Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/faKqGnf3AspVhzZeHKyODsKS8M4.roa
File: faKqGnf3AspVhzZeHKyODsKS8M4.roa (raw, json)
Hash identifier: OFEwhMolJXf0a3E77NriTH/9gWkoabMDJIlVl62wVd0=
Subject key identifier: 7D:A2:AA:1A:77:F7:02:CA:55:87:36:5E:1C:AC:8E:0E:C2:92:F0:CE
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0189D4F081263E1F772F5FE4966940FA51D0
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/faKqGnf3AspVhzZeHKyODsKS8M4.roa
Signing time: Tue 08 Aug 2023 11:37:58 +0000
ROA not before: Tue 08 Aug 2023 11:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212046
IP address blocks: 84.46.160.0/21 maxlen: 21
84.46.172.0/22 maxlen: 22
84.46.168.0/23 maxlen: 23
84.46.176.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/22 maxlen: 22
82.140.180.0/23 maxlen: 23
82.140.190.0/23 maxlen: 23
82.140.188.0/24 maxlen: 24
84.46.128.0/19 maxlen: 19
84.46.192.0/21 maxlen: 21
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.201.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.207.0/24 maxlen: 24
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.244.0/23 maxlen: 23
86.38.191.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.206.0/23 maxlen: 23
86.38.212.0/23 maxlen: 23
86.38.208.0/22 maxlen: 22
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.224.0/24 maxlen: 24
86.38.222.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.233.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.229.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.240.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.128.0/23 maxlen: 23
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.25.0/24 maxlen: 24
86.38.34.0/23 maxlen: 23
86.38.36.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.40.0/21 maxlen: 21
86.38.38.0/23 maxlen: 23
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.73.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.0.0/23 maxlen: 23
86.38.2.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.148.0/23 maxlen: 23
86.38.146.0/23 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.150.0/24 maxlen: 24
86.38.158.0/23 maxlen: 23
86.38.157.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.160.0/24 maxlen: 24
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.176.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.129.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.130.0/24 maxlen: 24
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.252.0/23 maxlen: 23
89.117.248.0/23 maxlen: 23
89.117.253.0/24 maxlen: 24
89.117.252.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
217.9.240.0/24 maxlen: 24
217.9.244.0/23 maxlen: 24
217.9.244.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
217.9.243.0/24 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.214.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.220.0/23 maxlen: 23
89.117.125.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.166.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.94.0/23 maxlen: 23
89.116.98.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:f0:81:26:3e:1f:77:2f:5f:e4:96:69:40:fa:51:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Aug 8 11:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7da2aa1a77f702ca5587365e1cac8e0ec292f0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:1e:ce:f6:8e:fd:18:ba:2c:26:30:87:f2:
1a:2c:7d:11:7c:67:8d:7d:e1:0d:87:e3:f4:cf:9b:
43:8c:b2:f7:7a:60:d9:11:4e:dc:0e:0b:d4:28:1b:
96:cf:a5:ff:62:55:f0:21:18:3b:7e:21:be:0e:bf:
be:6b:e9:14:cd:77:1e:f9:57:ef:a4:41:5c:2c:cb:
2d:78:f1:2b:99:0a:60:c6:4a:16:cd:2e:b1:61:14:
fa:0a:a2:33:29:9a:ab:98:17:b5:59:d4:43:70:0d:
2c:7f:b1:ae:43:c1:c4:b6:e3:83:fc:b6:7e:bc:b2:
d4:54:31:1d:f8:f2:f5:ff:4a:6a:c0:81:ba:f4:c6:
cd:e3:3a:4b:6a:cd:e6:20:ce:ca:94:85:91:2c:5b:
95:c3:43:2d:50:49:c6:2b:b7:72:ad:1c:42:c5:6e:
0d:4b:12:a4:94:69:92:40:a2:04:21:16:26:30:b6:
22:78:44:e8:7f:a4:db:22:02:96:7b:78:ad:37:9b:
f3:f4:7d:74:2d:eb:47:7e:8a:6e:81:fd:a7:40:f0:
43:90:5d:ff:f1:6d:36:91:d3:6b:be:62:90:ca:94:
8a:c3:1b:37:38:06:78:b7:80:82:43:e8:38:75:50:
a9:17:c8:b7:be:ee:05:b6:9d:43:94:22:88:4f:d0:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A2:AA:1A:77:F7:02:CA:55:87:36:5E:1C:AC:8E:0E:C2:92:F0:CE
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/faKqGnf3AspVhzZeHKyODsKS8M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0-86.38.2.255
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0-86.38.36.255
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.191.0-86.38.199.255
86.38.201.0/24
86.38.206.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.79.255
89.116.90.0/24
89.116.93.0-89.116.95.255
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.214.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.251.0-89.117.253.255
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
99:30:c5:5b:2c:b7:f7:89:a7:f6:d3:0a:c9:dc:30:36:06:39:
35:ed:bd:11:79:fa:f6:bb:dc:ed:b6:11:39:d1:3d:88:3a:45:
6b:0d:ec:65:89:9e:10:b7:96:d4:ea:6b:0e:72:73:16:21:81:
25:d5:4e:7d:7b:e1:ae:ef:ad:a0:25:46:72:b3:6a:3a:ac:01:
0d:cf:0b:d7:5a:c5:87:fe:2d:3a:50:a6:d8:2a:47:79:bc:04:
f8:5e:b6:9b:0d:af:93:0e:b6:f4:38:9d:bd:b5:59:0e:9c:63:
3d:4f:53:18:20:b9:94:f2:ed:77:31:d2:e7:08:cc:57:a2:97:
71:cd:26:a7:50:b8:9d:db:ff:52:03:9d:8a:a1:ae:69:16:60:
87:37:80:a3:ec:1e:59:a4:2a:be:89:0c:f7:0c:3b:2a:48:a5:
5e:9c:6c:cb:4c:41:e1:cf:e9:95:3e:9c:e7:9d:4b:ae:54:89:
46:46:b3:72:8d:a1:4b:70:e6:c5:2a:23:a3:0d:f7:7d:16:f4:
be:5a:f2:ac:4d:6d:a9:cd:4b:ea:1e:6c:28:39:d6:ff:a7:55:
f6:f7:f4:5c:6a:d8:6c:87:3d:09:e3:7b:64:b9:fb:27:e4:f7:
67:08:e4:cb:06:e5:f7:5a:e8:bb:92:19:78:93:98:73:7b:4f:
40:a0:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 14:57:56 2023 by rpki-client on console-ams.rpki-client.org