Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/0Q79YcgdLg1IHdVBdTUhkIFeTvQ.roa
File: 0Q79YcgdLg1IHdVBdTUhkIFeTvQ.roa (raw, json)
Hash identifier: PYnqccA6ezVE31osmQIK1vsyQJZxDSaj8dy2ZUgrYfo=
Subject key identifier: D1:0E:FD:61:C8:1D:2E:0D:48:1D:D5:41:75:35:21:90:81:5E:4E:F4
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018C81FACD6F57C576BEB303F7735142E79F
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/0Q79YcgdLg1IHdVBdTUhkIFeTvQ.roa
Signing time: Tue 19 Dec 2023 12:09:06 +0000
ROA not before: Tue 19 Dec 2023 12:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212046
IP address blocks: 84.46.160.0/21 maxlen: 21
84.46.172.0/22 maxlen: 22
84.46.168.0/23 maxlen: 23
84.46.176.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/22 maxlen: 22
82.140.180.0/23 maxlen: 23
82.140.190.0/23 maxlen: 23
82.140.188.0/24 maxlen: 24
84.46.128.0/19 maxlen: 19
84.46.192.0/21 maxlen: 21
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.201.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.207.0/24 maxlen: 24
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.244.0/23 maxlen: 23
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.206.0/23 maxlen: 23
86.38.212.0/23 maxlen: 23
86.38.208.0/22 maxlen: 22
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.224.0/24 maxlen: 24
86.38.222.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.233.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.229.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.240.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.128.0/23 maxlen: 23
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.25.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.40.0/21 maxlen: 21
86.38.38.0/23 maxlen: 23
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.73.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.0.0/23 maxlen: 23
86.38.2.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.148.0/23 maxlen: 23
86.38.146.0/23 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.150.0/24 maxlen: 24
86.38.158.0/23 maxlen: 23
86.38.157.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.160.0/24 maxlen: 24
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.176.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.129.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.130.0/24 maxlen: 24
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.248.0/23 maxlen: 23
89.117.253.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
217.9.240.0/24 maxlen: 24
217.9.244.0/23 maxlen: 24
217.9.244.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
217.9.243.0/24 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.220.0/23 maxlen: 23
89.117.125.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.166.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.94.0/23 maxlen: 23
89.116.98.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:fa:cd:6f:57:c5:76:be:b3:03:f7:73:51:42:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Dec 19 12:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d10efd61c81d2e0d481dd54175352190815e4ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:ff:3f:91:d4:95:ba:9f:73:50:ae:27:1c:
19:4b:f1:85:e4:68:1d:68:29:a5:2d:dd:54:65:a8:
98:fb:21:64:2b:f3:3c:ca:25:83:13:3b:7c:64:f9:
17:65:1b:c2:6a:d1:93:96:53:a2:ca:c9:50:5a:1d:
ba:0f:8e:07:89:7f:94:af:63:08:79:b7:80:0d:33:
35:e9:46:15:98:80:b7:f2:17:b0:12:ba:cb:98:5d:
82:69:87:9f:79:3c:46:4f:f0:3a:75:dd:55:dd:4a:
7e:2b:26:2e:05:af:ae:6f:a7:a5:f7:de:ac:aa:75:
5a:26:0a:5e:03:e7:07:5d:d7:9b:f9:29:b4:d3:8a:
47:a4:1f:67:7a:49:5c:97:92:6a:4e:e9:34:d7:7f:
7a:60:31:b7:1c:dd:ec:f8:a7:61:98:71:c2:6a:96:
dc:57:75:4a:b9:15:ef:e5:78:59:a9:03:2a:86:58:
47:ac:a5:0a:59:84:53:96:50:11:2e:7e:65:af:f7:
12:0e:ea:97:cd:1b:fa:8b:47:2f:44:c5:92:a3:e0:
22:4b:80:e9:c0:33:3d:5f:b6:51:be:4f:94:b5:9d:
56:35:d4:50:15:a1:86:07:fd:bd:3b:65:c8:d1:9d:
cd:5d:a1:79:b3:fc:cf:f6:20:24:9c:23:04:3e:8c:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0E:FD:61:C8:1D:2E:0D:48:1D:D5:41:75:35:21:90:81:5E:4E:F4
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/0Q79YcgdLg1IHdVBdTUhkIFeTvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0-86.38.2.255
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.206.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.79.255
89.116.90.0/24
89.116.93.0-89.116.95.255
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
9c:a6:e4:98:ee:c5:c0:19:d3:d5:a9:b1:22:8f:e7:e7:f7:41:
d2:0d:82:79:b7:8c:8e:ff:e3:1b:82:82:b8:83:2f:27:ad:d9:
ad:ab:8f:01:97:a8:12:06:8c:41:5c:b0:7d:c5:99:b0:19:8a:
b9:4b:c2:e5:a5:c8:47:7d:8d:cb:92:d4:82:20:5e:ff:87:b5:
08:e7:bf:79:78:4c:e3:71:86:05:b6:19:a5:d3:69:fb:ad:28:
79:1d:a6:2b:a2:ec:ee:a8:d5:59:ee:4b:38:08:88:91:b2:0a:
69:5c:fe:02:78:71:50:77:74:8b:76:ad:7b:b1:2d:d9:f1:af:
93:da:b6:89:e1:de:ae:a3:a6:6f:9f:14:4c:96:39:3e:a5:d7:
ac:07:43:40:82:67:f9:a5:7f:7f:d6:5b:44:f2:a1:1b:eb:4c:
b8:6a:a3:e7:20:e3:c6:97:05:46:15:1e:72:76:50:d0:80:43:
13:eb:17:b0:f8:5f:f1:34:5c:00:7b:40:6a:96:b3:45:4a:38:
89:56:ad:18:38:ab:97:68:13:43:32:de:3d:d5:42:62:99:14:
04:a6:42:b0:49:6f:b1:05:ef:0c:7f:33:16:73:87:a9:e7:8e:
6d:85:eb:6e:06:85:c4:f3:86:ac:bd:2b:33:3a:02:43:be:44:
46:b9:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:19 2024 by rpki-client on console-ams.rpki-client.org