Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/WC0pmftFW9-HlurWFg3FqpF74oI.roa
File: WC0pmftFW9-HlurWFg3FqpF74oI.roa (raw, json)
Hash identifier: Go2bMVnbymseeehVIpRKwM0d28hFSHvnqXp4AdgoQ+M=
Subject key identifier: 58:2D:29:99:FB:45:5B:DF:87:96:EA:D6:16:0D:C5:AA:91:7B:E2:82
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018E37943C023A5755066F9715FDDBC05937
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/WC0pmftFW9-HlurWFg3FqpF74oI.roa
Signing time: Wed 13 Mar 2024 11:30:45 +0000
ROA not before: Wed 13 Mar 2024 11:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.34.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.64.0/18 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 15 Mar 2024 10:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:94:3c:02:3a:57:55:06:6f:97:15:fd:db:c0:59:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 13 11:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=582d2999fb455bdf8796ead6160dc5aa917be282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:72:6c:c1:fb:43:d1:c9:c0:4b:ce:26:e6:
8a:88:43:8d:f6:6d:ac:93:25:f2:1c:69:a2:ab:22:
bb:84:12:ea:e8:4d:55:1b:98:58:03:d3:df:de:d3:
ef:43:1e:70:34:34:e1:06:97:17:0e:69:3f:9d:b9:
a0:9e:14:40:b5:f6:bb:cb:4d:db:c3:cf:72:4c:c7:
2c:4d:fc:9b:b9:99:fc:4b:6b:90:33:9a:ad:86:5d:
1b:c4:00:84:9c:d7:f0:74:9d:f6:31:ee:a7:0d:50:
e2:1b:55:0d:16:5c:2d:0f:55:32:75:06:00:ab:cc:
84:93:4a:82:47:43:4a:96:86:1e:e7:83:4d:d6:ad:
0e:09:84:9e:ff:ec:55:2b:a5:da:47:bc:56:48:05:
0d:7a:f4:84:82:95:e6:af:fc:89:b3:b8:9b:6d:a7:
56:e5:f3:a4:db:fe:f9:8f:46:fa:35:f8:75:17:ed:
e7:6d:6d:15:09:52:cf:90:ca:01:4b:04:c7:35:fe:
03:5f:df:ae:7a:70:d1:1f:d8:bb:53:d9:7c:02:ed:
a0:a1:0a:5a:03:fe:79:4d:80:ea:f5:86:53:b0:3e:
81:9c:26:19:f4:d1:8a:60:00:c7:99:3b:e6:28:3c:
75:ae:b6:86:08:d2:50:89:d2:4e:ae:96:45:59:7e:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2D:29:99:FB:45:5B:DF:87:96:EA:D6:16:0D:C5:AA:91:7B:E2:82
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/WC0pmftFW9-HlurWFg3FqpF74oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.34.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.64.0/18
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.237.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.116.251.0/24
89.116.254.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0-89.117.249.255
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
39:d2:b4:54:3c:e2:22:1d:8c:6c:ee:67:54:60:fe:27:35:30:
0e:c6:b6:1b:76:5a:52:ae:de:85:a1:a0:d2:62:11:1e:e7:ba:
46:19:45:7f:11:79:e4:5d:b0:74:21:07:0c:84:14:37:4c:da:
24:77:5c:8e:35:8b:7d:a6:88:b7:d2:a6:2f:d5:3c:a3:06:ef:
d6:76:bc:ac:99:da:0b:91:e1:cb:8f:14:7a:50:b8:ed:e7:f8:
ab:60:a3:4e:56:e3:98:b5:c0:59:d7:cd:19:b2:d5:ed:89:95:
95:31:e1:88:d6:91:1e:68:09:87:10:3c:24:4a:3e:a8:e2:a5:
5b:a6:9a:77:be:5b:9d:6a:b0:dc:33:d2:28:8b:18:0b:c6:30:
dd:74:2a:15:b3:6e:a1:5c:9e:20:f4:fc:7e:63:97:bc:4f:50:
9b:7b:3e:44:c3:bc:be:b5:c3:eb:7c:40:59:26:64:9a:da:84:
6d:62:b5:37:29:40:03:c7:ce:30:e7:b0:56:b6:7f:6c:4f:74:
2c:f9:57:30:5c:ab:50:ae:a3:b8:d0:b4:07:a8:b6:34:1d:ac:
88:8d:96:07:76:20:b6:12:6f:4f:8d:6c:40:6c:3e:d0:5f:60:
54:68:58:fa:20:a0:d7:61:fa:9d:e3:0a:3d:53:b8:e2:9e:9c:
20:c2:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 13:33:40 2024 by rpki-client on console-fra.rpki-client.org