Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/I4glNO_x28_NSRnOKkFyhsAmx2E.roa
File: I4glNO_x28_NSRnOKkFyhsAmx2E.roa (raw, json)
Hash identifier: R7nGKnXs+vDXGO9KskzJk9WNakP2bXM9NxpMF0BpWrM=
Subject key identifier: 23:88:25:34:EF:F1:DB:CF:CD:49:19:CE:2A:41:72:86:C0:26:C7:61
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018B37DC4DDAD857CD839056305C6AB0B47E
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/I4glNO_x28_NSRnOKkFyhsAmx2E.roa
Signing time: Mon 16 Oct 2023 09:41:06 +0000
ROA not before: Mon 16 Oct 2023 09:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13194
IP address blocks: 84.46.139.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
82.140.177.0/24 maxlen: 24
82.140.180.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
89.117.225.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.128.0/24 maxlen: 24
82.140.129.0/24 maxlen: 24
82.140.159.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
213.226.161.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.248.0/23 maxlen: 24
89.117.247.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
89.117.255.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:dc:4d:da:d8:57:cd:83:90:56:30:5c:6a:b0:b4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 16 09:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23882534eff1dbcfcd4919ce2a417286c026c761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:10:8e:93:3c:7b:2f:6c:ab:1f:5a:3f:58:
29:f8:73:8c:52:0f:b9:42:d2:69:9b:e7:de:9f:0f:
4d:4d:85:04:53:6a:af:50:99:93:05:28:d2:10:a5:
fc:ba:d4:a1:35:2e:5e:d0:c2:11:6a:b6:6c:d7:08:
33:6d:24:2f:14:bd:7a:70:0e:3c:e4:a3:24:20:b9:
49:db:bf:fd:c7:0c:0c:46:40:11:b0:ce:88:61:08:
24:c3:34:dc:78:22:c7:e5:ac:0a:21:da:25:cf:64:
79:ea:1e:de:b0:bb:ee:86:25:28:53:c9:47:37:99:
b0:87:90:79:24:32:ca:db:59:e6:ac:5d:a8:68:17:
03:03:2d:c5:aa:1e:39:4d:63:d9:cc:54:e4:96:b1:
c1:a6:7c:be:14:d1:d5:33:5c:17:8a:a0:f9:ba:04:
cd:7c:ae:de:f6:d0:e8:ca:af:18:6d:f0:02:4c:a0:
0f:3e:16:8f:52:3f:75:3e:7a:72:c8:48:71:74:87:
82:63:7a:bf:bd:b0:5d:be:a8:78:8b:8f:b8:97:35:
61:a8:98:8f:6c:9a:44:34:7b:8b:1e:f0:4c:38:c1:
3d:97:2f:ee:86:da:8e:35:a5:01:85:25:c2:15:02:
af:73:07:a0:4a:c0:03:f6:8f:9b:2a:86:dd:c5:02:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:25:34:EF:F1:DB:CF:CD:49:19:CE:2A:41:72:86:C0:26:C7:61
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/I4glNO_x28_NSRnOKkFyhsAmx2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.159.0/24
82.140.177.0/24
82.140.180.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.72.0/22
86.38.81.0/24
86.38.84.0/24
86.38.97.0/24
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0-89.117.249.255
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
32:b0:68:bf:4f:c9:70:bb:6c:4c:24:53:80:12:ea:7a:c2:bc:
21:69:b4:91:0b:35:d8:aa:55:dc:b4:03:cb:18:12:3b:59:d4:
73:a3:e4:3d:89:11:7b:e7:c2:60:d7:8e:e7:bb:18:3b:f5:ac:
50:7e:e8:b0:e9:73:8e:f3:98:6a:e4:ce:77:16:44:6c:2b:8e:
5f:82:95:0d:fd:c7:26:33:a0:fe:64:55:fc:81:b5:56:4d:64:
cf:6a:78:b9:8d:e0:ac:ff:df:07:7f:41:d0:35:c5:fb:7c:b1:
b7:12:e9:9d:6f:f5:a7:16:d2:93:8c:9d:0f:31:f3:9c:13:cd:
d7:d1:17:dd:a6:98:e5:9b:03:08:31:38:7a:2b:d5:9c:22:83:
42:bd:9c:2e:a5:55:7c:c2:8b:02:7c:a8:29:19:47:f9:1a:1f:
89:44:fd:af:75:83:9f:55:e1:3c:e0:df:b0:1b:64:b1:59:28:
a0:55:56:bd:b9:89:f7:f4:11:b5:98:ac:4d:ab:fd:e9:5f:a6:
83:01:93:72:3d:21:7d:6b:9e:f2:94:37:fd:76:92:03:1f:6f:
ce:e4:92:cb:d6:95:f8:48:4b:55:d2:0b:37:cb:89:e5:84:53:
f2:11:b7:87:44:14:b1:53:85:78:20:42:93:19:54:2f:8f:46:
31:ff:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 15:27:18 2023 by rpki-client on console-fra.rpki-client.org