Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/61zW6_7JmqTD0Fwu6iD4QswwKBk.roa
File: 61zW6_7JmqTD0Fwu6iD4QswwKBk.roa (raw, json)
Hash identifier: r9MmaKRjGxSxDkD2DVy4arYtvDN24GOL1IwQVY3bjKg=
Subject key identifier: EB:5C:D6:EB:FE:C9:9A:A4:C3:D0:5C:2E:EA:20:F8:42:CC:30:28:19
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195624406F5998BD4C4947D7F1157AC3323
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/61zW6_7JmqTD0Fwu6iD4QswwKBk.roa
Signing time: Tue 04 Mar 2025 17:46:20 +0000
ROA not before: Tue 04 Mar 2025 17:46:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.168.126.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.88.0/24 maxlen: 24
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 13:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:62:44:06:f5:99:8b:d4:c4:94:7d:7f:11:57:ac:33:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 4 17:46:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb5cd6ebfec99aa4c3d05c2eea20f842cc302819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:09:04:fc:97:61:b5:53:aa:4e:43:1e:84:
fd:01:e3:d9:b3:f3:90:c8:6a:76:d7:5c:3c:ff:24:
00:d5:01:37:5b:b1:9d:51:8b:84:73:c8:d3:9a:02:
a5:a1:58:45:c0:9f:c3:95:8b:c5:fb:a1:75:5b:0e:
b0:4a:16:58:76:35:93:db:84:92:8c:60:39:c7:d4:
11:3f:59:c7:f9:16:5d:83:17:7c:ef:88:ac:bb:45:
54:cd:6d:00:2e:66:86:e3:2a:03:52:0b:a7:0b:31:
3b:9c:a5:c8:c0:05:79:1b:bd:10:f5:14:78:b6:67:
65:d5:9b:69:0e:28:4d:3a:54:5f:7a:3b:88:ec:1d:
7c:15:f8:21:92:3d:c3:f8:a5:33:61:c0:47:f1:94:
36:3c:94:40:00:6d:62:cc:bc:bb:ef:1d:01:f0:ba:
3f:e4:67:49:12:20:52:25:d0:fa:b6:dd:82:28:08:
24:3f:49:1f:06:6f:c9:db:60:80:06:72:5d:41:fb:
c9:bb:a4:16:be:df:ff:d4:b5:c7:a9:23:84:e1:89:
29:db:c5:62:18:6a:a7:65:29:4a:d4:22:7e:37:fd:
29:10:87:78:b3:bc:5a:d6:10:53:73:55:22:4b:b9:
26:44:6d:d6:c5:fe:b0:ac:08:4b:38:e6:35:65:a1:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5C:D6:EB:FE:C9:9A:A4:C3:D0:5C:2E:EA:20:F8:42:CC:30:28:19
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/61zW6_7JmqTD0Fwu6iD4QswwKBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.226.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
17:b8:53:51:43:16:9b:b1:3e:52:0b:a0:ca:47:35:02:95:f9:
1b:11:17:0c:43:64:f4:72:13:76:d2:03:4e:d9:07:fd:b9:48:
00:e8:46:49:1d:66:8a:6c:fe:01:e5:c3:af:44:66:1a:c4:f1:
d6:be:38:2c:c4:b4:79:69:17:fe:6c:d5:7e:2a:2f:ce:2b:fb:
c7:96:c9:c2:bf:24:a8:da:81:d0:6d:c5:a4:4a:4b:e3:50:36:
75:99:35:bb:e2:fe:4b:a2:a6:2b:7e:96:05:21:d6:36:d0:47:
73:56:13:0d:e3:21:63:bd:1b:c7:02:3a:cf:01:60:f3:7c:14:
b1:96:91:20:d4:68:f6:ba:30:10:00:82:03:f0:0d:2c:5c:6a:
ce:9b:06:71:98:88:0a:05:c8:57:d3:69:c9:26:8d:d1:eb:bf:
07:b2:e2:d4:4e:16:55:a7:82:4e:06:70:b0:37:2e:17:56:98:
fd:0f:ec:e4:d6:d3:01:d1:87:26:ed:7f:78:37:cf:28:04:8c:
cd:f0:b1:18:b2:a2:f7:ee:02:d4:c5:11:80:6d:4f:a7:df:0e:
6e:0d:5d:36:b1:59:7d:c1:55:b6:32:36:9c:df:b1:c8:42:9e:
ef:05:6b:02:f1:00:9f:23:f0:e8:85:a2:9f:1f:b6:73:27:ff:
37:10:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:58 2025 by rpki-client