Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/tRR8a-dDJwWapXmp5TN9nTyIJmU.roa
File: tRR8a-dDJwWapXmp5TN9nTyIJmU.roa (raw, json)
Hash identifier: QU17rZ0K6P9M3uN+PaeH7lhn7uGijyZbeMbUAShlhUI=
Subject key identifier: B5:14:7C:6B:E7:43:27:05:9A:A5:79:A9:E5:33:7D:9D:3C:88:26:65
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018F765561CA688E95419AC0631F3963BF08
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/tRR8a-dDJwWapXmp5TN9nTyIJmU.roa
Signing time: Tue 14 May 2024 09:00:58 +0000
ROA not before: Tue 14 May 2024 09:00:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.132.0/22 maxlen: 22
82.140.136.0/21 maxlen: 21
82.140.138.0/24 maxlen: 24
82.140.139.0/24 maxlen: 24
82.140.140.0/24 maxlen: 24
82.140.141.0/24 maxlen: 24
82.140.143.0/24 maxlen: 24
82.140.144.0/20 maxlen: 20
82.140.148.0/24 maxlen: 24
82.140.150.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.156.0/24 maxlen: 24
82.140.158.0/24 maxlen: 24
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.179.0/24 maxlen: 24
82.140.180.0/23 maxlen: 23
82.140.184.0/22 maxlen: 22
82.140.188.0/24 maxlen: 24
82.140.190.0/23 maxlen: 23
84.46.128.0/19 maxlen: 19
84.46.160.0/21 maxlen: 21
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.167.0/24 maxlen: 24
84.46.168.0/23 maxlen: 23
84.46.172.0/22 maxlen: 22
84.46.172.0/24 maxlen: 24
84.46.173.0/24 maxlen: 24
84.46.175.0/24 maxlen: 24
84.46.176.0/20 maxlen: 20
84.46.192.0/21 maxlen: 21
84.46.201.0/24 maxlen: 24
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.0.0/23 maxlen: 23
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.25.0/24 maxlen: 24
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/23 maxlen: 23
86.38.40.0/21 maxlen: 21
86.38.42.0/24 maxlen: 24
86.38.43.0/24 maxlen: 24
86.38.45.0/24 maxlen: 24
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.146.0/23 maxlen: 24
86.38.148.0/23 maxlen: 23
86.38.150.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.208.0/22 maxlen: 22
86.38.212.0/23 maxlen: 23
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.222.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.229.0/24 maxlen: 24
86.38.233.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.236.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
86.38.244.0/23 maxlen: 23
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.165.0/24 maxlen: 24
89.117.166.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.220.0/23 maxlen: 23
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 23
89.117.248.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.253.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
217.9.244.0/23 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 17 May 2024 18:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:55:61:ca:68:8e:95:41:9a:c0:63:1f:39:63:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: May 14 09:00:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5147c6be74327059aa579a9e5337d9d3c882665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:ef:ba:66:d0:9a:37:09:6f:91:20:d4:71:
47:08:1e:db:c4:6e:a3:b8:8c:0a:b7:72:59:76:29:
de:5f:74:ed:9c:3a:28:40:8d:f2:ed:43:bc:d2:c6:
64:eb:f6:2d:50:2f:d4:5c:b2:23:df:29:da:f1:5a:
4e:93:c0:42:dc:14:02:35:a2:9f:df:43:24:ec:0f:
8f:a5:44:f9:c2:db:f0:20:8b:64:bc:f7:80:c0:8a:
a2:a3:4f:0b:10:c0:ec:ae:74:4c:eb:30:bb:b7:5e:
4e:f0:78:9f:76:c9:a4:09:5a:3a:aa:92:30:60:cf:
ab:cc:66:1a:41:cf:72:63:7e:4f:5e:0e:39:53:5f:
c2:f8:5b:13:c2:aa:66:72:3c:f3:a5:8c:69:42:23:
b4:79:ef:1c:d8:e3:32:98:51:65:b4:e3:b4:2b:3e:
8c:c1:24:3d:62:10:0c:2c:a2:46:bc:50:30:37:9a:
4f:d4:7c:4e:c6:db:79:5a:0e:25:98:0a:93:c9:11:
42:f6:a6:c5:f9:58:e1:c7:6e:1d:ba:b5:5b:5f:85:
9a:54:2c:87:dc:16:56:3c:05:ef:70:68:84:01:e0:
44:3d:78:54:ad:c3:ed:17:5d:fe:dd:9f:e1:6a:1a:
16:42:5d:5e:8d:7d:89:df:6e:cf:a3:cb:20:c6:1a:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:14:7C:6B:E7:43:27:05:9A:A5:79:A9:E5:33:7D:9D:3C:88:26:65
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/tRR8a-dDJwWapXmp5TN9nTyIJmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0/23
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.160.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.208.0-86.38.213.255
86.38.215.0/24
86.38.222.0/23
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.251.255
Signature Algorithm: sha256WithRSAEncryption
08:59:99:b9:fe:35:bf:eb:9d:54:3b:06:5e:d0:f6:f6:c2:bf:
a5:bb:56:98:f7:0c:c2:61:6e:cc:39:59:b5:17:fd:07:8a:08:
86:87:10:2c:5c:a9:f1:01:17:25:cf:10:d9:74:51:73:34:45:
b7:73:07:70:83:92:34:ea:a3:82:11:d0:46:a8:1c:94:70:18:
72:21:2e:d6:ca:3c:bd:1c:b7:90:79:85:57:04:33:39:51:09:
d3:77:0a:3c:da:28:d1:97:0c:09:15:ba:1d:e9:d1:db:71:5a:
f3:b0:19:89:32:ac:6c:de:45:e6:a0:f2:d0:c7:88:02:4d:9a:
c0:2d:0f:ba:50:d0:5d:63:f9:18:63:9d:33:c4:b0:d5:19:e9:
7f:95:2b:9c:e6:3a:a5:0a:db:34:f2:61:35:03:89:4a:b8:35:
a3:4a:13:c8:ee:18:9c:5b:9d:30:93:2f:81:54:e8:0a:04:e1:
5b:7e:f3:bb:1f:ac:ae:16:30:9f:77:63:1d:4d:29:38:e6:65:
66:4e:e5:9b:55:0c:d3:d1:23:96:21:74:be:c4:74:04:ef:86:
6a:8e:e2:00:b8:23:fa:78:cb:49:2c:94:2f:f9:b4:b6:39:49:
6f:6a:ea:d4:f2:f1:ca:12:f0:d1:4d:1c:c4:9a:0c:4b:aa:ea:
26:08:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:47 2024 by rpki-client on console-fra.rpki-client.org