Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/nzEVEweKzqe0AvfNxQhMOK0cCdU.roa
File: nzEVEweKzqe0AvfNxQhMOK0cCdU.roa (raw, json)
Hash identifier: TasP9O7A5n0VS/CF5pmmJcmX7C4gjsNcoQre7BSK5CY=
Subject key identifier: 9F:31:15:13:07:8A:CE:A7:B4:02:F7:CD:C5:08:4C:38:AD:1C:09:D5
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 0194252079723B4DE19D1FB3F7AE6BC50D6E
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/nzEVEweKzqe0AvfNxQhMOK0cCdU.roa
Signing time: Thu 02 Jan 2025 03:47:52 +0000
ROA not before: Thu 02 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8641
IP address blocks: 77.73.24.0/21 maxlen: 21
77.94.160.0/19 maxlen: 19
77.94.175.0/24 maxlen: 24
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.154.0/24 maxlen: 24
81.26.155.0/24 maxlen: 24
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.135.0/24 maxlen: 24
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.143.0/24 maxlen: 24
84.47.144.0/23 maxlen: 23
84.47.147.0/24 maxlen: 24
84.47.150.0/23 maxlen: 32
84.47.152.0/23 maxlen: 23
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.164.0/23 maxlen: 23
84.47.164.0/24 maxlen: 24
84.47.168.0/22 maxlen: 22
84.47.172.0/24 maxlen: 24
84.47.174.0/23 maxlen: 23
84.47.176.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
84.47.181.0/24 maxlen: 24
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
84.47.190.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
85.91.112.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
213.135.64.0/23 maxlen: 23
213.135.67.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
213.135.82.0/23 maxlen: 23
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 31 Jan 2025 14:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:79:72:3b:4d:e1:9d:1f:b3:f7:ae:6b:c5:0d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f311513078acea7b402f7cdc5084c38ad1c09d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:50:03:5f:ec:97:6c:19:8f:5c:75:2f:db:
54:67:73:5d:2a:0c:f0:d6:91:dc:62:d6:35:20:67:
21:ac:7e:2f:29:16:fc:3b:76:64:82:60:c3:69:a7:
ba:21:da:74:db:7c:3f:72:f1:aa:50:02:40:3d:2e:
bf:c6:f8:71:5b:c3:87:b2:29:22:3e:c2:29:89:bc:
95:48:be:16:18:2f:d4:7a:96:ce:41:b6:e4:9d:f6:
7e:4a:3c:9b:37:0e:2d:82:f9:4d:00:2e:f1:90:6f:
7d:c4:50:1d:0e:e4:09:1b:61:72:a5:4c:c1:cd:d6:
0b:24:ae:f1:7d:23:d7:3f:b6:1b:24:b9:81:52:64:
6e:76:f4:47:23:63:63:04:5d:10:73:d3:f5:5e:9a:
ed:82:9d:5b:ad:75:a0:61:39:a0:6c:2f:35:1a:3d:
5b:43:b2:6c:81:f3:7f:da:0d:73:5c:09:42:14:cf:
3e:20:9b:9a:57:9b:fb:57:1e:28:85:70:f7:73:81:
1c:f6:86:55:a7:3f:df:ce:80:10:b5:3a:32:30:c0:
cc:e9:da:b0:0c:29:c5:5b:af:4d:34:a6:4b:e3:8c:
94:42:4c:34:85:7c:26:29:4c:c0:cf:7e:5d:b1:8e:
82:19:55:ec:f6:3f:00:72:08:85:b1:f2:06:3a:00:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:15:13:07:8A:CE:A7:B4:02:F7:CD:C5:08:4C:38:AD:1C:09:D5
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/nzEVEweKzqe0AvfNxQhMOK0cCdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.24.0/21
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.80.0/24
213.135.82.0-213.135.91.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.188.0/22
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
98:d1:0b:9b:e4:63:94:95:3e:6c:47:c7:0d:be:3d:90:e9:c7:
f3:ce:93:03:35:2b:c5:c2:df:9b:c0:20:4d:2e:1c:07:93:d8:
c3:5b:ec:3e:57:ec:25:fa:da:ed:d6:61:1f:6b:b3:04:ce:67:
52:22:80:f5:ce:47:c4:6a:db:ad:03:ab:be:6f:35:b5:b4:69:
0a:26:56:4b:95:30:1d:db:2e:99:fe:44:13:bb:97:76:eb:ca:
6b:7d:f5:1e:25:97:bc:53:a1:15:77:14:c9:0f:93:5b:cc:31:
62:e7:e0:d7:54:1a:41:73:4b:d3:f2:48:fd:dc:d5:f0:08:e9:
9a:14:20:25:3f:a8:38:24:e6:9d:24:5f:b8:e1:88:5a:ad:51:
6d:ee:bc:30:eb:a1:26:6a:86:0a:73:a2:50:2a:50:70:27:aa:
f2:15:87:22:c6:83:8f:33:c1:7a:d0:d1:f5:73:bc:b9:12:80:
69:e6:b1:1a:12:bf:ed:76:21:ca:eb:c2:6d:3a:aa:d4:62:da:
6c:fa:be:f3:8b:86:1a:7a:ed:6b:b4:bd:74:27:0e:69:1b:6b:
a0:e9:0c:d3:f9:31:e0:55:bc:8b:57:e0:b0:ec:4c:c6:19:9c:
41:21:9b:40:ba:ba:b7:36:1b:7b:d6:bf:a6:7d:ba:48:57:a0:
fe:94:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:24:16 2025 by rpki-client