Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/jjEoZpjzpVpQK83fE4wukwXqOP4.roa
File: jjEoZpjzpVpQK83fE4wukwXqOP4.roa (raw, json)
Hash identifier: 57VrDjt/yLPP89pJd7blmFQg8C308Wta3htkK9lepxo=
Subject key identifier: 8E:31:28:66:98:F3:A5:5A:50:2B:CD:DF:13:8C:2E:93:05:EA:38:FE
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 0194CBD33E871C37C5810689CFD835A9C9C1
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/jjEoZpjzpVpQK83fE4wukwXqOP4.roa
Signing time: Mon 03 Feb 2025 12:40:06 +0000
ROA not before: Mon 03 Feb 2025 12:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31275
IP address blocks: 83.220.64.0/19 maxlen: 19
83.220.64.0/24 maxlen: 24
83.220.65.0/24 maxlen: 24
83.220.66.0/24 maxlen: 24
83.220.67.0/24 maxlen: 24
83.220.68.0/24 maxlen: 24
83.220.69.0/24 maxlen: 24
83.220.70.0/24 maxlen: 24
83.220.71.0/24 maxlen: 24
83.220.72.0/24 maxlen: 24
83.220.73.0/24 maxlen: 24
83.220.74.0/24 maxlen: 24
83.220.75.0/24 maxlen: 24
83.220.76.0/24 maxlen: 24
83.220.77.0/24 maxlen: 24
83.220.78.0/24 maxlen: 24
83.220.79.0/24 maxlen: 24
83.220.80.0/24 maxlen: 24
83.220.81.0/24 maxlen: 24
83.220.82.0/24 maxlen: 24
83.220.83.0/24 maxlen: 24
83.220.84.0/24 maxlen: 24
83.220.85.0/24 maxlen: 24
83.220.86.0/24 maxlen: 24
83.220.87.0/24 maxlen: 24
83.220.88.0/24 maxlen: 24
83.220.89.0/24 maxlen: 24
83.220.90.0/24 maxlen: 24
83.220.91.0/24 maxlen: 24
83.220.92.0/24 maxlen: 24
83.220.93.0/24 maxlen: 24
83.220.94.0/24 maxlen: 24
83.220.95.0/24 maxlen: 24
2a04:e380::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Feb 2025 11:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:d3:3e:87:1c:37:c5:81:06:89:cf:d8:35:a9:c9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Feb 3 12:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e31286698f3a55a502bcddf138c2e9305ea38fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:4e:5e:15:1d:06:da:48:f9:3a:9b:b1:4b:
b6:e8:65:c4:9e:81:c8:38:d7:0e:5a:c9:ee:ff:1c:
25:1b:b3:cd:60:cd:28:6c:b2:50:21:e0:71:6f:55:
7d:b3:79:6c:fd:43:0f:75:7e:d7:e2:cd:52:57:04:
c8:f8:52:b7:f3:38:6e:70:00:96:5a:a1:ed:fd:13:
8b:e8:42:c5:f1:d1:d4:71:3c:a3:7f:b6:61:a3:f8:
e6:5b:a4:7e:57:2d:94:08:63:d1:32:5b:80:04:3d:
a5:b1:1e:e7:57:24:8a:f5:d0:a5:32:80:ca:f4:b2:
d3:6c:08:84:22:ce:c6:2e:60:1b:10:7f:d5:02:05:
95:0a:77:a7:81:7e:3d:2e:1b:ef:e2:9a:ea:d7:dd:
e4:3a:58:ee:c7:eb:b9:c9:7a:3d:22:d7:6d:8f:3b:
67:8f:fa:5b:25:19:ed:dd:f5:cf:32:ed:ba:e5:0a:
c0:47:f5:82:62:4e:56:18:96:62:08:4c:b2:ea:2a:
e3:7d:1d:92:29:d5:36:45:ba:80:07:cc:3d:c2:fd:
71:ef:a8:06:11:51:ca:19:e6:a9:73:6e:0f:82:a1:
24:d1:46:b0:b8:66:ed:c1:75:f7:40:d0:8c:84:7d:
0a:83:c8:fb:9a:0d:72:c5:7a:33:fd:fd:0c:40:9c:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:28:66:98:F3:A5:5A:50:2B:CD:DF:13:8C:2E:93:05:EA:38:FE
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/jjEoZpjzpVpQK83fE4wukwXqOP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.64.0/19
IPv6:
2a04:e380::/29
Signature Algorithm: sha256WithRSAEncryption
b7:32:5e:ac:8d:ae:58:ec:a4:84:a5:d8:c6:88:63:61:45:d8:
c8:b0:01:c8:db:2f:80:62:de:df:83:b9:79:0e:5d:cd:b7:b9:
23:f6:a9:e0:12:9a:72:05:82:55:8c:d0:4a:cc:f7:f5:05:0b:
a0:24:35:f4:7e:dc:4e:6a:c1:b0:a0:0f:53:ae:f3:b6:94:fe:
f5:83:c2:17:ca:ff:dd:e7:80:cc:51:97:a4:48:0b:5c:45:7d:
e5:8c:5b:9c:92:9a:1d:dc:16:9a:b9:18:c7:97:60:ca:71:b6:
b6:53:71:54:ee:ea:05:05:11:54:9c:ac:68:11:5a:16:e1:f4:
27:a0:61:24:2f:a9:2c:11:68:23:4c:73:38:5e:f2:01:7b:52:
d4:65:2f:51:ce:63:d2:de:1c:0d:63:48:c6:10:97:2e:a7:e3:
cc:41:f1:59:a2:4d:78:24:b9:68:9b:a6:07:c7:9c:52:8a:e4:
47:02:4c:9d:07:f7:22:d4:ea:72:4e:0e:0d:1f:52:72:91:dc:
fd:cd:1a:70:e7:47:24:7c:83:a1:30:d9:03:2e:39:c8:38:00:
e9:84:5d:1d:e3:d9:6d:b1:62:c8:4a:a3:fa:55:ba:d0:16:4d:
36:3d:54:cb:d6:15:ec:21:62:8e:fb:74:19:57:94:12:6e:5a:
dd:cf:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:59 2025 by rpki-client