Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/aIzDR1LBinzCgBXlsBNEKlP4i4s.roa
File: aIzDR1LBinzCgBXlsBNEKlP4i4s.roa (raw, json)
Hash identifier: 06oVATjq/9CSiJ7FaTi4SQg2L1CRn8Me3s0EFPrJwW0=
Subject key identifier: 68:8C:C3:47:52:C1:8A:7C:C2:80:15:E5:B0:13:44:2A:53:F8:8B:8B
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192AED12C85B2CB45236A00303EF5F1485E
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/aIzDR1LBinzCgBXlsBNEKlP4i4s.roa
Signing time: Mon 21 Oct 2024 11:23:16 +0000
ROA not before: Mon 21 Oct 2024 11:23:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.171.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.23.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.77.0/24 maxlen: 24
86.38.78.0/24 maxlen: 24
86.38.79.0/24 maxlen: 24
86.38.90.0/24 maxlen: 24
86.38.94.0/24 maxlen: 24
86.38.95.0/24 maxlen: 24
86.38.96.0/24 maxlen: 24
86.38.98.0/24 maxlen: 24
86.38.100.0/24 maxlen: 24
86.38.102.0/24 maxlen: 24
86.38.122.0/24 maxlen: 24
86.38.124.0/24 maxlen: 24
86.38.125.0/24 maxlen: 24
86.38.126.0/24 maxlen: 24
86.38.142.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.172.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.229.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/24 maxlen: 24
89.117.178.0/24 maxlen: 24
89.117.179.0/24 maxlen: 24
89.117.184.0/24 maxlen: 24
89.117.185.0/24 maxlen: 24
89.117.187.0/24 maxlen: 24
89.117.192.0/24 maxlen: 24
89.117.200.0/24 maxlen: 24
89.117.204.0/24 maxlen: 24
89.117.206.0/24 maxlen: 24
89.117.207.0/24 maxlen: 24
89.117.211.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/24 maxlen: 24
89.117.238.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 11:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:d1:2c:85:b2:cb:45:23:6a:00:30:3e:f5:f1:48:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 21 11:23:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=688cc34752c18a7cc28015e5b013442a53f88b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:37:5a:50:52:d1:65:97:cc:48:db:49:76:
6f:b6:05:b5:24:55:30:3a:31:51:2d:27:71:d5:74:
c5:e6:34:73:2d:b6:8f:65:3f:3b:e7:63:58:16:cd:
75:60:9f:cd:82:ed:6b:83:2c:f9:9a:66:24:12:38:
f0:bd:c1:74:8f:18:7b:a3:3e:7e:fb:ad:25:c9:32:
2c:76:22:82:e6:b3:40:82:ee:2a:f7:82:7e:72:6a:
01:f0:ea:71:75:69:e2:2c:c0:cd:95:2e:ae:d0:5e:
3d:d0:c6:15:31:c5:77:f2:5e:a6:94:8a:26:fa:4f:
b3:1a:7f:1b:20:72:b5:dd:04:d2:32:d2:e6:5b:fe:
95:45:79:00:c6:71:2a:5b:80:91:b7:b7:ea:a1:74:
d5:ac:18:9c:31:99:6f:27:65:70:46:59:0b:54:53:
d1:75:93:03:c9:80:d8:c7:4a:c4:2c:f3:10:a2:d0:
4f:6b:4c:c6:c4:f5:05:f9:30:ca:44:0d:bf:7e:15:
ae:4a:45:6e:c1:fb:50:1b:49:3f:c4:7a:7c:32:41:
f8:83:82:af:c8:9a:84:f8:95:89:49:9c:19:1f:a6:
e2:75:81:5b:be:d8:36:92:80:ba:cb:d1:36:fe:83:
df:29:3c:45:65:b8:c0:20:74:9c:c0:ad:f1:8e:62:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:C3:47:52:C1:8A:7C:C2:80:15:E5:B0:13:44:2A:53:F8:8B:8B
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/aIzDR1LBinzCgBXlsBNEKlP4i4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.171.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.204.0/23
84.46.207.0/24
86.38.6.0/24
86.38.18.0/24
86.38.23.0/24
86.38.28.0/22
86.38.33.0/24
86.38.36.0/24
86.38.38.0/23
86.38.77.0-86.38.79.255
86.38.90.0/24
86.38.94.0-86.38.96.255
86.38.98.0/24
86.38.100.0/24
86.38.102.0/24
86.38.122.0/24
86.38.124.0-86.38.126.255
86.38.142.0/24
86.38.152.0-86.38.154.255
86.38.161.0/24
86.38.165.0-86.38.169.255
86.38.171.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
86.38.215.0/24
86.38.229.0/24
86.38.234.0/24
86.38.236.0/24
86.38.239.0-86.38.240.255
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.69.0/24
89.117.108.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.170.0/24
89.117.176.0/24
89.117.178.0/23
89.117.184.0/23
89.117.187.0/24
89.117.192.0/24
89.117.200.0/24
89.117.204.0/24
89.117.206.0/23
89.117.211.0/24
89.117.219.0/24
89.117.223.0-89.117.224.255
89.117.238.0/24
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3c:5d:14:a6:b0:45:d2:af:f9:8d:ed:b1:5e:b7:de:69:34:
3b:d6:32:80:ce:4f:e1:91:aa:96:32:d3:78:06:80:cb:84:03:
c2:7d:a0:05:de:bc:6c:5a:b1:bf:af:61:e4:61:c8:1d:6d:73:
c7:12:2c:c2:cd:8d:a3:21:01:d7:bf:2a:3a:3b:74:c0:d3:7d:
cc:16:7c:ca:21:bd:6b:7a:7c:6e:c1:17:b9:05:de:3b:63:37:
ac:04:30:92:a1:b7:55:ad:4e:41:f3:02:3e:65:57:02:d8:1a:
7f:f4:be:15:aa:46:2a:e4:ce:d1:3c:22:9a:5e:fa:0f:fd:42:
cd:2b:33:9a:e8:eb:7e:26:b3:cf:4c:3d:d5:2a:88:b1:09:7b:
5d:c0:19:b9:19:42:0d:af:b1:3a:04:f9:99:92:08:65:87:73:
89:9b:49:62:36:39:cb:0c:34:53:35:56:cb:6b:79:b9:76:90:
f3:89:29:4d:b5:6b:65:0e:d2:11:f1:df:20:94:0f:dc:72:a1:
01:10:f2:bd:3b:79:45:52:83:84:64:a5:0f:b0:1b:c6:8b:29:
1a:98:04:4e:a6:24:4b:2e:f3:98:05:ac:5c:45:f0:76:2d:44:
4b:3a:3f:20:fa:23:ea:b4:9c:1d:1f:8c:75:33:d1:c4:74:42:
07:30:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:09:46 2025 by rpki-client