Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/WEM3lLqIBCE8eB6GXwPZ9cTvZpM.roa
File: WEM3lLqIBCE8eB6GXwPZ9cTvZpM.roa (raw, json)
Hash identifier: ZdZVT05gLD5+DdjvLP4iYHS7mAQPfYjS0ryr9a5prjs=
Subject key identifier: 58:43:37:94:BA:88:04:21:3C:78:1E:86:5F:03:D9:F5:C4:EF:66:93
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0187BCDB9BF4E12EE88EFCAB6DF01627CB5D
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/WEM3lLqIBCE8eB6GXwPZ9cTvZpM.roa
Signing time: Wed 26 Apr 2023 09:18:41 +0000
ROA not before: Wed 26 Apr 2023 09:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212046
IP address blocks: 84.46.160.0/21 maxlen: 21
84.46.172.0/22 maxlen: 22
84.46.168.0/23 maxlen: 23
84.46.176.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/22 maxlen: 22
82.140.180.0/23 maxlen: 23
82.140.190.0/23 maxlen: 23
82.140.188.0/24 maxlen: 24
84.46.128.0/19 maxlen: 19
84.46.192.0/21 maxlen: 21
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.201.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.207.0/24 maxlen: 24
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.244.0/23 maxlen: 23
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.206.0/23 maxlen: 23
86.38.212.0/23 maxlen: 23
86.38.208.0/22 maxlen: 22
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.222.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.233.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.240.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.128.0/23 maxlen: 23
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.25.0/24 maxlen: 24
86.38.34.0/23 maxlen: 23
86.38.36.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.40.0/21 maxlen: 21
86.38.38.0/23 maxlen: 23
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.73.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.0.0/23 maxlen: 23
86.38.2.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.144.0/22 maxlen: 22
86.38.152.0/22 maxlen: 22
86.38.148.0/23 maxlen: 23
86.38.152.0/24 maxlen: 24
86.38.150.0/24 maxlen: 24
86.38.158.0/23 maxlen: 23
86.38.157.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.160.0/24 maxlen: 24
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.176.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.129.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.130.0/24 maxlen: 24
89.117.232.0/21 maxlen: 21
89.117.240.0/24 maxlen: 24
89.117.240.0/22 maxlen: 22
89.117.242.0/24 maxlen: 24
89.117.241.0/24 maxlen: 24
89.117.252.0/23 maxlen: 23
89.117.248.0/23 maxlen: 23
89.117.253.0/24 maxlen: 24
89.117.252.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
217.9.240.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
217.9.243.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.220.0/23 maxlen: 23
89.117.125.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.166.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.94.0/23 maxlen: 23
89.116.98.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:db:9b:f4:e1:2e:e8:8e:fc:ab:6d:f0:16:27:cb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Apr 26 09:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58433794ba8804213c781e865f03d9f5c4ef6693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:12:0d:35:0f:88:0b:73:3b:21:dd:d4:16:
10:6d:39:55:0f:65:16:1f:72:05:62:bb:74:b8:d9:
de:1b:f1:5d:13:70:bf:68:b3:4e:23:4b:a5:0b:da:
24:a3:49:f6:9f:d6:39:83:98:d3:bc:d8:e9:75:b5:
03:71:33:96:c9:4e:66:cf:12:19:87:02:dc:ed:78:
f8:08:83:06:8a:47:b3:89:c6:32:bd:44:a2:a9:4d:
e2:19:6e:02:ab:88:76:a5:d8:28:25:6c:2f:35:36:
9b:a1:63:35:77:b7:5f:60:80:01:e3:47:e5:e8:7f:
b6:66:eb:22:d0:06:29:ee:48:9a:43:04:9f:da:0f:
24:b4:17:7d:e9:34:64:43:26:9f:e3:ef:35:97:3d:
9f:40:88:cf:5e:16:e6:36:df:92:43:5d:d6:af:86:
9b:74:c5:8d:b4:9b:31:be:bb:35:51:88:0b:f1:eb:
15:8f:ae:53:30:c3:4b:9e:72:9c:a5:87:ad:87:cf:
65:a4:b8:af:70:c3:03:4c:b3:48:11:58:ef:e7:e6:
e7:a9:e5:7a:3f:4e:0f:86:ea:8b:42:b9:c1:62:04:
23:ec:05:0a:9d:ca:c8:bb:1f:ba:08:a1:c8:0b:2d:
81:7b:73:34:07:55:51:5f:97:48:b8:95:b0:a6:98:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:37:94:BA:88:04:21:3C:78:1E:86:5F:03:D9:F5:C4:EF:66:93
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/WEM3lLqIBCE8eB6GXwPZ9cTvZpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0-86.38.2.255
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0-86.38.36.255
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.206.0-86.38.213.255
86.38.215.0/24
86.38.222.0/23
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.79.255
89.116.90.0/24
89.116.93.0-89.116.95.255
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.252.0/23
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
2f:04:f1:c6:8f:85:96:bd:5c:68:4e:ce:f3:c4:fb:71:e6:5c:
60:f4:e0:3c:61:ca:64:3c:96:f3:8e:c5:3c:c9:23:1c:a3:e7:
9e:30:84:ee:ac:8f:0d:62:dd:54:70:a6:f7:97:68:77:d8:2f:
03:0a:90:e6:de:2f:66:29:f4:43:2c:33:7c:e3:f0:e2:bf:33:
b0:02:39:4c:a7:7a:d2:8b:41:de:e4:d9:bb:a3:0a:c0:19:c5:
4e:12:7f:0a:b7:d8:0f:36:a2:82:0b:da:be:6e:2c:ec:79:ef:
a6:39:f7:74:7f:a4:7c:41:ab:0b:7e:d2:c4:9a:55:8d:f9:f4:
32:35:86:c9:b4:be:3e:8a:98:02:86:c5:a8:e5:e6:5d:ab:de:
4c:49:18:86:11:4b:be:1c:a0:86:28:79:62:72:e4:6d:47:e9:
7a:e8:67:8d:64:8c:25:31:5e:d5:8b:c5:a4:b6:c6:34:8a:5f:
0b:6e:f9:dc:9d:a7:d5:1a:c8:3e:09:8f:07:20:d4:f4:4c:33:
80:0d:55:b4:74:d8:59:a5:d6:49:4e:80:50:3e:f1:a0:74:fe:
42:fe:28:2e:03:7d:35:31:1b:9e:89:ae:30:47:1e:94:5e:55:
2a:77:59:f0:54:ed:fa:72:72:a0:65:4f:12:fa:15:5c:98:71:
25:05:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org