Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/8pkw39WVx75rCH8Ng8p8-CpDeyg.roa
File: 8pkw39WVx75rCH8Ng8p8-CpDeyg.roa (raw, json)
Hash identifier: ocGKpEYkyuUlONa/tyGrNBW3iIUZ6L6pIkDwbyTso+o=
Subject key identifier: F2:99:30:DF:D5:95:C7:BE:6B:08:7F:0D:83:CA:7C:F8:2A:43:7B:28
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01936F5965CF8A690262834C036D341A8D45
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/8pkw39WVx75rCH8Ng8p8-CpDeyg.roa
Signing time: Wed 27 Nov 2024 20:39:09 +0000
ROA not before: Wed 27 Nov 2024 20:39:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35042
IP address blocks: 88.214.25.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
185.55.240.0/22 maxlen: 22
193.24.208.0/22 maxlen: 22
194.24.160.0/24 maxlen: 24
2a00:1910::/32 maxlen: 32
2a00:1911::/32 maxlen: 32
2a00:1912::/32 maxlen: 32
2a09:8700::/32 maxlen: 32
2a12:5e41::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6f:59:65:cf:8a:69:02:62:83:4c:03:6d:34:1a:8d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Nov 27 20:39:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f29930dfd595c7be6b087f0d83ca7cf82a437b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:a3:23:77:c9:73:be:03:6e:0f:ec:9f:38:
89:91:c7:c0:35:76:73:5a:40:cc:99:77:ea:2a:47:
ef:f4:a5:d0:79:6a:ed:72:a8:5d:cc:da:db:db:24:
09:67:d1:0a:62:08:84:4f:4c:eb:f7:0b:91:de:34:
1a:52:7b:f5:eb:cf:08:83:be:ea:2f:1b:c3:88:93:
49:e0:b6:60:db:d2:56:32:b3:ca:89:03:79:8e:4d:
56:ab:4e:67:4a:4f:45:5a:9b:48:5d:36:36:eb:4b:
93:7a:ab:e5:4c:b7:91:82:0f:c0:e9:da:ca:9c:a2:
a5:7d:7d:b5:54:4c:00:ab:6e:7d:7e:64:a4:14:cc:
94:59:28:95:19:4e:b5:09:2b:f9:13:a7:8e:bc:ff:
d6:4a:d3:89:f9:96:90:60:6f:92:5e:26:16:30:56:
e1:c4:c3:4a:e7:23:c0:43:aa:25:f5:ed:af:84:28:
b8:63:45:4c:79:5f:73:8e:45:0a:13:1e:ec:09:04:
5a:e4:45:5d:18:f7:4e:9e:a1:06:5c:97:f0:3d:13:
b1:93:c3:b4:71:44:37:a4:0e:68:7f:16:d6:96:0e:
cf:33:e8:f3:e9:14:73:47:11:7f:19:39:88:1b:18:
4d:84:cd:ac:5c:7d:27:d8:ab:f5:bc:bb:2a:56:36:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:30:DF:D5:95:C7:BE:6B:08:7F:0D:83:CA:7C:F8:2A:43:7B:28
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/8pkw39WVx75rCH8Ng8p8-CpDeyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
91.228.101.0/24
185.55.240.0/22
193.24.208.0/22
194.24.160.0/24
IPv6:
2a00:1910::-2a00:1912:ffff:ffff:ffff:ffff:ffff:ffff
2a09:8700::/32
2a12:5e41::/32
Signature Algorithm: sha256WithRSAEncryption
ac:c1:de:d6:5b:ee:a1:4f:d5:7b:46:25:8e:e7:93:e2:39:4e:
a9:b1:89:4f:09:f6:e2:ed:95:ef:3e:e2:4e:13:b5:79:78:28:
3a:cc:75:ea:e5:37:52:fb:f8:84:77:a3:c3:00:99:ec:58:62:
0b:51:c0:ff:b4:69:b9:3b:f7:8f:ca:c5:29:9f:8e:f8:b1:b3:
8d:2c:06:75:62:00:a4:70:f7:ae:72:27:0d:30:6f:3d:f8:96:
33:cb:28:af:92:2d:ad:0d:26:88:2d:28:0d:48:24:e1:30:93:
14:c8:d2:83:06:49:f9:9c:1c:da:72:dc:4c:97:d3:38:89:d6:
c7:fa:fe:38:ff:03:23:23:5a:58:74:16:c8:c8:c6:5b:e4:bc:
37:fe:b6:89:1d:d7:14:86:67:fa:72:87:33:fe:d9:e5:9f:24:
d5:81:97:3b:76:71:c0:18:88:e8:b6:b8:29:c4:8f:3d:55:eb:
38:93:98:80:43:fb:75:7e:39:18:31:d3:c1:fe:6f:10:39:04:
23:67:4a:62:7a:4e:eb:bc:21:64:be:c7:70:94:f4:16:a5:59:
c7:1a:15:72:d3:a2:3f:43:6d:33:cf:b7:7c:fd:a6:84:ff:99:
da:4a:8c:4b:6c:52:43:f3:65:ae:b4:4f:8b:88:b3:60:3f:de:
32:43:0f:ea
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZNvWWXPimkCYoNMA200Go1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1
ODg4MjcwHhcNMjQxMTI3MjAzOTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjk5MzBkZmQ1OTVjN2JlNmIwODdmMGQ4M2NhN2NmODJhNDM3YjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPijI3fJc74Dbg/snziJkcfANXZz
WkDMmXfqKkfv9KXQeWrtcqhdzNrb2yQJZ9EKYgiET0zr9wuR3jQaUnv1688Ig77q
LxvDiJNJ4LZg29JWMrPKiQN5jk1Wq05nSk9FWptIXTY260uTeqvlTLeRgg/A6drK
nKKlfX21VEwAq259fmSkFMyUWSiVGU61CSv5E6eOvP/WStOJ+ZaQYG+SXiYWMFbh
xMNK5yPAQ6ol9e2vhCi4Y0VMeV9zjkUKEx7sCQRa5EVdGPdOnqEGXJfwPROxk8O0
cUQ3pA5ofxbWlg7PM+jz6RRzRxF/GTmIGxhNhM2sXH0n2Kv1vLsqVjbkgwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFPKZMN/Vlce+awh/DYPKfPgqQ3soMB8GA1UdIwQY
MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct
OGNmNDFjYWZkY2UyLzEvOHBrdzM5V1Z4NzVyQ0g4Tmc4cDgtQ3BEZXlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy
LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAkBAIAATAeAwQAWNYZAwQA
W+RlAwQCuTfwAwQCwRjQAwQAwhigMCQEAgACMB4wDgMFBCoAGRADBQAqABkSAwUA
KgmHAAMFACoSXkEwDQYJKoZIhvcNAQELBQADggEBAKzB3tZb7qFP1XtGJY7nk+I5
TqmxiU8J9uLtle8+4k4TtXl4KDrMderlN1L7+IR3o8MAmexYYgtRwP+0abk794/K
xSmfjvixs40sBnViAKRw965yJw0wbz34ljPLKK+SLa0NJogtKA1IJOEwkxTI0oMG
SfmcHNpy3EyX0ziJ1sf6/jj/AyMjWlh0FsjIxlvkvDf+tokd1xSGZ/pyhzP+2eWf
JNWBlzt2ccAYiOi2uCnEjz1V6ziTmIBD+3V+ORgx08H+bxA5BCNnSmJ6Tuu8IWS+
x3CU9BalWccaFXLToj9DbTPPt3z9poT/mdpKjEtsUkPzZa60T4uIs2A/3jJDD+o=
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:18:42 2025 by rpki-client