Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/eTWnie9dJlq7XIIXvs__Re4pi2A.roa
File: eTWnie9dJlq7XIIXvs__Re4pi2A.roa (raw, json)
Hash identifier: 4u6VIMiTA9BmWG4Ry4t4wB90m6GHxK5D9/04JrDq9r4=
Subject key identifier: 79:35:A7:89:EF:5D:26:5A:BB:5C:82:17:BE:CF:FF:45:EE:29:8B:60
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019276AD26A7AB08C2D3C35D50D936242E57
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/eTWnie9dJlq7XIIXvs__Re4pi2A.roa
Signing time: Thu 10 Oct 2024 13:45:12 +0000
ROA not before: Thu 10 Oct 2024 13:45:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.15.223.0/24 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.34.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.64.0/18 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 15 Oct 2024 23:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:ad:26:a7:ab:08:c2:d3:c3:5d:50:d9:36:24:2e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 10 13:45:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7935a789ef5d265abb5c8217becfff45ee298b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:7a:15:45:ca:1e:be:b0:b1:16:38:2b:a4:
65:a4:41:bd:de:e6:72:b8:27:f7:6b:08:33:bd:4e:
c2:bd:aa:d4:e1:55:b3:24:07:c3:7d:ee:aa:ab:a8:
22:2f:7e:a6:16:b5:8f:bf:c4:73:8b:63:f6:2d:d8:
75:1e:4b:18:8c:ee:bd:07:1a:e7:c8:0d:11:c4:1e:
3d:06:b9:4b:f6:e3:2e:9b:7d:3d:be:c7:dd:83:cb:
41:03:ae:73:0b:c5:18:75:ac:57:f6:19:cc:3b:a2:
b2:52:77:15:07:fc:36:2e:5b:01:26:1a:b3:35:ec:
f6:14:ee:18:8c:8b:4b:6f:c7:18:2a:8f:03:01:b5:
ee:9a:cd:52:41:ad:07:c3:8c:9d:a8:cb:d1:08:5e:
b5:8e:de:85:44:52:3d:b4:07:10:89:f2:ee:7d:46:
7a:90:b3:e0:7b:7f:24:3f:82:41:b5:92:d2:64:cd:
c1:00:8a:d3:07:bb:fd:ae:6c:70:7f:d5:7a:53:4b:
d1:41:ab:8b:c6:3c:cd:11:c0:fc:2c:57:dc:b9:1e:
98:7f:50:48:82:96:7c:12:da:0e:5a:7e:7d:17:cc:
2c:50:79:13:c9:8f:3b:60:2c:90:6c:93:74:11:24:
cb:7f:a5:90:2b:11:41:da:bc:76:e6:dd:44:4a:f7:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:35:A7:89:EF:5D:26:5A:BB:5C:82:17:BE:CF:FF:45:EE:29:8B:60
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/eTWnie9dJlq7XIIXvs__Re4pi2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.34.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.64.0/18
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0/24
89.117.249.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
38:79:7b:f8:83:3f:b2:f5:a8:c6:64:bd:97:2d:31:ca:95:63:
e9:ef:5e:29:71:7d:c3:3f:b9:8b:76:6e:3b:1a:0b:41:b4:f0:
09:9d:d7:55:ae:e5:ee:69:6e:13:f8:72:f9:e9:97:2d:7f:12:
