Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DE0PNHSO3TX2V2cOkWs0tTNpowU.roa
File: DE0PNHSO3TX2V2cOkWs0tTNpowU.roa (raw, json)
Hash identifier: 8IQRApmwbr4fGf+5KtbamsCiltyOtCEIDI7vKKcMbs4=
Subject key identifier: 0C:4D:0F:34:74:8E:DD:35:F6:57:67:0E:91:6B:34:B5:33:69:A3:05
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192BBB6917BD1745E6D20B279073E298B8D
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DE0PNHSO3TX2V2cOkWs0tTNpowU.roa
Signing time: Wed 23 Oct 2024 23:29:16 +0000
ROA not before: Wed 23 Oct 2024 23:29:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.171.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.100.0/24 maxlen: 24
86.38.102.0/24 maxlen: 24
86.38.122.0/24 maxlen: 24
86.38.124.0/24 maxlen: 24
86.38.125.0/24 maxlen: 24
86.38.126.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/24 maxlen: 24
89.117.178.0/24 maxlen: 24
89.117.179.0/24 maxlen: 24
89.117.184.0/24 maxlen: 24
89.117.185.0/24 maxlen: 24
89.117.187.0/24 maxlen: 24
89.117.192.0/24 maxlen: 24
89.117.200.0/24 maxlen: 24
89.117.204.0/24 maxlen: 24
89.117.206.0/24 maxlen: 24
89.117.207.0/24 maxlen: 24
89.117.211.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/24 maxlen: 24
89.117.238.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 09:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bb:b6:91:7b:d1:74:5e:6d:20:b2:79:07:3e:29:8b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 23 23:29:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c4d0f34748edd35f657670e916b34b53369a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:13:e2:a4:7a:4f:21:36:d3:e9:13:30:3c:
55:af:39:81:2a:ab:7d:fa:ea:04:3c:15:24:e3:95:
a2:48:2d:00:7f:33:5d:43:31:df:a9:05:70:67:49:
88:2e:c7:7e:30:4d:1b:1d:a5:b1:eb:19:c7:a4:e3:
e7:b2:73:2d:a2:1e:26:35:e8:b3:6e:49:3e:7e:25:
b3:bf:77:7a:1a:f9:c1:d7:27:a1:00:96:07:0b:01:
ab:22:b1:39:b6:bc:81:ce:5e:a7:99:5b:26:c3:04:
b6:14:a4:b7:d4:69:fc:6e:2e:2d:e8:89:2f:4a:bd:
29:f5:06:c1:e0:81:68:9a:3b:8d:48:21:b9:ee:22:
76:40:21:b7:70:66:bb:54:8a:6a:67:08:a1:6d:90:
7f:8f:92:1d:d4:4f:56:18:88:e6:d4:21:ed:c0:8f:
e7:a3:9a:98:ac:3c:d5:3b:b4:1c:e0:eb:3e:f8:41:
e0:e7:37:13:f1:29:2a:97:6b:8f:66:06:30:07:17:
6f:07:57:30:57:63:60:37:ae:c6:f8:15:80:03:27:
90:51:e5:cd:59:a1:13:94:55:26:2b:44:7e:11:66:
3b:d4:e4:ac:bb:4d:99:80:1e:92:59:41:6f:c8:df:
e0:21:45:c8:51:30:30:6d:66:34:e0:3d:76:3f:aa:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4D:0F:34:74:8E:DD:35:F6:57:67:0E:91:6B:34:B5:33:69:A3:05
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DE0PNHSO3TX2V2cOkWs0tTNpowU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.171.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.204.0/23
84.46.207.0/24
86.38.6.0/24
86.38.18.0/24
86.38.28.0/22
86.38.33.0/24
86.38.36.0/24
86.38.38.0/23
86.38.100.0/24
86.38.102.0/24
86.38.122.0/24
86.38.124.0-86.38.126.255
86.38.152.0-86.38.154.255
86.38.161.0/24
86.38.165.0-86.38.169.255
86.38.171.0/24
86.38.173.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
86.38.215.0/24
86.38.234.0/24
86.38.236.0/24
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.69.0/24
89.117.108.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.170.0/24
89.117.176.0/24
89.117.178.0/23
89.117.184.0/23
89.117.187.0/24
89.117.192.0/24
89.117.200.0/24
89.117.204.0/24
89.117.206.0/23
89.117.211.0/24
89.117.219.0/24
89.117.223.0-89.117.224.255
89.117.238.0/24
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:af:51:13:ae:d1:02:0b:7f:b5:77:a8:0d:d9:ab:f4:81:c4:
c2:30:8c:87:6a:e0:a7:4c:0e:b8:04:dc:b8:59:08:77:25:59:
8d:19:e1:06:dd:ce:6c:7b:83:c0:0a:00:a9:58:d4:a2:dd:62:
38:ce:dd:9b:2a:2a:59:d5:82:21:08:28:91:e5:e0:fa:ca:3d:
42:a8:4e:c8:6a:b1:42:bb:65:c2:95:3f:72:c6:81:e8:76:7d:
91:df:44:78:75:59:2d:95:32:eb:3f:a7:d6:79:4d:a7:81:d4:
04:82:8c:56:b9:66:2a:76:ed:22:62:1b:0f:74:5c:06:b3:46:
85:48:96:5d:95:9b:19:94:3f:46:2d:98:79:3f:ec:6f:0b:a5:
5d:41:5c:42:95:bf:7a:89:39:22:80:f8:4c:3f:f8:37:ad:cc:
b4:0b:22:c3:3e:b1:11:2f:8a:a4:a4:7b:96:16:4e:23:5a:99:
82:2b:0c:e5:c4:0b:23:6b:78:5f:58:4e:ab:b2:31:f2:fe:c9:
30:44:e9:d7:a4:c2:97:42:9e:f8:e1:01:95:c6:c2:03:a8:7a:
77:ab:d4:0d:df:cd:d1:a9:44:b3:2c:6b:a3:a4:dc:cd:67:03:
4c:5d:af:d6:19:0b:22:de:cd:e8:9c:ae:97:6b:bc:de:49:97:
28:93:f4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:15 2025 by rpki-client