Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Q6lne-TtyML0MWeFgCC2mjd8sQs.roa
File: Q6lne-TtyML0MWeFgCC2mjd8sQs.roa (raw, json)
Hash identifier: YWRC4vDlXUyzT/KlReAexLmWyMEyUPiIeOXgSwbC8uY=
Subject key identifier: 43:A9:67:7B:E4:ED:C8:C2:F4:31:67:85:80:20:B6:9A:37:7C:B1:0B
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018DEF520EADFCEA1D4B35E1249E9376E0FB
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Q6lne-TtyML0MWeFgCC2mjd8sQs.roa
Signing time: Wed 28 Feb 2024 10:45:48 +0000
ROA not before: Wed 28 Feb 2024 10:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.132.0/22 maxlen: 22
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.179.0/24 maxlen: 24
82.140.180.0/23 maxlen: 23
82.140.184.0/22 maxlen: 22
82.140.188.0/24 maxlen: 24
82.140.190.0/23 maxlen: 23
84.46.128.0/19 maxlen: 19
84.46.160.0/21 maxlen: 21
84.46.168.0/23 maxlen: 23
84.46.172.0/22 maxlen: 22
84.46.176.0/20 maxlen: 20
84.46.192.0/21 maxlen: 21
84.46.201.0/24 maxlen: 24
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.0.0/23 maxlen: 23
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.25.0/24 maxlen: 24
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/23 maxlen: 23
86.38.40.0/21 maxlen: 21
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.146.0/23 maxlen: 24
86.38.148.0/23 maxlen: 23
86.38.150.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.157.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.208.0/22 maxlen: 22
86.38.212.0/23 maxlen: 23
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.222.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.229.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.233.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.236.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
86.38.244.0/23 maxlen: 23
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.98.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.165.0/24 maxlen: 24
89.117.166.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.220.0/23 maxlen: 23
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 23
89.117.248.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.253.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
217.9.244.0/23 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 15 Mar 2024 10:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:52:0e:ad:fc:ea:1d:4b:35:e1:24:9e:93:76:e0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Feb 28 10:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43a9677be4edc8c2f43167858020b69a377cb10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:d4:37:25:61:7e:dd:21:01:b5:07:00:56:
46:0b:2c:31:2a:ba:fe:a3:e4:a2:96:75:ec:66:53:
71:96:ed:e0:42:89:26:df:a0:2e:80:91:0f:93:a4:
4e:f8:d6:70:07:27:c5:96:ee:1f:0b:e3:bf:74:a3:
f9:e3:6c:fb:7e:e0:14:76:7b:87:7d:09:ce:1b:ad:
c2:4a:2b:19:cb:51:f0:92:b5:5a:0f:16:6e:12:bb:
e1:2f:de:d8:18:b7:0f:47:76:a9:7b:b0:69:d5:26:
0f:6e:f8:dc:a8:64:06:a3:93:ed:9a:36:10:c6:77:
f8:04:9e:10:85:6b:c1:b3:d7:ad:2d:72:00:99:0c:
42:d4:79:54:90:96:56:e9:cd:83:fd:81:d3:93:87:
3f:1c:47:31:2e:da:0a:38:4a:4d:83:75:2c:d2:71:
5e:82:94:eb:78:01:6b:97:42:42:00:30:be:33:e9:
37:cb:dc:d8:8a:0b:c1:db:b8:70:99:52:4a:84:cf:
af:69:a0:a8:c9:87:91:3e:0d:b9:42:71:90:8d:82:
40:50:41:5d:7c:09:61:c1:51:b7:aa:6f:91:1c:f6:
2a:cc:fd:d8:b5:64:e8:55:d7:00:1a:22:7e:42:b0:
29:2c:6c:ac:c9:42:b7:ea:d4:4a:f2:46:1d:10:19:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:67:7B:E4:ED:C8:C2:F4:31:67:85:80:20:B6:9A:37:7C:B1:0B
