Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DsistBpykn5U9D5s1ybLFjFZ5d8.roa
File: DsistBpykn5U9D5s1ybLFjFZ5d8.roa (raw, json)
Hash identifier: WdSjgZnLeItoMtVUOJGyRytB1kGByfnIFArVKl+4Vb8=
Subject key identifier: 0E:C8:AC:B4:1A:72:92:7E:54:F4:3E:6C:D7:26:CB:16:31:59:E5:DF
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192BE1BF838A86361F0C894288903798354
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DsistBpykn5U9D5s1ybLFjFZ5d8.roa
Signing time: Thu 24 Oct 2024 10:39:17 +0000
ROA not before: Thu 24 Oct 2024 10:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.171.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.100.0/24 maxlen: 24
86.38.102.0/24 maxlen: 24
86.38.122.0/24 maxlen: 24
86.38.124.0/24 maxlen: 24
86.38.125.0/24 maxlen: 24
86.38.126.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.185.0/24 maxlen: 24
89.117.207.0/24 maxlen: 24
89.117.211.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:1b:f8:38:a8:63:61:f0:c8:94:28:89:03:79:83:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 24 10:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ec8acb41a72927e54f43e6cd726cb163159e5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:d1:74:86:f8:7c:8e:91:09:be:79:a2:3f:
a2:65:16:f6:98:f4:7c:05:e9:ca:f3:08:bb:06:4f:
31:c9:94:32:cb:1e:ce:83:8c:d9:93:61:22:4e:57:
92:73:f7:17:57:fe:87:9f:74:d4:3f:c4:2d:01:70:
bf:6d:c9:45:83:65:e2:08:f9:c0:9c:b7:f6:84:ba:
7e:15:09:5b:7d:9e:70:9d:b1:bf:d2:98:ed:7c:c9:
3f:c3:5e:04:ca:67:f4:82:e9:37:fc:6e:ec:fb:b7:
c1:8a:fe:55:81:a3:b9:85:35:b8:a2:1c:11:9d:c2:
c4:a3:ac:a6:91:b6:6c:1f:71:84:eb:40:df:d6:6d:
87:c5:90:da:c2:0c:9d:9f:95:b4:eb:46:35:06:f5:
bd:bc:c2:b2:d1:f5:2b:99:00:8c:03:02:ef:c7:16:
50:29:eb:ba:8e:a7:89:75:85:df:3b:22:95:d4:6e:
a4:3a:86:75:c7:4f:96:cb:ff:75:3e:74:36:91:a4:
cd:ac:d2:2d:12:a7:19:67:bc:a7:19:ab:3d:05:0b:
f6:32:14:bb:4e:04:9a:fb:8b:86:2f:5a:a6:b5:59:
e2:58:5d:8f:39:02:d5:db:16:0a:17:1d:14:d1:bc:
7d:9c:13:40:e8:92:27:94:e7:be:c4:5f:b7:7a:51:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:AC:B4:1A:72:92:7E:54:F4:3E:6C:D7:26:CB:16:31:59:E5:DF
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DsistBpykn5U9D5s1ybLFjFZ5d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.171.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.204.0/23
84.46.207.0/24
86.38.6.0/24
86.38.18.0/24
86.38.28.0/22
86.38.33.0/24
86.38.36.0/24
86.38.38.0/23
86.38.100.0/24
86.38.102.0/24
86.38.122.0/24
86.38.124.0-86.38.126.255
86.38.152.0-86.38.154.255
86.38.161.0/24
86.38.165.0-86.38.169.255
86.38.171.0/24
86.38.173.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
86.38.215.0/24
86.38.234.0/24
86.38.236.0/24
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.69.0/24
89.117.108.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.185.0/24
89.117.207.0/24
89.117.211.0/24
89.117.219.0/24
89.117.223.0/24
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0b:cd:72:45:3d:ad:bd:d7:84:68:3f:45:4c:6f:56:3e:bd:
07:ad:9b:fb:a4:26:78:13:96:04:ff:ec:78:5a:32:15:9c:2b:
7b:b9:9d:af:21:60:e4:7c:4a:5c:f8:a3:c2:a7:9e:dd:24:6e:
7c:e3:f1:83:db:86:61:3d:4c:1e:bb:c9:b2:76:f1:99:36:5e:
38:40:47:f9:af:dc:38:61:6c:98:f4:c0:44:a7:b5:bd:5d:21:
64:2b:5b:92:80:10:5f:9f:e6:e6:58:76:18:67:f0:98:83:2d:
ae:13:8f:e7:32:45:75:1f:54:d9:93:b5:4c:14:3b:8e:2c:95:
cb:e2:90:5f:5e:6d:3f:bd:11:ed:01:4b:c9:26:7e:d0:63:7a:
37:ce:92:ee:b7:19:ca:30:c0:15:ad:57:7b:a0:bd:7c:7a:94:
16:ab:00:61:f7:68:3c:da:00:d2:fe:ac:63:13:4a:09:18:4c:
1d:68:46:5c:eb:c0:37:01:e1:90:0a:32:31:7d:ac:dd:b2:fb:
59:4f:12:75:37:12:77:82:7e:4d:c0:1e:56:9a:67:f4:72:0e:
bc:79:bb:76:91:32:4d:e1:60:52:2a:ec:56:1b:0b:3e:41:f5:
49:fb:b8:06:49:60:7c:95:7a:ae:19:06:66:26:9f:49:0b:39:
d3:71:b1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:44:28 2025 by rpki-client