Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8PzXao0Qi2axRPu29psV8svzoOg.roa
File: 8PzXao0Qi2axRPu29psV8svzoOg.roa (raw, json)
Hash identifier: F4o3Hsh/NQWYtlhme/2uDgKO3FMIH42Fr9uux75Zbqk=
Subject key identifier: F0:FC:D7:6A:8D:10:8B:66:B1:44:FB:B6:F6:9B:15:F2:CB:F3:A0:E8
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01912CBD430815910A749227748FCF90667C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8PzXao0Qi2axRPu29psV8svzoOg.roa
Signing time: Wed 07 Aug 2024 12:08:06 +0000
ROA not before: Wed 07 Aug 2024 12:08:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210906
IP address blocks: 85.254.2.0/24 maxlen: 24
85.254.4.0/24 maxlen: 24
85.254.7.0/24 maxlen: 24
85.254.30.0/24 maxlen: 24
85.254.40.0/24 maxlen: 24
85.254.42.0/23 maxlen: 23
85.254.51.0/24 maxlen: 24
85.254.59.0/24 maxlen: 24
85.254.64.0/23 maxlen: 23
85.254.76.0/22 maxlen: 22
85.254.84.0/23 maxlen: 23
85.254.103.0/24 maxlen: 24
85.254.112.0/22 maxlen: 22
85.254.124.0/23 maxlen: 23
85.254.126.0/24 maxlen: 24
85.254.128.0/22 maxlen: 22
85.254.134.0/24 maxlen: 24
85.254.137.0/24 maxlen: 24
85.254.138.0/23 maxlen: 23
85.254.140.0/24 maxlen: 24
85.254.174.0/23 maxlen: 23
85.254.180.0/23 maxlen: 23
159.148.26.0/24 maxlen: 24
159.148.54.0/24 maxlen: 24
159.148.62.0/24 maxlen: 24
159.148.66.0/24 maxlen: 24
159.148.126.0/24 maxlen: 24
159.148.128.0/24 maxlen: 24
159.148.130.0/24 maxlen: 24
159.148.158.0/24 maxlen: 24
159.148.163.0/24 maxlen: 24
159.148.166.0/23 maxlen: 23
159.148.179.0/24 maxlen: 24
159.148.180.0/24 maxlen: 24
159.148.204.0/24 maxlen: 24
159.148.216.0/24 maxlen: 24
159.148.218.0/24 maxlen: 24
159.148.234.0/24 maxlen: 24
159.148.241.0/24 maxlen: 24
159.148.246.0/23 maxlen: 23
159.148.248.0/24 maxlen: 24
185.7.236.0/24 maxlen: 24
185.27.94.0/24 maxlen: 24
185.47.92.0/22 maxlen: 22
185.211.96.0/22 maxlen: 22
217.69.121.0/24 maxlen: 24
217.69.125.0/24 maxlen: 24
217.69.126.0/24 maxlen: 24
217.69.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 12:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:bd:43:08:15:91:0a:74:92:27:74:8f:cf:90:66:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 7 12:08:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0fcd76a8d108b66b144fbb6f69b15f2cbf3a0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:56:87:1a:8d:48:7f:e5:c4:25:95:61:56:
51:31:aa:06:dc:2f:fa:4f:3c:30:a7:85:5b:d1:66:
a7:d8:25:0e:e5:8d:4c:31:7d:14:a5:98:ff:ec:c8:
b6:08:1d:2f:00:8c:a4:d2:4e:ac:63:6c:fe:e8:ad:
