Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iEGUKRDKq7-mvh-nQLK9sfopbGI.roa
File: iEGUKRDKq7-mvh-nQLK9sfopbGI.roa (raw, json)
Hash identifier: mbBVUP6vS58S8Hhg0+dg69v4aAunuxfD+v4ordxwMUQ=
Subject key identifier: 88:41:94:29:10:CA:AB:BF:A6:BE:1F:A7:40:B2:BD:B1:FA:29:6C:62
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01958AF9356ED2FB7A4D08283510C9D35EE9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iEGUKRDKq7-mvh-nQLK9sfopbGI.roa
Signing time: Wed 12 Mar 2025 15:29:02 +0000
ROA not before: Wed 12 Mar 2025 15:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 18:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:f9:35:6e:d2:fb:7a:4d:08:28:35:10:c9:d3:5e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 12 15:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8841942910caabbfa6be1fa740b2bdb1fa296c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:ed:9b:41:af:af:6f:4b:7c:e2:5e:ff:75:
fa:4d:56:eb:8b:d3:54:8d:be:aa:61:91:62:15:71:
47:69:7e:3c:c0:94:2e:d8:e4:06:44:1a:bd:43:b9:
a7:3e:c9:1e:20:80:35:44:65:8f:2a:05:80:cb:f2:
54:e4:ba:b6:09:79:40:98:e2:37:7d:09:15:c3:31:
9b:e4:f6:26:23:99:63:f8:d1:ad:e9:e9:ac:c4:4a:
22:2a:91:58:2f:5e:9c:a9:23:c0:ef:aa:80:3c:9d:
b4:e6:e8:07:e6:57:61:f4:06:65:16:42:20:00:e3:
26:a4:62:a8:71:c5:0d:55:5c:ef:bd:f9:9c:5f:04:
df:b1:15:bf:94:1d:d7:3d:fe:99:2c:7b:36:f7:bc:
38:e9:d1:94:70:1b:65:51:ef:03:d4:f2:b9:82:2d:
f8:f0:3b:00:ea:0a:6c:f7:df:27:8f:03:3c:c9:7b:
eb:55:2d:05:35:15:14:be:bf:29:2e:d2:37:01:e6:
e6:30:51:46:9f:27:25:e1:58:9a:9d:04:53:a4:1b:
33:e3:8f:d5:5f:ec:2f:7f:4d:7f:2f:a8:7c:c8:16:
43:a3:c4:21:ec:b3:7f:bf:85:c8:e9:54:a0:e3:ec:
1a:15:98:7c:69:91:31:fe:81:a0:59:2b:86:23:47:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:41:94:29:10:CA:AB:BF:A6:BE:1F:A7:40:B2:BD:B1:FA:29:6C:62
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iEGUKRDKq7-mvh-nQLK9sfopbGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.193.0/24
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.226.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
76:1a:e3:e3:35:b2:79:61:79:e3:a9:bd:15:2d:0e:a2:78:16:
96:8f:59:bb:4b:4c:61:b9:4f:77:08:35:93:ce:6d:bd:7e:9e:
d6:7c:4a:5f:14:4e:61:3d:91:dc:84:04:a7:ef:eb:48:bd:b5:
10:b9:63:29:2a:3a:73:aa:2e:22:f0:e1:f9:71:da:fb:d9:1a:
81:c0:8f:c3:35:ce:b0:0e:fd:e2:48:2b:23:c0:e2:98:f3:58:
e0:f2:82:6e:ea:7b:eb:e9:7c:b7:ef:d8:4a:64:73:1e:e2:79:
f3:1e:2f:04:71:2d:51:32:bb:25:7e:f0:ea:15:cd:53:ed:f9:
d0:e2:4e:7f:19:f7:88:5c:80:ce:18:ec:70:80:47:72:e9:fd:
12:53:4a:6b:54:a5:ce:f8:b8:cd:63:97:4c:9c:ca:2e:a8:e8:
14:36:6b:a4:c3:cd:ae:dc:d3:3d:24:a1:84:7a:43:f2:f3:db:
be:b0:41:8a:0d:d7:e3:e6:36:41:fb:cb:18:f2:56:35:a7:be:
85:a7:f5:33:3f:25:09:14:e9:86:e5:3e:2d:98:d3:3c:9a:80:
b1:da:12:bd:d0:11:e4:7b:96:ec:7c:f1:66:a6:88:4c:c0:e8:
d4:30:52:67:93:76:5b:3c:a0:5b:5d:bd:02:af:15:2b:d0:4d:
98:ac:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:52 2025 by rpki-client