Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/jfIT__W3o9gVQVR1w-Nw9_jzfvs.roa
File: jfIT__W3o9gVQVR1w-Nw9_jzfvs.roa (raw, json)
Hash identifier: OXprNM5EiMYDMDMrWiklbGOUlyUPrj5mBp8le5/ei+8=
Subject key identifier: 8D:F2:13:FF:F5:B7:A3:D8:15:41:54:75:C3:E3:70:F7:F8:F3:7E:FB
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192928B8D70E9F9A5EBE1B6B6463CABAFAC
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/jfIT__W3o9gVQVR1w-Nw9_jzfvs.roa
Signing time: Tue 15 Oct 2024 23:37:52 +0000
ROA not before: Tue 15 Oct 2024 23:37:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.15.223.0/24 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.64.0/18 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 18 Oct 2024 16:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:92:8b:8d:70:e9:f9:a5:eb:e1:b6:b6:46:3c:ab:af:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 15 23:37:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8df213fff5b7a3d815415475c3e370f7f8f37efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:a9:a2:4f:09:12:aa:be:08:0f:d1:c4:39:
31:b1:c1:ef:af:b3:f1:66:12:46:ff:11:d3:a9:95:
c5:d4:4d:f5:02:44:61:01:d3:9b:ae:4f:c8:1f:75:
4d:d6:18:2a:32:f3:14:7a:65:35:f3:48:bf:f6:f1:
78:06:42:e1:41:a5:36:21:15:5c:2d:09:f5:f7:59:
29:0d:73:4d:c6:82:07:58:ea:b0:5f:25:75:28:e3:
90:1a:8a:0a:71:29:6f:d6:c7:73:e8:42:b0:8e:de:
cc:c6:18:1e:cc:92:45:ef:3d:71:95:85:cc:a8:3a:
6e:8c:ab:a6:72:6d:44:6f:ab:b4:7a:64:e9:1c:a8:
bc:24:f2:7b:8c:e9:e4:a7:4d:2e:7c:57:99:fe:de:
46:30:b6:7e:71:5f:09:0f:ba:e5:94:44:c0:d8:ce:
39:05:58:36:dd:ac:9a:95:7d:20:f5:10:90:1d:fb:
7f:6c:b6:21:50:c1:c8:b8:9d:c4:0f:01:bc:8b:3d:
91:13:20:a4:e6:23:19:e9:b0:e3:0f:6f:17:65:c9:
39:ee:a3:a8:f1:bb:8b:23:39:36:d8:14:56:5e:3b:
92:ae:f8:9e:ef:14:b1:05:3c:13:c2:f3:54:a0:db:
43:5b:2c:66:30:34:a8:36:c8:c2:27:77:78:a0:51:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F2:13:FF:F5:B7:A3:D8:15:41:54:75:C3:E3:70:F7:F8:F3:7E:FB
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/jfIT__W3o9gVQVR1w-Nw9_jzfvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.64.0/18
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0/24
89.117.249.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
86:58:c0:6a:c7:cd:7c:a6:88:29:e1:bd:f8:30:54:28:a9:9d:
d1:29:45:09:17:66:47:1c:e7:35:05:39:ef:9c:c4:c1:02:8a:
14:32:9e:62:16:e0:02:65:78:29:c9:4c:5a:f7:6a:d2:b0:51:
48:ff:bf:3d:66:c2:8e:ba:d8:08:ac:bc:71:90:61:99:30:a3:
b4:d4:cf:00:45:ae:16:67:3e:69:60:14:01:b0:ed:16:ee:06:
d4:26:1b:1f:38:1a:58:e1:c3:61:d4:60:bf:93:0f:e9:7c:1a:
43:e1:6c:00:9f:61:52:c7:f7:5d:bb:be:5b:09:ca:ac:6b:6e:
de:0d:db:0a:97:80:93:10:e9:b6:a3:3c:27:e4:89:2a:67:f3:
59:6c:ba:e9:cc:95:e9:48:49:f7:4c:ba:de:11:ed:e4:fb:e4:
7d:3a:7a:73:e7:58:f5:51:af:32:12:3a:6e:13:ff:b2:40:58:
a4:7f:a4:4a:5b:be:79:91:5d:68:bc:5f:a6:3f:b7:d7:f6:f9:
14:8f:a0:37:85:31:da:dc:9d:80:a9:b9:5e:ce:c9:2e:26:3d:
16:f8:1c:a4:9e:e2:37:52:96:90:39:cc:d9:91:0e:b3:2b:9f:
0e:47:8f:77:04:c5:e7:bf:c2:67:7c:7c:6e:74:c4:9c:c7:e6:
dd:fc:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:23 2025 by rpki-client