Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/J8umerTXGPArg89yYebB8zp3XPI.roa
File: J8umerTXGPArg89yYebB8zp3XPI.roa (raw, json)
Hash identifier: w7zBPUg/Quz5JEobich0xXKYsIVFIN6N2wDlRqd9l2I=
Subject key identifier: 27:CB:A6:7A:B4:D7:18:F0:2B:83:CF:72:61:E6:C1:F3:3A:77:5C:F2
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 019132292B780970D804DA8E2EED9CF3DEBE
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/J8umerTXGPArg89yYebB8zp3XPI.roa
Signing time: Thu 08 Aug 2024 13:24:04 +0000
ROA not before: Thu 08 Aug 2024 13:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5385
IP address blocks: 80.75.224.0/20 maxlen: 20
194.183.128.0/19 maxlen: 19
194.183.128.0/24 maxlen: 24
194.183.129.0/24 maxlen: 24
194.183.130.0/24 maxlen: 24
194.183.131.0/24 maxlen: 24
194.183.132.0/24 maxlen: 24
194.183.133.0/24 maxlen: 24
194.183.136.0/24 maxlen: 24
194.183.137.0/24 maxlen: 24
194.183.138.0/24 maxlen: 24
194.183.140.0/24 maxlen: 24
194.183.143.0/24 maxlen: 24
194.183.146.0/24 maxlen: 24
194.183.147.0/24 maxlen: 24
194.183.148.0/24 maxlen: 24
194.183.151.0/24 maxlen: 24
194.183.152.0/24 maxlen: 24
194.183.153.0/24 maxlen: 24
194.208.0.0/17 maxlen: 17
194.208.1.0/24 maxlen: 24
194.208.7.0/24 maxlen: 24
194.208.10.0/24 maxlen: 24
194.208.11.0/24 maxlen: 24
194.208.12.0/24 maxlen: 24
194.208.13.0/24 maxlen: 24
194.208.15.0/24 maxlen: 24
194.208.17.0/24 maxlen: 24
194.208.18.0/24 maxlen: 24
194.208.23.0/24 maxlen: 24
194.208.25.0/24 maxlen: 24
194.208.40.0/24 maxlen: 24
194.208.41.0/24 maxlen: 24
194.208.42.0/24 maxlen: 24
194.208.43.0/24 maxlen: 24
194.208.45.0/24 maxlen: 24
194.208.46.0/24 maxlen: 24
194.208.49.0/24 maxlen: 24
194.208.51.0/24 maxlen: 24
194.208.52.0/24 maxlen: 24
194.208.56.0/24 maxlen: 24
194.208.60.0/24 maxlen: 24
194.208.61.0/24 maxlen: 24
194.208.62.0/24 maxlen: 24
194.208.63.0/24 maxlen: 24
194.208.64.0/24 maxlen: 24
194.208.68.0/24 maxlen: 24
194.208.72.0/24 maxlen: 24
194.208.74.0/24 maxlen: 24
194.208.76.0/24 maxlen: 24
194.208.77.0/24 maxlen: 24
194.208.78.0/24 maxlen: 24
194.208.79.0/24 maxlen: 24
194.208.80.0/24 maxlen: 24
194.208.81.0/24 maxlen: 24
194.208.82.0/24 maxlen: 24
194.208.83.0/24 maxlen: 24
194.208.89.0/24 maxlen: 24
194.208.92.0/24 maxlen: 24
194.208.93.0/24 maxlen: 24
194.208.94.0/24 maxlen: 24
194.208.96.0/23 maxlen: 23
194.208.102.0/24 maxlen: 24
194.208.104.0/24 maxlen: 24
194.208.105.0/24 maxlen: 24
194.208.107.0/24 maxlen: 24
194.208.108.0/24 maxlen: 24
194.208.116.0/24 maxlen: 24
194.208.117.0/24 maxlen: 24
194.208.120.0/24 maxlen: 24
194.208.121.0/24 maxlen: 24
194.208.127.0/24 maxlen: 24
194.208.160.0/20 maxlen: 20
194.208.184.0/21 maxlen: 21
