Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/AAkDcQ2P6reEP6Qruuw83NY78RI.roa
File: AAkDcQ2P6reEP6Qruuw83NY78RI.roa (raw, json)
Hash identifier: skAcEXcPOWmJ9PRTCUeGsvashuNosXShgUx8zFgP+sM=
Subject key identifier: 00:09:03:71:0D:8F:EA:B7:84:3F:A4:2B:BA:EC:3C:DC:D6:3B:F1:12
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018C49573355AD1B02A3E83DCDB102BFEA0C
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/AAkDcQ2P6reEP6Qruuw83NY78RI.roa
Signing time: Fri 08 Dec 2023 12:11:40 +0000
ROA not before: Fri 08 Dec 2023 12:11:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212046
IP address blocks: 84.46.160.0/21 maxlen: 21
84.46.172.0/22 maxlen: 22
84.46.168.0/23 maxlen: 23
84.46.176.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/22 maxlen: 22
82.140.180.0/23 maxlen: 23
82.140.190.0/23 maxlen: 23
82.140.188.0/24 maxlen: 24
84.46.128.0/19 maxlen: 19
84.46.192.0/21 maxlen: 21
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.201.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.207.0/24 maxlen: 24
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.244.0/23 maxlen: 23
86.38.191.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.206.0/23 maxlen: 23
86.38.212.0/23 maxlen: 23
86.38.208.0/22 maxlen: 22
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.224.0/24 maxlen: 24
86.38.222.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.233.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.229.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.240.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.128.0/23 maxlen: 23
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.25.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.40.0/21 maxlen: 21
86.38.38.0/23 maxlen: 23
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.73.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.0.0/23 maxlen: 23
86.38.2.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.148.0/23 maxlen: 23
86.38.146.0/23 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.150.0/24 maxlen: 24
86.38.158.0/23 maxlen: 23
86.38.157.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.160.0/24 maxlen: 24
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.176.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.129.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.130.0/24 maxlen: 24
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.248.0/23 maxlen: 23
89.117.253.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
217.9.240.0/24 maxlen: 24
217.9.244.0/23 maxlen: 24
217.9.244.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
217.9.243.0/24 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.214.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.220.0/23 maxlen: 23
89.117.125.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.166.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.94.0/23 maxlen: 23
89.116.98.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:57:33:55:ad:1b:02:a3:e8:3d:cd:b1:02:bf:ea:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Dec 8 12:11:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=000903710d8feab7843fa42bbaec3cdcd63bf112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:a2:8e:14:7c:3a:ff:99:34:0d:55:b0:d9:
0a:e8:1d:4b:f0:7b:1f:47:b5:d2:4c:9d:73:25:e6:
7d:21:6a:c6:10:f5:57:a8:e3:aa:df:06:c3:3a:24:
0c:34:72:85:e0:45:bc:b2:40:4e:dc:e4:30:7d:7f:
54:88:85:73:ef:7d:25:fa:f1:3e:f5:dc:3b:f0:70:
06:b3:1f:ef:d0:d6:5a:aa:bf:07:70:38:9e:1a:d7:
10:05:19:42:8c:af:f2:fc:0e:41:be:b4:bd:9c:46:
fa:d3:b5:a1:3c:10:43:b2:7b:3b:51:b5:0b:75:09:
a0:d1:d8:85:08:a7:4e:2e:7e:3e:9f:72:a6:b8:80:
10:76:7f:e8:e8:5e:70:c4:6c:52:44:73:16:e8:fb:
e9:7a:bb:fb:25:73:cb:ce:df:b2:c8:79:80:d6:80:
1f:a4:4d:9b:87:90:b9:9e:76:8d:c5:2b:2d:2a:4a:
68:8d:29:57:96:24:01:11:dd:e5:6d:8a:d4:c2:d0:
98:7e:6c:59:4f:99:05:36:3f:8b:08:65:bb:c9:8d:
30:d5:73:a1:78:51:d1:f4:b1:46:01:12:1f:b5:f4:
cb:b6:c2:af:3e:3b:c3:de:75:ec:7c:57:0f:b6:fd:
c5:7a:99:af:b7:05:83:e6:24:cb:28:c8:7c:99:cc:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:03:71:0D:8F:EA:B7:84:3F:A4:2B:BA:EC:3C:DC:D6:3B:F1:12
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/AAkDcQ2P6reEP6Qruuw83NY78RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0-86.38.2.255
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.191.0-86.38.199.255
86.38.201.0/24
86.38.206.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.79.255
89.116.90.0/24
89.116.93.0-89.116.95.255
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.214.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.251.0/24
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
87:1a:b8:f1:f2:ac:59:4e:15:61:0f:64:36:5d:e8:27:61:f4:
96:33:e7:35:0d:b1:9b:a1:ad:e8:a4:54:26:a1:6b:ff:82:6c:
b5:74:db:34:57:87:f9:05:fb:bb:1a:7b:90:57:fb:cb:7d:f8:
31:07:44:1d:1c:68:a1:9a:94:dc:ca:21:1c:f0:6f:72:bf:90:
e9:ca:95:17:89:b5:ba:ed:f8:e1:30:a6:71:c0:e7:89:23:af:
9d:f5:fa:75:e0:b6:26:7e:ac:1d:4c:b5:9d:6a:f2:47:40:5c:
76:97:70:38:fd:81:bb:a8:3c:59:d4:25:09:4e:d8:e7:2a:b6:
ba:bf:9d:6b:37:7f:fd:27:1a:8f:a2:89:25:46:05:b1:c1:79:
40:47:06:7c:52:a8:c5:93:44:1f:3a:3a:63:1b:a5:8a:8e:0f:
3e:f3:ac:66:f1:d4:5d:68:94:1a:5e:2f:c7:39:dc:1b:b2:b8:
1e:b5:fd:cb:4f:57:cc:2f:5b:c4:81:c9:f3:cb:e0:89:9d:8a:
e1:19:ed:ea:9e:79:47:17:83:25:f3:01:ed:d0:f7:4c:a8:fc:
68:62:7a:f8:35:52:33:ac:fc:10:37:b5:14:a6:ca:c5:6a:f0:
a2:07:ef:1d:cd:05:7f:ff:82:b5:da:26:5a:bf:42:21:88:f5:
67:22:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 12:51:34 2023 by rpki-client on console-fra.rpki-client.org