Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/8Zq0QUfvP7q6OjiO9Wt6Qt6J2GE.roa
File: 8Zq0QUfvP7q6OjiO9Wt6Qt6J2GE.roa (raw, json)
Hash identifier: MyhysW3Dbhy1v+yGBtLCUBdYbe/P+c6hET4JP0zxjBI=
Subject key identifier: F1:9A:B4:41:47:EF:3F:BA:BA:3A:38:8E:F5:6B:7A:42:DE:89:D8:61
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 019550B3DDC4C0E1D75F55BBE31BF4115EFF
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/8Zq0QUfvP7q6OjiO9Wt6Qt6J2GE.roa
Signing time: Sat 01 Mar 2025 07:55:19 +0000
ROA not before: Sat 01 Mar 2025 07:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28924
IP address blocks: 195.90.98.0/24 maxlen: 24
195.90.99.0/24 maxlen: 24
195.90.114.0/23 maxlen: 23
195.90.114.0/24 maxlen: 24
212.52.160.0/19 maxlen: 19
212.52.160.0/22 maxlen: 22
212.52.160.0/24 maxlen: 24
212.52.161.0/24 maxlen: 24
212.52.162.0/24 maxlen: 24
212.52.163.0/24 maxlen: 24
212.52.164.0/24 maxlen: 24
212.52.165.0/24 maxlen: 24
212.52.166.0/24 maxlen: 24
212.52.167.0/24 maxlen: 24
212.52.168.0/22 maxlen: 22
212.52.168.0/24 maxlen: 24
212.52.169.0/24 maxlen: 24
212.52.170.0/24 maxlen: 24
212.52.171.0/24 maxlen: 24
212.52.172.0/24 maxlen: 24
212.52.173.0/24 maxlen: 24
212.52.174.0/24 maxlen: 24
212.52.175.0/24 maxlen: 24
212.52.176.0/24 maxlen: 24
212.52.177.0/24 maxlen: 24
212.52.178.0/24 maxlen: 24
212.52.179.0/24 maxlen: 24
212.52.180.0/24 maxlen: 24
212.52.181.0/24 maxlen: 24
212.52.182.0/24 maxlen: 24
212.52.183.0/24 maxlen: 24
212.52.184.0/24 maxlen: 24
212.52.185.0/24 maxlen: 24
212.52.186.0/24 maxlen: 24
212.52.187.0/24 maxlen: 24
212.52.188.0/24 maxlen: 24
212.52.189.0/24 maxlen: 24
212.52.190.0/24 maxlen: 24
212.52.191.0/24 maxlen: 24
2a01:7d80::/36 maxlen: 36
2a01:7d80:999::/48 maxlen: 48
2a01:7d80:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 21 Mar 2025 21:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:50:b3:dd:c4:c0:e1:d7:5f:55:bb:e3:1b:f4:11:5e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Mar 1 07:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f19ab44147ef3fbaba3a388ef56b7a42de89d861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:48:bf:9e:d6:77:aa:ec:a6:7f:9e:41:e7:
83:9f:e9:a4:c1:cc:21:7c:ab:60:c1:cb:75:9d:75:
e1:7e:cc:93:a2:64:6b:28:e0:c4:3a:79:82:df:b6:
cd:b7:2c:51:6e:5d:f5:c6:bf:6f:cf:77:79:8e:98:
5a:ad:e7:de:4a:25:e7:ad:93:5c:ea:4f:d6:ca:f8:
48:2e:a3:d1:6f:90:90:7f:89:10:37:52:88:b2:63:
d6:1c:e7:a4:83:ec:1e:93:63:23:7d:ad:fe:cf:fa:
eb:90:6c:bb:5e:1c:b6:d2:d6:ef:8d:9f:74:73:74:
0f:37:19:b0:9b:a6:56:d2:fe:e2:8a:fb:da:2a:ae:
b5:a5:2b:9d:d5:5c:93:86:16:8d:eb:bf:27:a2:d8:
36:b4:7f:6c:65:3b:c8:90:47:68:f0:8f:0d:46:a8:
c8:93:9c:ae:15:2d:2d:e3:b2:b9:70:fc:61:0d:6b:
e4:d7:21:12:ef:f4:e0:8d:6b:67:d4:6e:3c:8b:f7:
29:03:0d:ec:1e:f2:78:87:35:91:35:95:82:c3:ee:
13:f4:84:a0:50:bc:a0:56:ea:e9:ff:08:a4:0b:a3:
93:81:ed:7c:2a:4e:96:fe:42:3e:f1:ef:68:61:35:
4d:81:7b:df:49:8d:61:32:cf:eb:36:b0:cb:45:e5:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:B4:41:47:EF:3F:BA:BA:3A:38:8E:F5:6B:7A:42:DE:89:D8:61
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/8Zq0QUfvP7q6OjiO9Wt6Qt6J2GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/23
195.90.114.0/23
212.52.160.0/19
IPv6:
2a01:7d80::/35
Signature Algorithm: sha256WithRSAEncryption
24:92:f7:d0:2f:f6:39:4b:f2:4f:7c:20:f0:05:27:92:f6:ea:
62:2f:32:0d:9a:0f:f4:fb:14:1f:1a:ca:9d:99:19:f5:21:12:
2d:4d:cc:8e:73:7f:71:7f:c4:c9:fe:e6:06:3d:f6:63:b2:0d:
f8:06:6c:62:c7:d3:25:43:ec:e8:4c:39:68:19:4d:8a:02:47:
94:9c:b1:6b:5c:be:a5:c9:50:99:eb:1b:38:64:0b:bf:de:fb:
e0:ca:59:b0:23:3d:79:07:12:1f:bf:91:88:a3:26:16:f2:98:
14:fd:89:f7:ae:0a:55:83:09:25:74:43:d9:75:75:e3:84:02:
b4:99:fe:30:c3:3a:52:92:f3:c6:27:50:0f:39:1c:c6:95:cd:
26:05:c9:a8:91:4c:b2:d7:4b:a1:57:e2:31:de:e7:e4:00:6c:
18:7b:56:5b:11:eb:26:9b:5f:c0:6e:af:da:1e:c1:26:f8:61:
ab:79:32:be:a5:b3:0c:62:e7:05:f7:9c:95:56:d7:ba:6f:93:
eb:04:b4:4d:5e:e4:f7:6c:9f:3f:96:29:df:0e:ae:71:ac:76:
d6:dd:ca:ae:76:38:05:6d:ef:f6:40:99:d0:ba:4a:33:d7:e3:
73:de:94:8c:95:e1:07:c8:13:8d:d6:41:41:46:97:b4:99:1a:
06:07:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:11 2025 by rpki-client