Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gf_Ik9Zkq88A91QzwpqgHBOCK6U.roa
File: gf_Ik9Zkq88A91QzwpqgHBOCK6U.roa (raw, json)
Hash identifier: kOIYDWUXOS4IXQd8J9+kdZsHrWQQGFK+P0vFjwGVCBI=
Subject key identifier: 81:FF:C8:93:D6:64:AB:CF:00:F7:54:33:C2:9A:A0:1C:13:82:2B:A5
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192A6D877EA6048AA299237313D9FDE3017
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gf_Ik9Zkq88A91QzwpqgHBOCK6U.roa
Signing time: Sat 19 Oct 2024 22:14:17 +0000
ROA not before: Sat 19 Oct 2024 22:14:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.171.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.23.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.77.0/24 maxlen: 24
86.38.78.0/24 maxlen: 24
86.38.79.0/24 maxlen: 24
86.38.90.0/24 maxlen: 24
86.38.94.0/24 maxlen: 24
86.38.95.0/24 maxlen: 24
86.38.96.0/24 maxlen: 24
86.38.98.0/24 maxlen: 24
86.38.100.0/24 maxlen: 24
86.38.102.0/24 maxlen: 24
86.38.109.0/24 maxlen: 24
86.38.110.0/24 maxlen: 24
86.38.122.0/24 maxlen: 24
86.38.124.0/24 maxlen: 24
86.38.125.0/24 maxlen: 24
86.38.126.0/24 maxlen: 24
86.38.137.0/24 maxlen: 24
86.38.142.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.162.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.172.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
86.38.209.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.229.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/24 maxlen: 24
89.117.178.0/24 maxlen: 24
89.117.179.0/24 maxlen: 24
89.117.184.0/24 maxlen: 24
89.117.185.0/24 maxlen: 24
89.117.187.0/24 maxlen: 24
89.117.192.0/24 maxlen: 24
89.117.200.0/24 maxlen: 24
89.117.204.0/24 maxlen: 24
89.117.206.0/24 maxlen: 24
89.117.207.0/24 maxlen: 24
89.117.211.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/24 maxlen: 24
89.117.238.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 22:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a6:d8:77:ea:60:48:aa:29:92:37:31:3d:9f:de:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 19 22:14:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81ffc893d664abcf00f75433c29aa01c13822ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:e1:00:3a:ec:06:79:e9:e8:42:89:ce:45:
44:4a:46:0b:71:c5:e3:36:a4:03:6e:5b:85:b2:e7:
51:49:32:46:1d:72:28:ba:f5:5b:5b:85:83:c2:d2:
e5:e9:d0:93:6c:b9:b6:f8:c9:58:f0:81:24:5b:e3:
57:2b:bd:e0:af:b6:41:6e:de:ea:89:75:b8:93:79:
cf:a9:4f:21:77:da:04:dc:50:62:c1:60:6e:d9:43:
a4:5e:54:f3:b5:ac:ae:c8:64:53:9d:aa:9f:cf:57:
15:d6:4f:59:1d:66:2e:d6:5a:bd:7c:35:4b:c9:13:
c7:e7:a5:8a:ad:0e:59:77:94:19:91:b1:07:b8:9b:
18:76:77:f5:0a:22:52:d6:f8:23:a0:e2:76:41:99:
f3:a4:03:01:4a:3d:69:be:db:c5:a9:75:10:e0:b5:
6c:4f:a0:81:48:a5:f2:51:9a:b5:9a:38:e4:3d:b9:
3f:4f:71:c9:35:d6:7b:34:7f:83:23:18:df:b2:65:
74:d5:27:bf:10:f3:65:b4:9a:78:76:ca:8c:f6:6d:
0a:3f:0a:a7:52:84:0c:a5:8d:4e:f8:89:e9:de:83:
31:6b:23:33:69:aa:87:07:17:14:78:b9:c0:a2:d2:
76:ae:c4:61:9f:85:d7:1c:ae:1f:1a:b4:cf:be:f4:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FF:C8:93:D6:64:AB:CF:00:F7:54:33:C2:9A:A0:1C:13:82:2B:A5
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gf_Ik9Zkq88A91QzwpqgHBOCK6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.171.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.204.0/23
84.46.207.0/24
86.38.6.0/24
86.38.18.0/24
86.38.23.0/24
86.38.28.0/22
86.38.33.0/24
86.38.36.0/24
86.38.38.0/23
86.38.77.0-86.38.79.255
86.38.90.0/24
86.38.94.0-86.38.96.255
86.38.98.0/24
86.38.100.0/24
86.38.102.0/24
86.38.109.0-86.38.110.255
86.38.122.0/24
86.38.124.0-86.38.126.255
86.38.137.0/24
86.38.142.0/24
86.38.152.0-86.38.154.255
86.38.161.0-86.38.162.255
86.38.165.0-86.38.169.255
86.38.171.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
86.38.209.0/24
86.38.215.0/24
86.38.229.0/24
86.38.234.0/24
86.38.236.0/24
86.38.239.0-86.38.240.255
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.69.0/24
89.117.108.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.170.0/24
89.117.176.0/24
89.117.178.0/23
89.117.184.0/23
89.117.187.0/24
89.117.192.0/24
89.117.200.0/24
89.117.204.0/24
89.117.206.0/23
89.117.211.0/24
89.117.219.0/24
89.117.223.0-89.117.224.255
89.117.238.0/24
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:06:81:67:5e:be:25:7b:66:76:3e:6f:61:a3:9a:e1:e8:27:
69:bc:12:09:15:01:2f:d3:0b:a9:a4:27:49:74:25:d4:ac:e8:
35:d1:ec:49:78:fc:85:3f:95:bf:f0:23:e8:27:a4:30:2c:4c:
59:91:ec:68:ba:17:7a:75:2c:b8:ae:b5:60:30:63:d7:37:62:
0a:14:30:09:71:96:d0:4e:05:1c:14:96:f3:e9:22:b0:38:20:
9d:8e:bd:7b:f4:f6:0b:ca:86:dc:68:a5:85:0d:cb:51:a7:0b:
8a:df:d1:d0:32:14:72:99:86:1c:36:58:1d:cd:79:72:0c:0a:
74:5f:08:b4:47:65:ff:91:cd:2d:b9:b0:61:a0:5e:07:31:19:
89:3c:46:b5:f2:f8:e8:1a:2f:6f:1e:18:dc:03:42:e2:7b:ab:
e3:3b:79:95:e5:fb:ce:1e:55:f9:f0:69:74:02:48:dd:f6:97:
e2:73:c2:b7:d0:64:c1:30:61:dc:99:14:c8:ff:75:50:79:90:
37:a8:b6:70:ef:d2:5d:a0:4b:83:37:ef:27:9c:6e:b8:4f:ce:
27:ef:19:f9:fc:2b:ee:5f:b1:d1:60:e3:36:e7:93:29:cf:00:
57:92:43:41:56:17:f6:b0:b3:83:dc:f6:30:11:44:2f:c5:0b:
59:65:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:55:45 2025 by rpki-client