7e:e2:f2:dd:77:5a:28:7f:d8:0d:be:9b:ca:3c:fb:14:e7:91:
68:7f:b3:a5:f2:ea:a5:92:5b:b8:0f:1b:7d:06:96:f6:1c:5b:
f9:d2:c5:b7:1b:de:ef:8c:1d:dd:37:a8:7c:73:19:86:ed:21:
00:1a:ba:27:7c:e5:13:3c:c3:5c:37:46:f7:1d:6a:cc:ea:71:
ce:51:c1:ec:c4:d8:5b:56:93:2d:ad:21:18:61:3f:48:a3:25:
08:f7:84:b1:52:0e:aa:9d:ed:28:a8:7d:a6:da:7a:6c:40:13:
eb:7b:9a:75:3b:04:a9:0e:ee:b2:43:5d:5d:54:fd:84:41:7a:
98:be:93:db:48:23:80:84:b1:16:4e:75:de:33:8c:3a:e7:7f:
7c:b3:9d:b3:3c:db:8a:7e:0c:69:d2:6d:6b:52:f4:d9:f0:9d:
0b:de:45:a1:91:bc:bf:ab:9b:30:99:ca:ab:df:94:70:d6:22:
0f:67:29:1c:d7:d5:f0:5f:c3:1c:f0:a9:6c:89:43:92:bd:a3:
54:f9:9e:3f
-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgISAZJ2rSanqwjC08NdUNk2JC5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjQxMDEwMTM0NTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTM1YTc4OWVmNWQyNjVhYmI1YzgyMTdiZWNmZmY0NWVlMjk4YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd56FUXKHr6wsRY4K6RlpEG93uZy
uCf3awgzvU7CvarU4VWzJAfDfe6qq6giL36mFrWPv8Rzi2P2Ldh1HksYjO69Bxrn
yA0RxB49BrlL9uMum309vsfdg8tBA65zC8UYdaxX9hnMO6KyUncVB/w2LlsBJhqz
Nez2FO4YjItLb8cYKo8DAbXums1SQa0Hw4ydqMvRCF61jt6FRFI9tAcQifLufUZ6
kLPge38kP4JBtZLSZM3BAIrTB7v9rmxwf9V6U0vRQauLxjzNEcD8LFfcuR6Yf1BI
gpZ8EtoOWn59F8wsUHkTyY87YCyQbJN0ESTLf6WQKxFB2rx25t1ESvcU3QIDAQAB
o4IDhzCCA4MwHQYDVR0OBBYEFHk1p4nvXSZau1yCF77P/0XuKYtgMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvZVRXbmllOWRKbHE3WElJWHZzX19SZTRwaTJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBmwYIKwYBBQUHAQcBAf8EggGKMIIBhjCCAXMEAgABMIIB
awMEAFKMgQMDAFQPAwQAVC6LAwQAVC7MAwQAVC7PAwQAViYBAwQAViYiAwQAViYp
AwQAViY0AwQAViY+AwQGViZAAwQBViaYAwQAVibXAwQAVibkAwQAVibmAwQAVib1
AwQAWXR8AwQAWXSBAwQAWXSPAwQAWXSXAwQAWXSbAwQAWXSgAwQAWXSiAwQAWXSu
AwQAWXSwAwQAWXSyAwQAWXToAwQAWXTrAwQAWXTuAwQAWXTwAwQAWXT1AwQAWXT5
AwQAWXUKAwQAWXUOAwQAWXVFAwQBWXVcAwQAWXV9AwQAWXV/AwQAWXWKAwQAWXWN
AwQAWXWcAwQAWXWlAwQBWXXcAwQAWXXfAwQAWXXhAwQAWXXzAwQAWXX3AwQAWXX5
AwQAWXX/AwQAub2aAwQG1eKAAwQE1fzAAwQA1fzcMAwDBADV/N8DBALV/OAwDAME
AdX86gMEAdX87AMEANX8/AMEANX8/gMEAdkJ+DANBAIAAjAHAwUDKgD1ADANBgkq
hkiG9w0BAQsFAAOCAQEAOHl7+IM/svWoxmS9ly0xypVj6e9eKXF9wz+5i3ZuOxoL
QbTwCZ3XVa7l7mluE/hy+emXLX8SfuLy3XdaKH/YDb6byjz7FOeRaH+zpfLqpZJb
uA8bfQaW9hxb+dLFtxve74wd3TeofHMZhu0hABq6J3zlEzzDXDdG9x1qzOpxzlHB
7MTYW1aTLa0hGGE/SKMlCPeEsVIOqp3tKKh9ptp6bEAT63uadTsEqQ7uskNdXVT9
hEF6mL6T20gjgISxFk513jOMOud/fLOdszzbin4MadJta1L02fCdC95FoZG8v6ub
MJnKq9+UcNYiD2cpHNfV8F/DHPCpbIlDkr2jVPmePw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:42:36 2025 by rpki-client