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Q6lne-TtyML0MWeFgCC2mjd8sQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0/23
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0/24
86.38.160.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.208.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.116.251.0/24
89.116.254.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
31:18:f9:e3:6c:84:aa:77:d7:19:77:11:b5:30:14:e0:03:57:
54:7e:01:b4:4f:3a:38:92:aa:d0:67:39:83:d2:0a:ec:87:fb:
ca:9c:5e:d9:56:1b:61:87:37:9b:78:20:5b:f9:84:f3:29:b7:
90:5d:08:8b:43:8d:7c:31:07:8c:16:e2:9c:37:a3:31:82:22:
96:d2:c7:79:a3:ad:f4:d9:57:55:60:c5:b1:6c:11:ef:56:71:
1e:87:4b:d3:5c:9a:ad:4d:aa:2a:9d:f5:54:05:c4:83:79:22:
e5:35:4d:a3:ab:2c:b9:1f:52:0e:82:92:09:fc:9f:41:f7:6c:
f7:9b:fb:a0:da:b3:24:77:99:f0:0f:7b:30:50:80:9f:d8:46:
0a:cc:a3:f8:0d:60:a1:74:64:95:75:9f:12:9f:35:cd:bf:a3:
7c:3f:99:59:50:6d:e7:93:5b:89:cc:cc:75:64:1c:17:2f:9c:
65:ee:ff:7c:c6:22:8b:2c:6c:b4:6d:08:d1:c4:03:31:37:86:
80:40:14:a2:1a:fb:bd:b7:dd:60:06:27:de:56:64:bd:67:94:
63:c7:71:80:12:6e:fa:ad:d8:bf:56:c4:40:32:cf:9c:01:97:
f4:b5:63:9f:ba:73:ef:64:b9:1e:0d:a6:91:5b:38:94:a4:af:
09:51:03:00
-----BEGIN CERTIFICATE-----
MIIHyTCCBrGgAwIBAgISAY3vUg6t/OodSzXhJJ6TduD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjQwMjI4MTA0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2E5Njc3YmU0ZWRjOGMyZjQzMTY3ODU4MDIwYjY5YTM3N2NiMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJzUNyVhft0hAbUHAFZGCywxKrr+
o+SilnXsZlNxlu3gQokm36AugJEPk6RO+NZwByfFlu4fC+O/dKP542z7fuAUdnuH
fQnOG63CSisZy1HwkrVaDxZuErvhL97YGLcPR3ape7Bp1SYPbvjcqGQGo5PtmjYQ
xnf4BJ4QhWvBs9etLXIAmQxC1HlUkJZW6c2D/YHTk4c/HEcxLtoKOEpNg3Us0nFe
gpTreAFrl0JCADC+M+k3y9zYigvB27hwmVJKhM+vaaCoyYeRPg25QnGQjYJAUEFd
fAlhwVG3qm+RHPYqzP3YtWToVdcAGiJ+QrApLGysyUK36tRK8kYdEBmNswIDAQAB
o4IE1TCCBNEwHQYDVR0OBBYEFEOpZ3vk7cjC9DFnhYAgtpo3fLELMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvUTZsbmUtVHR5TUwwTVdlRmdDQzJtamQ4c1FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIC6QYIKwYBBQUHAQcBAf8EggLYMIIC1DCCAtAEAgABMIIC
yDAMAwQCUoyEAwQBUoywMAwDBABSjLMDBAFSjLQwDAMEA1KMuAMEAFKMvAMEAVKM
vjAMAwQHVC6AAwQBVC6oMAwDBAJULqwDBANULsAwDAMEAFQuyQMEAVQu6AMEAVYm
AAMEAFYmBgMEA1YmEDAMAwQAViYZAwQFViYAAwQAViYhAwQAViYkMAwDBAFWJiYD
BABWJpYDBAJWJpgDBABWJp0wDAMEBVYmoAMEAFYmrgMEAFYmsAMEAFYmvAMEA1Ym
wAMEAFYmyTAMAwQEVibQAwQBVibUAwQAVibXMAwDBAFWJt4DBABWJuAwDAMEAFYm
4wMEA1Ym4DAMAwQAVibpAwQAVibqAwQBVibsMAwDBABWJu8DBABWJvADBAFWJvQD
BABZdAADBABZdA4DBABZdBIDBABZdCgDBABZdDkDBABZdEcwDAMEAFl0TQMEAFl0
TgMEAFl0WgMEAFl0XTAMAwQAWXRhAwQAWXRiAwQAWXR8AwQAWXSBAwQAWXSPAwQA
WXSXAwQAWXSbAwQAWXSgAwQAWXSiAwQAWXSuAwQAWXSwAwQAWXSyAwQAWXTDAwQA
WXToAwQAWXTrAwQAWXTuAwQAWXTwAwQAWXT1AwQAWXT5AwQAWXT7AwQAWXT+AwQA
WXUKAwQAWXUOAwQAWXUaAwQAWXUnAwQAWXVFAwQAWXVWAwQBWXVcAwQAWXVkAwQA
WXVsAwQAWXVuAwQAWXV3AwQAWXV9MAwDBABZdX8DBABZdYAwDAMEAFl1iQMEAFl1
igMEAVl1jDAMAwQAWXWlAwQAWXWmAwQAWXWqMAwDBARZdbADBAJZdbgwDAMEBll1
wAMEAVl11DAMAwQAWXXbAwQBWXXcMAwDBABZdd8DBAFZdeAwDAMEA1l16AMEAll1
8DAMAwQAWXX3AwQBWXX4AwQAWXX9AwQA2QnwMAwDBADZCfMDBAHZCfwwDQYJKoZI
hvcNAQELBQADggEBADEY+eNshKp31xl3EbUwFOADV1R+AbRPOjiSqtBnOYPSCuyH
+8qcXtlWG2GHN5t4IFv5hPMpt5BdCItDjXwxB4wW4pw3ozGCIpbSx3mjrfTZV1Vg
xbFsEe9WcR6HS9Ncmq1Nqiqd9VQFxIN5IuU1TaOrLLkfUg6Ckgn8n0H3bPeb+6Da
syR3mfAPezBQgJ/YRgrMo/gNYKF0ZJV1nxKfNc2/o3w/mVlQbeeTW4nMzHVkHBcv
nGXu/3zGIossbLRtCNHEAzE3hoBAFKIa+7233WAGJ95WZL1nlGPHcYASbvqt2L9W
xEAyz5wBl/S1Y5+6c+9kuR4NppFbOJSkrwlRAwA=
-----END CERTIFICATE-----
Generated at Fri Mar 15 13:41:24 2024 by rpki-client on console-ams.rpki-client.org