Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/08nP-AR33f0DBt-3CTsle7fcw0U.roa
File: 08nP-AR33f0DBt-3CTsle7fcw0U.roa (raw, json)
Hash identifier: hjnnL2quK7MRbSgdC71OKxJPL2yglCgGMSLKkqLJLds=
Subject key identifier: D3:C9:CF:F8:04:77:DD:FD:03:06:DF:B7:09:3B:25:7B:B7:DC:C3:45
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019421B23C27563B56D74CFEFE5224759E9C
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/08nP-AR33f0DBt-3CTsle7fcw0U.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44565
IP address blocks: 79.171.16.0/24 maxlen: 24
79.171.17.0/24 maxlen: 24
79.171.18.0/24 maxlen: 24
79.171.19.0/24 maxlen: 24
79.171.20.0/24 maxlen: 24
79.171.21.0/24 maxlen: 24
93.186.112.0/24 maxlen: 24
93.186.113.0/24 maxlen: 24
93.186.114.0/24 maxlen: 24
93.186.115.0/24 maxlen: 24
93.186.116.0/24 maxlen: 24
93.186.117.0/24 maxlen: 24
93.186.118.0/24 maxlen: 24
93.186.119.0/24 maxlen: 24
93.186.120.0/24 maxlen: 24
93.186.121.0/24 maxlen: 24
93.186.122.0/24 maxlen: 24
93.186.123.0/24 maxlen: 24
93.186.124.0/24 maxlen: 24
93.186.126.0/24 maxlen: 24
93.186.127.0/24 maxlen: 24
188.124.1.0/24 maxlen: 24
188.124.2.0/24 maxlen: 24
188.124.4.0/24 maxlen: 24
188.124.6.0/24 maxlen: 24
188.124.7.0/24 maxlen: 24
188.124.8.0/24 maxlen: 24
188.124.9.0/24 maxlen: 24
188.124.10.0/24 maxlen: 24
188.124.11.0/24 maxlen: 24
188.124.12.0/24 maxlen: 24
188.124.13.0/24 maxlen: 24
188.124.14.0/24 maxlen: 24
188.124.15.0/24 maxlen: 24
188.124.16.0/24 maxlen: 24
188.124.17.0/24 maxlen: 24
188.124.18.0/24 maxlen: 24
188.124.19.0/24 maxlen: 24
188.124.20.0/24 maxlen: 24
188.124.21.0/24 maxlen: 24
188.124.22.0/24 maxlen: 24
188.124.23.0/24 maxlen: 24
188.124.24.0/24 maxlen: 24
188.124.25.0/24 maxlen: 24
188.124.26.0/24 maxlen: 24
188.124.27.0/24 maxlen: 24
188.124.28.0/24 maxlen: 24
188.124.29.0/24 maxlen: 24
188.124.30.0/24 maxlen: 24
188.124.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 14:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3c:27:56:3b:56:d7:4c:fe:fe:52:24:75:9e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3c9cff80477ddfd0306dfb7093b257bb7dcc345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:05:b2:87:9b:95:0b:c1:e9:73:b7:f4:49:
87:6a:a4:9b:63:64:a9:bc:d6:d8:8f:51:95:c7:ce:
c5:e6:d8:59:1f:63:c0:09:18:12:9b:9b:c1:d7:d2:
c3:7f:92:1a:6e:7c:1f:b0:23:da:21:10:ef:48:70:
02:e4:b1:f7:f8:ee:6a:a5:1d:ed:8a:d1:97:65:ed:
87:a1:89:83:90:c1:0e:65:61:9c:55:9a:cb:d2:03:
d8:ed:e2:85:a9:f7:7a:25:80:c3:15:63:b1:78:b8:
51:72:bb:fc:4e:8a:f2:fa:43:c9:99:9c:70:a1:79:
ec:a2:3c:88:a6:d1:12:5f:a6:84:a4:4b:3c:f2:0a:
05:e5:26:83:63:bd:61:12:0d:78:f1:6b:1e:08:98:
75:08:6d:9d:44:b8:5f:5f:64:c6:0e:10:1e:74:72:
bf:7b:1c:4a:4d:4d:52:6e:bd:9a:28:66:8d:d0:66:
82:45:f2:c2:9a:91:08:30:ca:a5:77:cb:79:28:db:
26:3b:e4:7a:f2:e4:67:72:71:a8:bd:cf:4d:34:cc:
0d:5b:d9:77:fb:58:1a:52:dd:d9:f9:17:37:15:84:
5b:07:eb:be:fc:c2:16:b6:bc:f8:18:63:a7:63:45:
3e:79:45:69:6a:ae:69:6d:48:9c:75:93:fc:ab:43:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C9:CF:F8:04:77:DD:FD:03:06:DF:B7:09:3B:25:7B:B7:DC:C3:45
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/08nP-AR33f0DBt-3CTsle7fcw0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.16.0-79.171.21.255
93.186.112.0-93.186.124.255
93.186.126.0/23
188.124.1.0-188.124.2.255
188.124.4.0/24
188.124.6.0-188.124.31.255
Signature Algorithm: sha256WithRSAEncryption
41:42:54:1f:03:cd:51:26:3b:37:af:68:5d:ad:8a:8c:36:39:
6c:48:72:46:bb:7e:50:ef:3e:67:ef:c9:22:c7:cc:fe:0e:7c:
1f:f8:c5:4d:cd:1e:1f:b8:bf:35:34:e3:c6:45:dd:98:91:9a:
b3:cc:40:a8:a6:26:c3:94:79:aa:f3:e4:6a:91:71:4c:0c:41:
63:f5:68:31:43:75:a8:b9:39:90:f2:e2:64:6b:24:0b:93:fc:
e3:2b:99:d1:0c:e0:6b:7b:65:1b:4f:3a:ca:b3:e1:78:42:86:
a1:07:39:fe:ec:28:c7:2e:24:6a:42:9a:b3:ae:cd:a4:8e:f5:
8e:c0:e7:c1:86:6f:cd:92:a9:d6:a0:c2:9c:20:d7:72:e7:1f:
b0:b5:83:4c:c9:07:3b:09:03:d0:33:75:31:e4:de:3a:aa:9e:
bc:1d:b6:5a:37:44:3d:6c:55:cc:1a:4f:12:94:87:96:97:a8:
7c:d8:17:e2:0d:62:44:ff:ac:60:a8:02:ef:39:8d:28:ed:6d:
63:c7:70:1f:0e:76:62:0d:47:a0:c5:9e:c9:f0:68:33:95:55:
f7:29:30:d6:11:46:19:9f:51:27:7b:31:78:b6:fb:2b:d4:f5:
88:bb:ea:06:a9:eb:58:b4:10:71:fb:67:b6:e1:e5:2a:ea:50:
9c:1a:cb:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:41 2025 by rpki-client