Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/pQzY_Kl5q5EbIewHZYMVW8dyGPk.roa
File: pQzY_Kl5q5EbIewHZYMVW8dyGPk.roa (raw, json)
Hash identifier: 57okMX21yi9CA+/Iw8PGEbFYXwHCg4IbHQYLBNX6fCU=
Subject key identifier: A5:0C:D8:FC:A9:79:AB:91:1B:21:EC:07:65:83:15:5B:C7:72:18:F9
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018F300C11F12C13C51E97B67D72BC4C4CED
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/pQzY_Kl5q5EbIewHZYMVW8dyGPk.roa
Signing time: Tue 30 Apr 2024 17:27:28 +0000
ROA not before: Tue 30 Apr 2024 17:27:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 82.140.136.0/24 maxlen: 24
82.140.137.0/24 maxlen: 24
82.140.144.0/24 maxlen: 24
82.140.145.0/24 maxlen: 24
82.140.147.0/24 maxlen: 24
82.140.149.0/24 maxlen: 24
82.140.151.0/24 maxlen: 24
82.140.154.0/24 maxlen: 24
82.140.155.0/24 maxlen: 24
82.140.157.0/24 maxlen: 24
82.140.181.0/24 maxlen: 24
84.46.165.0/24 maxlen: 24
84.46.166.0/24 maxlen: 24
84.46.174.0/24 maxlen: 24
86.38.2.0/24 maxlen: 24
86.38.44.0/24 maxlen: 24
86.38.46.0/24 maxlen: 24
86.38.91.0/24 maxlen: 24
86.38.157.0/24 maxlen: 24
86.38.206.0/24 maxlen: 24
86.38.207.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.231.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.94.0/24 maxlen: 24
89.116.95.0/24 maxlen: 24
89.116.98.0/24 maxlen: 24
89.116.142.0/24 maxlen: 24
89.116.145.0/24 maxlen: 24
89.116.194.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.196.0/24 maxlen: 24
89.116.197.0/24 maxlen: 24
89.116.199.0/24 maxlen: 24
89.116.201.0/24 maxlen: 24
89.116.204.0/24 maxlen: 24
89.116.205.0/24 maxlen: 24
89.116.206.0/24 maxlen: 24
89.116.207.0/24 maxlen: 24
89.116.216.0/24 maxlen: 24
89.116.217.0/24 maxlen: 24
89.116.219.0/24 maxlen: 24
89.116.222.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.4.0/24 maxlen: 24
89.117.34.0/24 maxlen: 24
89.117.131.0/24 maxlen: 24
89.117.189.0/24 maxlen: 24
89.117.191.0/24 maxlen: 24
89.117.230.0/24 maxlen: 24
89.117.231.0/24 maxlen: 24
89.117.244.0/24 maxlen: 24
217.9.251.0/24 maxlen: 24
217.9.252.0/24 maxlen: 24
217.9.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 08:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:0c:11:f1:2c:13:c5:1e:97:b6:7d:72:bc:4c:4c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Apr 30 17:27:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a50cd8fca979ab911b21ec076583155bc77218f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f4:86:a1:70:0a:5d:a1:ee:1c:e1:14:e0:f6:
34:cb:a2:1e:fb:93:08:f7:8a:33:4e:9b:4d:75:98:
66:ee:be:4c:dd:f0:6f:28:3d:cc:9a:3d:2a:b5:df:
