Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/CCAnW3uELxgqq3bchre22tLAhNM.roa
File: CCAnW3uELxgqq3bchre22tLAhNM.roa (raw, json)
Hash identifier: 5qoSN+lxPt8gJILTNFlK+Zi75620W/JrhyKvg71niLc=
Subject key identifier: 08:20:27:5B:7B:84:2F:18:2A:AB:76:DC:86:B7:B6:DA:D2:C0:84:D3
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192BDD922AFC2EBB5D5E55673B8C82747C0
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/CCAnW3uELxgqq3bchre22tLAhNM.roa
Signing time: Thu 24 Oct 2024 09:26:16 +0000
ROA not before: Thu 24 Oct 2024 09:26:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.171.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.100.0/24 maxlen: 24
86.38.102.0/24 maxlen: 24
86.38.122.0/24 maxlen: 24
86.38.124.0/24 maxlen: 24
86.38.125.0/24 maxlen: 24
86.38.126.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/24 maxlen: 24
89.117.178.0/24 maxlen: 24
89.117.179.0/24 maxlen: 24
89.117.184.0/24 maxlen: 24
89.117.185.0/24 maxlen: 24
89.117.187.0/24 maxlen: 24
89.117.192.0/24 maxlen: 24
89.117.200.0/24 maxlen: 24
89.117.204.0/24 maxlen: 24
89.117.206.0/24 maxlen: 24
89.117.207.0/24 maxlen: 24
89.117.211.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 09:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:d9:22:af:c2:eb:b5:d5:e5:56:73:b8:c8:27:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 24 09:26:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0820275b7b842f182aab76dc86b7b6dad2c084d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:cb:86:22:8c:45:35:aa:3c:33:70:95:47:
48:8a:d1:08:bf:36:f5:51:64:a1:24:55:4c:80:3f:
eb:4f:15:0d:ab:57:c3:57:71:65:47:a2:fe:8f:61:
51:bd:a5:2e:f4:a3:e4:3d:72:74:ee:bf:80:d5:38:
82:16:a3:ae:a0:60:10:dd:0d:22:7a:1c:30:e5:88:
0f:4d:b1:c3:9a:4b:9b:83:ec:90:b0:a1:21:39:67:
56:55:71:cc:d4:e0:af:38:8c:6a:e4:d0:59:85:6c:
50:d1:07:8f:02:28:66:62:3a:bb:e7:05:8d:be:79:
30:58:81:cc:e5:9d:70:dd:ff:71:2a:ec:8c:c6:ef:
d1:ad:cd:bf:74:f3:ee:72:20:ba:8f:74:8d:7f:61:
98:85:aa:c2:fa:2d:67:14:a6:bd:fb:bb:df:fa:9f:
ea:bd:bd:bf:8e:ba:27:93:d8:04:64:cd:6a:03:8e:
bb:f6:10:d6:e4:2d:6c:25:db:57:93:d7:ba:fc:28:
10:28:28:9e:29:ce:b8:3a:3b:53:9b:f1:a3:21:59:
f6:9e:0c:fa:6e:39:8a:1d:b7:c1:90:4a:a6:35:27:
02:eb:1b:4c:fd:ca:e5:f7:7d:cb:f3:0d:0c:76:7b:
8a:96:1d:b7:9b:bf:4b:8d:c4:05:c5:25:1f:9f:be:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:20:27:5B:7B:84:2F:18:2A:AB:76:DC:86:B7:B6:DA:D2:C0:84:D3
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/CCAnW3uELxgqq3bchre22tLAhNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.171.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.204.0/23
84.46.207.0/24
86.38.6.0/24
86.38.18.0/24
86.38.28.0/22
86.38.33.0/24
86.38.36.0/24
86.38.38.0/23
86.38.100.0/24
86.38.102.0/24
86.38.122.0/24
86.38.124.0-86.38.126.255
86.38.152.0-86.38.154.255
86.38.161.0/24
86.38.165.0-86.38.169.255
86.38.171.0/24
86.38.173.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
86.38.215.0/24
86.38.234.0/24
86.38.236.0/24
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.69.0/24
89.117.108.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.170.0/24
89.117.176.0/24
89.117.178.0/23
89.117.184.0/23
89.117.187.0/24
89.117.192.0/24
89.117.200.0/24
89.117.204.0/24
89.117.206.0/23
89.117.211.0/24
89.117.219.0/24
89.117.223.0-89.117.224.255
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a1:72:cf:d8:2d:59:57:bc:5c:cc:87:61:68:41:9c:30:ca:
e9:61:55:0f:30:d2:d8:1f:57:2c:a9:79:b8:65:5a:80:5f:92:
ff:03:aa:4a:04:17:fc:8a:11:1e:c0:6b:e8:4d:93:f8:bd:7f:
5a:c1:a5:87:38:65:35:82:73:c3:30:8c:aa:27:7c:49:6e:82:
e9:94:2f:19:93:7c:92:59:4c:8e:77:1b:3e:3e:79:00:36:3b:
28:03:d4:c9:94:72:b2:fb:67:7e:59:65:83:3f:2d:96:26:9e:
a2:16:27:53:e3:f6:b3:6c:b8:7b:dc:64:99:11:05:55:6a:ac:
b4:ad:27:42:86:f0:43:07:11:43:9d:31:8e:9f:22:4b:32:aa:
48:ac:6d:75:16:a6:6b:9c:a7:36:e7:81:03:b9:d4:e9:d6:84:
1f:db:85:fe:aa:5d:ca:f6:a7:3d:ee:5a:d4:63:a6:2f:de:af:
90:06:82:c1:a0:ed:a4:f0:b4:2b:43:4e:b0:a4:46:99:b7:71:
77:53:b3:84:64:d8:bb:f8:73:e5:d7:59:b1:cd:2d:16:57:f2:
2c:30:e3:a4:09:31:4c:69:fc:2b:b4:cc:13:7c:0a:18:db:62:
7d:ae:b4:6a:a9:e5:b7:a5:fe:83:88:f9:40:bb:44:f9:99:de:
27:59:f1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:24:08 2025 by rpki-client