Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/kNDqqv9i0oskbZ9iFF-7H5OlJTA.roa
File: kNDqqv9i0oskbZ9iFF-7H5OlJTA.roa (raw, json)
Hash identifier: 3rMwIBBgmwNA5t8nrpRUI2y6PbR16Io9+qKAS6hSdPE=
Subject key identifier: 90:D0:EA:AA:FF:62:D2:8B:24:6D:9F:62:14:5F:BB:1F:93:A5:25:30
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018DABC3559A007E95FACBD7ACB48EFDF8CC
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/kNDqqv9i0oskbZ9iFF-7H5OlJTA.roa
Signing time: Thu 15 Feb 2024 07:55:21 +0000
ROA not before: Thu 15 Feb 2024 07:55:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.128.0/24 maxlen: 24
82.140.129.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.159.0/24 maxlen: 24
82.140.177.0/24 maxlen: 24
82.140.180.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.34.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.64.0/18 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 28 Feb 2024 10:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ab:c3:55:9a:00:7e:95:fa:cb:d7:ac:b4:8e:fd:f8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Feb 15 07:55:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90d0eaaaff62d28b246d9f62145fbb1f93a52530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:27:58:c7:00:d3:f6:b7:49:b5:82:de:13:
c9:17:0d:85:8a:96:6c:8e:e9:6a:0c:d7:13:6c:bc:
b3:e1:5c:3c:ed:65:63:11:33:52:0f:24:df:34:58:
1b:5b:1f:d3:4c:6b:a4:94:e6:a1:66:5e:dc:9b:fe:
c7:5a:b7:0c:d9:2e:aa:b6:08:65:9d:7f:f7:63:6b:
41:fe:af:a7:de:17:a8:71:2d:2b:6e:8b:80:f0:00:
13:78:70:96:c6:d7:34:27:c7:34:2f:23:2b:e4:fd:
cb:d4:5d:18:c1:d5:77:fd:60:6a:ad:ab:f0:1d:44:
f2:ae:97:2b:4c:d9:e0:c8:0d:b9:bd:8b:0b:67:07:
a1:55:f6:51:9d:15:02:6b:df:f1:28:7e:d2:3a:5a:
81:73:f7:a4:d8:02:60:f6:c9:dc:7b:54:0b:dc:64:
bd:e6:4b:65:03:01:e5:7e:27:f4:bc:a0:5f:48:39:
64:1c:de:7a:22:f3:51:11:fc:00:4e:d8:15:f5:3a:
78:18:a0:19:84:84:db:da:9e:73:77:cb:ac:9d:7c:
8c:6b:bb:e4:70:68:75:1b:fa:26:61:c7:e9:50:93:
ad:43:19:f5:0e:c9:a7:79:e3:b3:39:73:e9:e5:73:
c9:d0:3d:5c:55:d3:99:9e:f0:69:bf:41:e6:18:93:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:EA:AA:FF:62:D2:8B:24:6D:9F:62:14:5F:BB:1F:93:A5:25:30
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/kNDqqv9i0oskbZ9iFF-7H5OlJTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.159.0/24
82.140.177.0/24
82.140.180.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.34.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.64.0/18
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.237.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.116.251.0/24
89.116.254.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0-89.117.249.255
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
2f:29:2d:0d:04:62:d4:61:9f:94:f9:90:e7:d9:7c:02:82:25:
2d:b2:63:13:6c:5f:a9:b1:48:2f:48:07:4a:c5:6e:3b:f9:e2:
43:28:35:68:13:dc:e5:2e:0a:d4:53:50:36:dd:d4:e7:8c:3e:
be:27:79:a7:52:ea:24:d4:5d:53:a1:ab:fe:87:ac:a3:a6:86:
b9:8a:2f:c3:27:2d:95:c3:c0:98:aa:fb:39:50:13:a3:e2:6d:
f9:f0:f9:47:b5:43:df:fd:fd:e8:00:f8:4f:bf:e2:20:04:20:
04:04:64:b2:7f:0f:be:dd:eb:e1:86:84:c0:ce:92:f2:15:11:
9f:be:bf:a6:77:ac:79:62:7b:9e:97:29:91:c3:1c:de:65:0b:
d2:fb:24:22:60:df:10:b3:61:f4:87:62:85:fd:e4:72:f2:99:
ef:a3:28:c0:e0:50:43:57:bf:6f:80:d4:42:f1:17:0d:40:f2:
68:1c:e3:6d:0a:d4:27:57:b2:96:ed:8a:88:e5:63:0d:34:c2:
76:59:2a:db:23:91:23:69:94:57:83:ec:d6:4b:c1:05:8a:d4:
e5:a9:01:98:99:60:79:fb:1d:90:b6:c8:0a:57:28:36:55:de:
ff:24:31:f7:ae:8e:f9:8c:7f:6a:a5:f8:84:39:3b:28:10:e1:
e4:6e:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 14:31:10 2024 by rpki-client on console-fra.rpki-client.org