Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/iz6xUVYTTpxnYkoF-RUviXTOWgo.roa
File: iz6xUVYTTpxnYkoF-RUviXTOWgo.roa (raw, json)
Hash identifier: i+3eCWU5qq3e9DQpphgdWedoH4ou4jo9YQODo5eWzF0=
Subject key identifier: 8B:3E:B1:51:56:13:4E:9C:67:62:4A:05:F9:15:2F:89:74:CE:5A:0A
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018E41AF835171429D608F6EC4E23FDF50C4
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/iz6xUVYTTpxnYkoF-RUviXTOWgo.roa
Signing time: Fri 15 Mar 2024 10:36:45 +0000
ROA not before: Fri 15 Mar 2024 10:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.34.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.64.0/18 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 27 Mar 2024 16:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:af:83:51:71:42:9d:60:8f:6e:c4:e2:3f:df:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 15 10:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b3eb15156134e9c67624a05f9152f8974ce5a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:a9:29:8c:eb:cc:a4:6b:3f:0a:2d:16:be:
33:b8:5b:6c:58:cd:69:12:2d:09:92:85:35:75:c4:
af:dc:41:f8:55:1b:6f:d5:60:ae:63:0c:f4:0e:e3:
68:be:78:bc:85:d5:39:cb:06:0f:ce:bb:c1:4e:61:
74:0d:9b:56:7d:27:73:af:a6:b4:0f:81:4a:5e:b3:
44:ce:67:e9:50:31:23:95:ab:96:43:3d:6f:ed:60:
19:cc:29:dd:07:be:19:74:d3:5e:3b:ca:79:4c:30:
e8:50:9e:4f:e7:5b:52:02:5b:5a:30:51:63:e9:73:
16:51:ab:a9:55:04:b4:5b:f6:a5:62:07:b8:08:0c:
17:26:54:89:87:e4:22:07:e9:df:0b:3f:ed:70:33:
4b:a2:dd:82:fa:39:78:42:40:7a:bb:f2:4c:18:9f:
b0:f6:a6:8e:58:43:45:47:73:63:58:3e:79:09:ce:
ca:f8:2f:0a:db:65:ef:a1:f9:75:fa:84:7c:b4:ae:
c5:27:43:41:f2:81:00:03:a7:34:e8:33:22:20:e0:
0c:ad:c9:0a:e0:55:8f:73:cb:e4:6f:cf:71:7d:9d:
ec:d5:0d:72:00:31:5b:2e:e2:dd:3d:d3:52:6a:d3:
2a:6d:16:f2:20:f1:23:60:4c:a8:54:b3:e1:a6:e1:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3E:B1:51:56:13:4E:9C:67:62:4A:05:F9:15:2F:89:74:CE:5A:0A
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/iz6xUVYTTpxnYkoF-RUviXTOWgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.34.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.64.0/18
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.237.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.116.254.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0-89.117.249.255
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
13:43:c4:98:d6:fe:c4:27:95:68:fe:e5:31:75:63:c1:0c:04:
b6:6c:17:35:88:6e:0a:48:81:72:1a:e8:11:10:49:ae:23:5d:
9b:93:65:8b:68:23:4d:36:64:ef:c5:b2:71:47:84:87:89:38:
9b:31:ea:c5:4e:a0:33:d5:93:17:ee:58:3a:6e:ee:58:8b:a8:
40:69:0b:26:b0:31:fa:8c:0a:61:ec:b5:a9:38:43:e7:33:e6:
5f:b2:ba:1f:0e:9c:49:d4:37:c7:84:bf:fa:48:39:d3:01:e6:
c6:57:99:0f:6c:a2:44:94:fa:e3:ed:c2:60:70:0f:85:90:9b:
05:18:31:58:4c:d1:b2:74:28:72:3b:05:c2:67:af:7b:fd:4f:
53:a4:6b:1f:bb:5c:52:ef:04:74:ad:04:94:8a:1b:af:a0:fa:
14:5c:c3:76:11:b9:c8:8b:b1:ec:45:fc:92:d4:ff:fe:ba:d7:
42:87:3f:37:6d:79:a5:9a:31:17:15:ae:1a:d8:b7:bb:30:6b:
ba:d8:c0:a9:be:ea:01:61:77:35:02:73:3c:ce:9c:c4:07:e8:
74:e1:da:4b:92:09:df:45:3a:8d:ee:7c:4d:40:75:be:57:19:
a5:3e:60:a2:87:a0:67:6c:f6:ce:63:f4:88:bf:4a:4e:06:fc:
3c:c6:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 20:51:08 2024 by rpki-client on console-fra.rpki-client.org