Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JOq_DCwuY3yfzzO-dJy7HVGvB_0.roa
File: JOq_DCwuY3yfzzO-dJy7HVGvB_0.roa (raw, json)
Hash identifier: 2PnFDva280zU8V83/VPCQbPBHcnh26ppOz+V462NqR0=
Subject key identifier: 24:EA:BF:0C:2C:2E:63:7C:9F:CF:33:BE:74:9C:BB:1D:51:AF:07:FD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195427B794BBD3FBAACB9B707BA3A50231E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JOq_DCwuY3yfzzO-dJy7HVGvB_0.roa
Signing time: Wed 26 Feb 2025 13:39:03 +0000
ROA not before: Wed 26 Feb 2025 13:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 14:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:7b:79:4b:bd:3f:ba:ac:b9:b7:07:ba:3a:50:23:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 26 13:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24eabf0c2c2e637c9fcf33be749cbb1d51af07fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:a7:4e:10:98:54:4c:29:ec:22:26:cd:d1:
8e:14:7d:5d:42:57:c7:1e:b7:0c:fb:a9:30:05:bf:
a8:8a:95:7e:26:5a:7e:8a:7a:8f:f2:a1:39:b5:87:
c2:f7:cf:e9:4c:4e:de:95:2b:68:9c:37:37:21:7f:
9f:6a:1a:99:ee:40:e0:ef:81:d6:1a:bc:55:d3:ee:
02:b2:4b:f3:84:78:56:fb:57:b0:c1:f5:19:37:95:
85:f1:38:6f:ed:02:2c:5c:41:2c:ce:c6:97:d8:93:
37:0a:46:e8:19:c9:a1:d4:0b:af:98:06:4f:4b:6c:
63:b2:89:df:0b:d4:af:11:d7:7c:75:49:cf:db:68:
f3:8c:47:45:4e:d4:a3:50:69:c2:47:77:88:10:f7:
c8:b8:f4:a8:4f:74:c9:da:54:f2:49:a0:36:61:56:
b5:71:5a:ca:0f:d5:db:5c:8e:de:20:f6:23:0e:ee:
e2:63:67:c9:36:21:85:cf:ad:be:27:85:3e:f2:1d:
3a:85:6c:5f:0e:f4:08:bd:55:16:dd:52:3e:4c:9a:
d5:55:de:b7:86:7f:2a:96:70:c9:ed:6d:a5:2c:23:
c0:a9:da:95:73:6d:e8:d1:71:72:22:bc:ee:46:ba:
7d:2b:b1:d4:dd:67:2d:e5:50:fa:49:0a:f6:0d:5e:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:BF:0C:2C:2E:63:7C:9F:CF:33:BE:74:9C:BB:1D:51:AF:07:FD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JOq_DCwuY3yfzzO-dJy7HVGvB_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.215.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:69:0c:53:da:78:bc:cd:b4:c8:88:2f:40:f1:18:4c:4c:0e:
eb:bd:45:2a:b3:93:ba:d7:93:b6:76:39:09:b7:d0:76:5e:59:
e0:7d:07:c4:6f:8e:26:59:c8:a0:c2:be:f2:51:cf:50:4b:02:
ed:a5:ac:cb:c0:59:6d:b8:97:e9:03:1b:ab:51:85:06:b6:04:
48:5a:5d:58:3d:cf:53:d8:09:0c:5f:b4:52:d5:68:94:13:7f:
51:b4:ad:00:96:7f:af:c8:3c:36:fb:ea:81:df:6e:d8:ce:69:
35:0b:fd:90:1c:c6:97:55:e0:d6:0d:af:ef:bc:a6:e5:bc:84:
2a:3c:c0:45:f4:5a:89:ba:54:d8:5a:d0:c9:3d:2f:b7:87:0f:
0a:f5:1d:5c:94:75:1e:1d:d3:77:52:34:e4:9f:e1:81:e0:6e:
15:77:46:55:9a:91:09:c6:5f:29:5c:02:4c:6e:68:49:c7:22:
67:8f:14:d4:22:c9:b3:ce:ba:bd:35:49:71:e7:29:71:7f:2b:
40:98:03:ce:26:91:45:40:06:52:4d:fe:9d:cc:22:58:2d:a9:
47:07:8a:5a:54:3f:59:57:c5:9f:77:50:cd:a2:27:98:bb:7b:
13:d8:8f:ec:e1:9a:6d:bf:88:0b:72:58:50:2f:d1:a3:8b:49:
5c:df:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:28 2025 by rpki-client