2e:e0:0c:03:4f:e6:7f:2f:21:10:16:87:f2:e5:a6:
90:c1:01:be:e4:3f:e9:0a:40:fd:a5:4c:e7:49:c0:
12:c5:55:0d:05:dd:17:62:8a:29:cd:a1:95:83:dc:
a2:59:1c:49:c9:f2:99:42:24:89:4e:59:93:9e:43:
da:e8:3c:fc:bf:f5:73:4f:2b:f7:2e:d2:5d:a8:1a:
22:81:60:de:f4:19:06:3c:8e:3f:0c:91:ab:7f:05:
31:58:18:ea:5f:1f:da:f8:ef:99:78:d8:dc:86:a5:
b2:ad:24:d9:ba:cb:18:e4:dc:2e:13:c6:06:7e:e8:
fc:4e:a3:e7:7c:99:a2:1e:89:b6:6c:f2:62:d4:25:
4a:eb:65:ee:2c:55:60:3a:2d:07:11:b3:05:ae:00:
3c:16:34:f0:5d:ab:e1:66:21:00:d6:34:5e:6d:60:
00:fa:06:49:d2:b8:31:6a:74:7a:d1:75:9e:c5:7e:
2b:be:24:c4:8e:f6:ef:75:8e:ec:fc:6e:3b:fa:a3:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:D7:6A:8D:10:8B:66:B1:44:FB:B6:F6:9B:15:F2:CB:F3:A0:E8
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8PzXao0Qi2axRPu29psV8svzoOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.2.0/24
85.254.4.0/24
85.254.7.0/24
85.254.30.0/24
85.254.40.0/24
85.254.42.0/23
85.254.51.0/24
85.254.59.0/24
85.254.64.0/23
85.254.76.0/22
85.254.84.0/23
85.254.103.0/24
85.254.112.0/22
85.254.124.0-85.254.126.255
85.254.128.0/22
85.254.134.0/24
85.254.137.0-85.254.140.255
85.254.174.0/23
85.254.180.0/23
159.148.26.0/24
159.148.54.0/24
159.148.62.0/24
159.148.66.0/24
159.148.126.0/24
159.148.128.0/24
159.148.130.0/24
159.148.158.0/24
159.148.163.0/24
159.148.166.0/23
159.148.179.0-159.148.180.255
159.148.204.0/24
159.148.216.0/24
159.148.218.0/24
159.148.234.0/24
159.148.241.0/24
159.148.246.0-159.148.248.255
185.7.236.0/24
185.27.94.0/24
185.47.92.0/22
185.211.96.0/22
217.69.121.0/24
217.69.125.0-217.69.127.255
Signature Algorithm: sha256WithRSAEncryption
57:af:58:4c:a1:f6:7c:5a:1b:03:f5:59:75:c1:e3:25:79:85:
2d:a9:5b:02:f1:7f:36:d9:ef:ca:c7:cb:c7:7f:f3:70:bb:ed:
4d:23:ff:a6:7f:2d:8e:68:78:e5:c1:62:ef:24:55:39:e5:9f:
34:e9:d7:1d:8f:cc:11:6c:30:5b:8d:23:09:b6:26:a2:53:a8:
c2:60:43:25:25:56:90:b0:82:a5:33:d9:3d:f4:dc:a0:bd:57:
fc:f4:90:68:67:b5:fc:7a:9a:e3:74:97:c2:90:bb:3e:5e:e5:
53:86:89:4c:c8:07:e1:3f:84:05:03:b0:da:7a:cd:23:61:58:
c7:72:ea:2c:6b:cf:18:2d:03:eb:18:f7:35:eb:05:ea:b1:64:
1c:6e:66:c8:22:a3:34:ab:ee:17:90:03:6a:b2:f7:3b:da:7b:
31:3d:ca:7c:d3:5d:23:78:90:0a:7b:3a:4d:94:06:10:15:9c:
7f:c8:25:a0:a3:10:92:ac:a6:78:f0:ca:21:e9:d1:1f:db:e3:
3d:48:b9:27:c1:98:a4:6f:3f:ff:8a:13:af:a6:13:70:e5:28:
6c:19:95:77:3b:2a:a9:e6:58:0b:dc:32:59:c8:6a:ca:fa:3d:
31:a9:ae:b0:01:bc:9e:b6:c2:57:1f:00:41:fe:a4:4c:4e:08:
0b:21:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:56 2025 by rpki-client