Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/dJjgkUrrlmIx7Sf33qB9v_hF-xE.roa
File: dJjgkUrrlmIx7Sf33qB9v_hF-xE.roa (raw, json)
Hash identifier: j+tNqBieHHV7M84Mkl1x9REFfres6YN+lYiG3mo4q8g=
Subject key identifier: 74:98:E0:91:4A:EB:96:62:31:ED:27:F7:DE:A0:7D:BF:F8:45:FB:11
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018DABEC88F2EAD24A75553887B691CF48AB
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/dJjgkUrrlmIx7Sf33qB9v_hF-xE.roa
Signing time: Thu 15 Feb 2024 08:40:21 +0000
ROA not before: Thu 15 Feb 2024 08:40:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.128.0/23 maxlen: 23
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.180.0/23 maxlen: 23
82.140.184.0/22 maxlen: 22
82.140.188.0/24 maxlen: 24
82.140.190.0/23 maxlen: 23
84.46.128.0/19 maxlen: 19
84.46.160.0/21 maxlen: 21
84.46.168.0/23 maxlen: 23
84.46.172.0/22 maxlen: 22
84.46.176.0/20 maxlen: 20
84.46.192.0/21 maxlen: 21
84.46.201.0/24 maxlen: 24
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.0.0/23 maxlen: 23
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.25.0/24 maxlen: 24
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/23 maxlen: 23
86.38.40.0/21 maxlen: 21
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.146.0/23 maxlen: 24
86.38.148.0/23 maxlen: 23
86.38.150.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.157.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.208.0/22 maxlen: 22
86.38.212.0/23 maxlen: 23
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.222.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.229.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.233.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.236.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
86.38.244.0/23 maxlen: 23
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.98.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.165.0/24 maxlen: 24
89.117.166.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.220.0/23 maxlen: 23
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 23
89.117.248.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.253.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
217.9.244.0/23 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 28 Feb 2024 10:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ab:ec:88:f2:ea:d2:4a:75:55:38:87:b6:91:cf:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Feb 15 08:40:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7498e0914aeb966231ed27f7dea07dbff845fb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:a9:05:5a:71:41:54:d8:be:da:a3:9a:20:
a0:4d:8e:d7:ab:9a:b8:aa:99:de:71:07:7e:76:e3:
45:51:25:40:d1:2e:70:d0:ad:42:da:83:6c:e4:e6:
fa:ab:e7:89:3c:3c:c3:6d:6b:f1:08:9f:73:a3:78:
ec:3c:18:5a:7a:71:28:66:84:3e:11:b7:3e:1e:8b:
db:bf:88:bb:71:50:1c:ed:87:b4:14:67:69:5e:f7:
60:23:a8:4b:c8:91:02:8b:95:8b:a1:90:b3:d3:fa:
bf:17:1d:42:58:23:f5:3a:e6:59:36:4a:db:67:cb:
32:3f:d1:28:7d:f6:b5:1a:70:6e:b1:8e:ba:49:c6:
47:73:40:f0:97:23:5e:47:2a:d6:d8:df:d3:aa:f9:
6d:10:48:47:5b:6f:92:c3:e0:cf:d8:3d:ed:52:e1:
dc:24:42:5b:77:75:16:86:c1:72:b5:ea:b3:63:f8:
48:80:17:e7:0b:e3:32:d3:5f:55:79:af:06:23:97:
22:ee:f7:c7:46:a5:5f:88:c4:63:ee:52:ac:44:31:
e8:5b:c4:4a:76:34:d2:10:8d:a3:5b:84:23:7f:df:
c5:f3:b0:9b:be:36:12:2d:82:d4:71:62:64:88:78:
9a:29:13:90:83:ba:7f:51:51:5e:06:4d:ce:0f:bc:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:98:E0:91:4A:EB:96:62:31:ED:27:F7:DE:A0:7D:BF:F8:45:FB:11
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/dJjgkUrrlmIx7Sf33qB9v_hF-xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0/23
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0/24
86.38.160.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.208.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.116.251.0/24
89.116.254.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
82:13:f8:1f:f7:a9:ed:51:ba:a3:ca:40:b4:10:96:46:b2:9d:
91:67:5b:8f:68:e2:7c:d1:fa:e4:d6:79:1b:9e:2e:17:6d:52:
75:02:16:f2:ae:6a:fd:b6:f0:87:fd:c3:0d:22:14:51:fb:c1:
c9:44:6b:5a:85:03:32:a7:ae:94:96:e2:74:30:ce:62:d7:32:
ef:06:02:82:b7:a6:b0:4a:8e:3d:ed:44:78:ea:8f:22:ed:a3:
aa:59:87:a7:04:c1:73:7d:dd:7a:9b:85:81:5d:cf:b5:b1:a8:
a5:4f:9b:ed:ca:95:0a:7b:26:8a:bb:69:72:3a:e5:1c:6f:33:
3a:8a:24:53:2b:52:f0:39:5b:11:dd:21:36:73:88:c1:6b:9c:
ae:58:10:8f:68:84:d7:35:fb:5a:42:7c:82:05:cb:7f:34:af:
13:9f:17:ea:62:29:c4:38:03:a7:53:f0:17:16:b2:f6:ab:02:
da:9f:9b:c7:c8:40:66:15:4c:e5:fa:cd:c0:43:76:d7:ed:d1:
3a:a1:18:4b:a8:8e:d5:53:65:a8:a8:b7:15:6d:22:5f:e0:28:
c0:37:d3:0a:c5:b0:c3:09:09:6c:a0:c1:fa:75:ae:cb:b4:5c:
f8:e5:71:e7:2c:3b:91:c7:5e:a8:2b:c5:b3:1a:69:ce:7c:2c:
53:68:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 14:19:36 2024 by rpki-client on console-ams.rpki-client.org