:22:75:5f:7a:dc:47:0b:cc:51:4f:52:
3a:c3:e9:c0:1b:f0:81:a0:79:41:da:8f:e9:0a:8e:d2:30:ac:
f6:ae:8e:aa:50:b4:b6:69:cf:b4:21:db:92:dd:3b:1e:4e:47:
37:47:58:f2:6d:2a:3e:3b:23:f8:72:bc:b1:7f:aa:95:7f:7b:
af:b6:c2:1b:b7:e2:a5:2b:9f:bc:40:38:ea:a3:bf:43:80:6b:
db:b9:15:74:de:a7:d2:36:90:7f:bf:ae:bb:ca:73:29:db:9f:
10:27:06:8d:98:59:db:cc:4a:e5:66:a7:8a:0f:1b:b3:6e:58:
3c:56:94:44:ad:99:d7:65:af:41:be:aa:b9:f9:31:32:d2:56:
32:ea:66:54:73:e7:95:69:9b:fb:ab:82:d1:c7:80:05:81:73:
f9:44:58:48
-----BEGIN CERTIFICATE-----
MIIGxzCCBa+gAwIBAgISAZAF91iYemccn2xaRuHVkXG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjQwNjExMDYyMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWRjM2I0MWY1OGEyMjhlZTc0N2U2MjEwMmVkZDc2YzU1NGZlNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb4KXmt9Wo+/4s67u9uhqEDYvmGo
AjHld+377fqULDX4UjHrYBYWcWzsPQ59WJMEreqPS7d1Z4h5newXWL3ri5TOmX6Q
KgUlNJugTbhC5tBUZUr9WkFfk/tdGgpRSKe1inVb7h4B5+S8Nqe+Fk6LCkqZbGmZ
ytNAEy81bB1qBA9hK1HTir9EYhbLofZrivrcVtJQ181PjZXnd8rVctFY2pZPC+cg
jTDyjpEM9i46FppQ7ogjEC96wK9P5DByTxR6J083KmGJ1BVevsz8pOzMvre8dHKg
TdUWCX+PPTwLGYDxaPpuuUvcSHwM+evt68M6v2+eJYKr9nrm3IH8pYE3MQIDAQAB
o4ID0zCCA88wHQYDVR0OBBYEFF7cO0H1iiKO50fmIQLt12xVT+ZuMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvWHR3N1FmV0tJbzduUi1ZaEF1M1hiRlZQNW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB5wYIKwYBBQUHAQcBAf8EggHWMIIB0jCCAc4EAgABMIIB
xjAMAwQAUoyHAwQBUoyIAwQAUoyOAwQBUoyQAwQAUoyTAwQAUoyVAwQAUoyXAwQB
UoyaAwQAUoydMAwDBAFSjKIDBABSjKQwDAMEAVKMpgMEAFKMqAMEAlKMrAMEAFKM
tQMEAFKMugMEAFKMvjAMAwQHVC6AAwQAVC6CAwQBVC6EAwQAVC6HMAwDBABULokD
BABULoowDAMEAlQujAMEAFQukDAMAwQBVC6WAwQAVC6YAwQBVC6aAwQAVC6eMAwD
BABULqUDBABULqYDBABULq4DBABWJgIDBABWJigDBABWJiowDAMEAlYmLAMEAFYm
MgMEAFYmTAMEAFYmWwMEAFYmnQMEAVYmzgMEAFYm4AMEAFYm5wMEAFl0AAMEAFl0
EgMEAFl0KAMEAFl0NwMEAFl0OQMEAFl0TwMEAVl0XgMEAFl0YgMEAFl0jgMEAFl0
kTAMAwQBWXTCAwQBWXTEAwQAWXTHAwQAWXTJAwQCWXTMAwQBWXTYAwQAWXTbAwQA
WXTeAwQAWXT7AwQAWXT+AwQAWXUEAwQAWXUiAwQAWXWDAwQAWXW9AwQAWXW/AwQB
WXXmAwQAWXX0MAwDBADZCfsDBAHZCfwwDQYJKoZIhvcNAQELBQADggEBAFzQKYLf
crGPidHlHmjnyJlAN982cOrVmQwRmSjCED1daQ3329fbUHbuFJr/I4gws3a2cBN3
7MiUv+Xefc2NrtjfrlrFoMcn2RlG1h4oGkl02Nr/7NonVPm5dBTmjJ34XPoidV96
3EcLzFFPUjrD6cAb8IGgeUHaj+kKjtIwrPaujqpQtLZpz7Qh25LdOx5ORzdHWPJt
Kj47I/hyvLF/qpV/e6+2whu34qUrn7xAOOqjv0OAa9u5FXTep9I2kH+/rrvKcynb
nxAnBo2YWdvMSuVmp4oPG7NuWDxWlEStmddlr0G+qrn5MTLSVjLqZlRz55Vpm/ur
gtHHgAWBc/lEWEg=
-----END CERTIFICATE-----
Generated at Tue Jun 11 16:28:25 2024 by rpki-client on console-ams.rpki-client.org