Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/zPrm5yJjjYvQoxGkNL2a8eLx50c.roa
File: zPrm5yJjjYvQoxGkNL2a8eLx50c.roa (raw, json)
Hash identifier: 9PCXfnCypfssh0vMaccVyQF5Tvjq9F3EaxVjonYdXf4=
Subject key identifier: CC:FA:E6:E7:22:63:8D:8B:D0:A3:11:A4:34:BD:9A:F1:E2:F1:E7:47
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018CC9BCAAE65D58C574B0515A1209EB73FD
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/zPrm5yJjjYvQoxGkNL2a8eLx50c.roa
Signing time: Tue 02 Jan 2024 10:33:54 +0000
ROA not before: Tue 02 Jan 2024 10:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 84.46.160.0/21 maxlen: 21
84.46.172.0/22 maxlen: 22
84.46.168.0/23 maxlen: 23
84.46.176.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/22 maxlen: 22
82.140.180.0/23 maxlen: 23
82.140.190.0/23 maxlen: 23
82.140.188.0/24 maxlen: 24
84.46.128.0/19 maxlen: 19
84.46.192.0/21 maxlen: 21
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.201.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.207.0/24 maxlen: 24
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.244.0/23 maxlen: 23
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.206.0/23 maxlen: 23
86.38.212.0/23 maxlen: 23
86.38.208.0/22 maxlen: 22
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.224.0/24 maxlen: 24
86.38.222.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.233.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.229.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.240.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.128.0/23 maxlen: 23
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.25.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.40.0/21 maxlen: 21
86.38.38.0/23 maxlen: 23
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.73.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.0.0/23 maxlen: 23
86.38.2.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.148.0/23 maxlen: 23
86.38.146.0/23 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.150.0/24 maxlen: 24
86.38.158.0/23 maxlen: 23
86.38.157.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.160.0/24 maxlen: 24
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.176.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.129.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.130.0/24 maxlen: 24
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.248.0/23 maxlen: 23
89.117.253.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
217.9.240.0/24 maxlen: 24
217.9.244.0/23 maxlen: 24
217.9.244.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
217.9.243.0/24 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.220.0/23 maxlen: 23
89.117.125.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.166.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.94.0/23 maxlen: 23
89.116.98.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 14:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:aa:e6:5d:58:c5:74:b0:51:5a:12:09:eb:73:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 10:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccfae6e722638d8bd0a311a434bd9af1e2f1e747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:6e:3e:7a:75:f8:8d:b9:a6:97:c4:43:6c:
a8:0e:7a:3d:03:68:a9:26:90:de:8d:90:5f:51:86:
e4:4d:52:89:50:9c:4b:e6:1a:d2:72:51:9a:6f:7e:
ae:13:58:06:68:66:4b:33:b6:b1:77:67:af:e5:60:
d5:a3:ac:1f:63:b9:61:e6:4b:41:68:b7:c8:8a:11:
e2:d8:da:f4:d3:7d:6a:e6:5b:2a:17:ea:94:c3:6a:
c4:d6:09:59:a1:27:3c:40:ac:49:6d:6f:be:d4:08:
a0:7f:8b:2b:6b:2c:a3:37:4d:c5:41:31:26:44:4b:
1d:61:bc:42:7b:97:3f:62:5d:d1:a3:ae:f1:e1:48:
c6:40:e9:af:d2:2e:fa:78:c2:65:e9:5e:cd:07:7f:
36:c6:89:d8:16:dc:6c:cb:c2:61:67:e5:29:63:19:
5a:09:f4:6b:67:16:68:16:1c:9c:6c:a2:31:7e:58:
30:5f:ff:04:c4:10:d8:55:a9:a5:49:c0:4f:0f:16:
5f:b5:a6:43:b8:70:03:06:74:e2:b5:5e:28:cb:cb:
d9:52:a7:ee:1c:f7:63:a6:c4:bc:52:d6:a3:4f:90:
85:e8:ea:32:f0:28:2a:18:7a:c4:73:c1:6d:30:20:
47:a1:87:a6:58:82:f5:9c:7a:10:2a:9c:f5:99:e7:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:E6:E7:22:63:8D:8B:D0:A3:11:A4:34:BD:9A:F1:E2:F1:E7:47
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/zPrm5yJjjYvQoxGkNL2a8eLx50c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0-86.38.2.255
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.206.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.79.255
89.116.90.0/24
89.116.93.0-89.116.95.255
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
46:c8:88:8f:dc:c2:55:db:b7:af:d0:37:c5:1a:5e:70:31:81:
a7:ca:d4:9d:ca:08:2e:6b:e3:02:8b:e5:4b:ba:36:94:f0:cd:
38:f9:da:a7:b4:4e:10:8f:d2:72:91:20:db:c2:42:bb:ba:d5:
2e:7a:cd:33:b3:4d:c6:75:21:1f:d6:d7:ef:3a:3e:34:3b:01:
7b:2f:a4:c2:bf:6b:f6:45:6a:97:26:df:8b:8b:14:b5:40:4e:
43:bd:c3:b6:02:1c:fb:1b:0a:3e:13:76:c7:92:f7:68:4f:1d:
2c:1e:f1:93:1a:c4:e4:2b:2a:f4:a3:65:be:a4:3f:c2:b5:a8:
35:eb:47:ff:3e:36:03:5b:98:11:26:0a:14:11:50:21:5f:d7:
69:6a:f7:4f:0f:ec:63:a0:a2:47:45:fb:6d:87:bc:8b:01:2b:
63:19:26:35:11:3d:30:ef:32:ef:dc:a3:d2:a7:1c:de:6a:8a:
5b:60:56:4b:d1:cc:b1:a3:b0:a7:0f:d1:01:63:f7:1a:b5:c2:
e7:db:ae:c6:91:66:67:61:72:27:fc:58:c7:c3:7e:8b:2c:80:
45:87:bb:c6:c9:e0:c6:74:94:ee:e7:ea:f6:5a:f3:76:4f:c4:
11:7d:ee:84:e3:35:82:46:f9:4b:95:43:e8:0a:6a:26:22:97:
a0:f2:e2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 20:01:25 2024 by rpki-client on console-ams.rpki-client.org