194.208.186.0/24 maxlen: 24
194.208.187.0/24 maxlen: 24
194.208.192.0/18 maxlen: 18
194.208.207.0/24 maxlen: 24
194.208.243.0/24 maxlen: 24
194.208.245.0/24 maxlen: 24
2001:af8::/32 maxlen: 32
2001:af8:3::/48 maxlen: 48
2001:af8:6106::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Aug 2024 14:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:29:2b:78:09:70:d8:04:da:8e:2e:ed:9c:f3:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Aug 8 13:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27cba67ab4d718f02b83cf7261e6c1f33a775cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:23:f3:24:b0:b2:a1:74:5e:17:0f:1e:c2:
d5:28:ea:d2:00:56:00:8a:90:69:ff:06:7e:88:26:
98:20:c6:7e:82:49:81:b9:5f:35:4c:bb:74:75:71:
7e:51:9a:60:25:c0:f9:9e:e8:8c:70:69:80:34:4b:
4c:ab:73:3d:91:01:4b:4c:f8:69:56:6c:7a:44:52:
26:c1:de:83:da:0a:c3:dd:b3:c2:ed:36:f2:74:3e:
9d:81:4b:df:60:d9:b4:a1:ae:4b:ed:3c:6c:2e:e5:
f0:52:82:55:a4:4b:e0:f5:e1:59:ba:4e:9e:cd:72:
e0:81:d9:1c:db:75:81:a4:77:54:c9:36:82:07:e4:
3e:9c:24:41:eb:ba:c2:51:c6:67:bc:27:d8:cd:95:
ce:08:43:da:69:86:8f:a6:2d:55:0c:ba:df:e5:c9:
35:9b:fc:86:cf:60:99:b7:2f:3f:8c:61:42:8e:99:
74:7d:f5:e8:e7:cf:6d:bf:bd:c9:48:17:2c:38:17:
ff:be:4c:f4:c9:94:25:c8:1c:10:d2:ef:29:4d:ca:
8f:97:d1:fb:86:de:e7:cd:c5:1f:63:e9:bd:09:17:
47:7d:42:36:b0:c1:72:cf:5e:dd:43:1c:57:f6:1c:
50:56:f3:7b:1b:e5:06:0f:7b:11:f1:c0:b0:71:c2:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CB:A6:7A:B4:D7:18:F0:2B:83:CF:72:61:E6:C1:F3:3A:77:5C:F2
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/J8umerTXGPArg89yYebB8zp3XPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.224.0/20
194.183.128.0/19
194.208.0.0/17
194.208.160.0/20
194.208.184.0-194.208.255.255
IPv6:
2001:af8::/32
Signature Algorithm: sha256WithRSAEncryption
7c:fb:8c:65:2a:1f:a2:4b:55:68:92:81:b9:68:54:04:0c:3b:
9e:68:a5:8b:45:61:fe:49:aa:d6:7a:74:cd:40:70:92:27:0c:
ae:8d:0a:80:42:e4:46:15:3a:af:a8:dd:61:9d:2f:d8:87:ca:
ee:3c:8f:bb:5d:d0:e1:97:e8:e9:40:4a:44:83:ea:7c:ad:05:
29:c2:15:5c:76:97:2e:6c:b3:db:1e:44:5e:a4:6b:05:f1:77:
73:9f:fc:94:b8:d0:c0:be:41:c8:66:12:99:46:6a:00:67:a9:
3b:3e:06:47:0b:3f:d7:d6:75:6a:e8:32:06:81:aa:20:41:9e:
78:a0:78:31:01:5b:09:77:15:b5:28:e3:d6:15:87:e1:d9:f4:
6c:4d:13:a3:4c:23:dd:cb:fb:ce:3d:1e:6c:97:94:97:ee:90:
de:87:ef:e8:5c:ba:b5:d7:7e:3f:cf:38:07:73:1c:05:41:be:
4f:da:c9:b5:82:c3:a1:3c:4e:ae:9d:e8:52:29:64:58:ae:8b:
a9:ef:40:69:69:6b:9d:7c:34:35:1a:fb:fe:65:38:dc:0a:59:
f2:ec:36:ae:27:6b:00:99:de:92:90:e1:44:8f:4a:59:80:fd:
58:71:c7:cd:9d:75:d0:4c:5c:19:08:ac:45:42:4a:57:76:87:
57:09:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:06:10 2025 by rpki-client