0e:e5:25:c6:82:85:a6:2d:5c:2a:d3:df:61:e0:ff:
ab:b6:c8:c6:1e:87:ba:88:de:21:9a:89:c7:2d:3e:
1e:8c:25:78:52:e1:c7:61:11:5f:27:6d:0f:9c:bf:
f3:13:64:b3:89:cb:b3:3b:30:cb:53:a8:1d:70:05:
b0:c7:b4:fc:3a:44:54:0d:05:15:a1:8f:6b:b5:63:
16:91:c6:27:f7:ee:fa:ad:6a:0d:77:82:c3:26:db:
36:dd:86:d7:6d:57:35:28:43:4a:98:49:5d:82:13:
95:f7:69:82:de:82:48:9a:60:d1:1e:70:9e:d2:38:
7e:3b:4b:3b:84:15:37:7d:74:bc:3f:13:02:31:66:
18:fb:5c:82:92:39:c9:d6:4a:f7:22:bc:86:26:1a:
22:b6:f6:da:14:37:65:73:c6:dc:e6:7f:39:80:06:
ed:2c:88:8d:dc:ec:7b:b8:59:d6:25:55:83:67:fe:
56:42:6a:5c:20:9f:83:9b:e9:26:e3:12:75:ec:d7:
c3:84:d7:d8:75:c0:a5:5c:5c:dd:9b:0f:1a:28:0c:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0C:D8:FC:A9:79:AB:91:1B:21:EC:07:65:83:15:5B:C7:72:18:F9
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/pQzY_Kl5q5EbIewHZYMVW8dyGPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.136.0/23
82.140.144.0/23
82.140.147.0/24
82.140.149.0/24
82.140.151.0/24
82.140.154.0/23
82.140.157.0/24
82.140.181.0/24
84.46.165.0-84.46.166.255
84.46.174.0/24
86.38.2.0/24
86.38.44.0/24
86.38.46.0/24
86.38.91.0/24
86.38.157.0/24
86.38.206.0/23
86.38.224.0/24
86.38.231.0/24
89.116.0.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.79.0/24
89.116.94.0/23
89.116.98.0/24
89.116.142.0/24
89.116.145.0/24
89.116.194.0-89.116.197.255
89.116.199.0/24
89.116.201.0/24
89.116.204.0/22
89.116.216.0/23
89.116.219.0/24
89.116.222.0/24
89.116.251.0/24
89.116.254.0/24
89.117.4.0/24
89.117.34.0/24
89.117.131.0/24
89.117.189.0/24
89.117.191.0/24
89.117.230.0/23
89.117.244.0/24
217.9.251.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
55:59:59:aa:bb:da:08:e5:9d:50:0d:c7:c7:59:54:c4:f7:99:
3d:ab:64:34:68:d1:ed:d0:83:c5:b4:c5:c1:d0:a3:85:2e:d7:
5e:b5:67:12:32:f6:a9:51:e2:16:34:ff:4c:a5:7a:8e:d5:48:
ec:84:8a:8b:a0:db:a4:63:e4:48:71:26:14:37:a5:8a:2c:e2:
95:ce:c9:a6:36:6b:b7:bf:f3:dd:02:7d:88:e5:54:d7:4f:94:
59:78:9f:e6:63:44:e9:c5:cf:e4:3b:80:0b:49:28:cf:87:29:
4b:fa:52:9f:3c:70:ad:8a:b2:08:60:a0:b5:7a:5c:db:62:b8:
d1:40:10:81:99:ef:f3:93:20:ae:10:25:51:66:7a:9d:ea:7d:
64:e4:1e:54:58:23:33:4f:a5:a5:1e:5d:52:6e:04:c6:0e:e7:
0a:4d:31:3d:49:73:a9:48:22:b1:ef:9f:95:30:b1:68:e5:8e:
ac:7b:8b:18:1e:f9:65:b6:98:89:5e:87:0b:3a:ca:e0:b1:48:
67:0c:a0:ec:86:00:be:12:5a:4e:be:f7:80:c1:16:4d:04:c8:
1f:b9:46:c2:d0:9c:f7:2f:2c:f0:68:b9:ab:60:6f:84:2c:52:
c4:61:ef:e3:f5:43:b5:63:6d:83:72:9d:c5:31:97:9e:81:ac:
01:3d:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:13 2024 by rpki-client on console-ams.rpki-client.org