Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p9a7AhVzXLRb1eWLlpC-sgoFXvQ.roa
File: p9a7AhVzXLRb1eWLlpC-sgoFXvQ.roa (raw, json)
Hash identifier: XhOwLiqg/J4zE8keLs7VCn2b9G8kkNxUd9rZeAdpShk=
Subject key identifier: A7:D6:BB:02:15:73:5C:B4:5B:D5:E5:8B:96:90:BE:B2:0A:05:5E:F4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01973BB182626BF5FA8E2FC442E6017AF673
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p9a7AhVzXLRb1eWLlpC-sgoFXvQ.roa
Signing time: Wed 04 Jun 2025 16:06:18 +0000
ROA not before: Wed 04 Jun 2025 16:06:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.5.189.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.231.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.154.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 16:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:b1:82:62:6b:f5:fa:8e:2f:c4:42:e6:01:7a:f6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 4 16:06:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7d6bb0215735cb45bd5e58b9690beb20a055ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:a6:c6:5b:af:d2:96:7e:40:8f:c1:35:6a:
64:6c:b8:63:e6:b0:05:7b:51:ce:44:7e:4b:ed:4e:
7f:db:8d:b2:72:f8:05:84:f9:0b:af:db:8e:d6:01:
0b:3b:e4:1c:85:63:b9:c1:02:0e:c8:42:16:f2:ce:
17:1d:43:5a:03:1e:2d:cb:e8:ef:0d:1e:21:5f:a7:
17:27:65:32:e7:97:4a:72:21:ba:f6:cf:a2:44:e8:
79:9d:ef:17:1c:b4:50:77:f5:54:cb:12:20:0b:94:
6c:29:cc:28:0e:7d:df:b4:93:07:3f:a3:dd:67:69:
9c:55:1a:3f:c4:ec:d6:05:50:00:77:fc:41:56:d3:
5d:07:0f:5a:7e:78:70:5c:ba:ab:c0:26:6a:a6:3f:
24:a4:df:51:d8:6b:9d:17:29:83:21:f7:29:20:46:
07:54:44:04:08:3c:e1:33:2b:5f:bd:cf:a1:ba:78:
2b:fa:f6:50:15:2d:10:99:d9:9c:9c:f0:ea:a5:4c:
5e:9d:03:a6:bc:67:db:d2:a7:67:66:e3:82:f0:72:
f4:b9:be:6f:8b:25:23:7c:2f:7e:a4:30:de:e9:81:
50:26:46:c6:b0:72:a1:b8:fd:57:c8:55:cc:b6:ec:
97:ce:60:84:c3:e2:c5:bc:53:3b:74:90:54:87:1d:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:BB:02:15:73:5C:B4:5B:D5:E5:8B:96:90:BE:B2:0A:05:5E:F4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p9a7AhVzXLRb1eWLlpC-sgoFXvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.231.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.172.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.130.154.0/24
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:47:13:bb:93:47:38:57:c6:81:91:e4:f2:d5:76:65:be:e4:
f2:b4:3a:40:0b:15:d5:6c:09:f6:e0:f2:72:f7:52:5a:0e:ea:
a4:2f:f8:53:95:58:2f:62:ce:b4:7d:34:58:2b:58:d4:ff:dd:
57:88:19:43:c7:39:92:7e:ef:99:c6:36:be:68:d1:50:1f:c9:
22:9c:8a:5e:77:e8:33:26:0d:20:3b:21:8e:c3:70:bf:6f:09:
d3:34:a3:3b:85:f8:2f:9a:19:64:70:be:7b:69:6d:34:4d:45:
97:a2:65:c7:d5:86:b5:a0:b4:ab:6d:28:d9:f9:4a:93:bf:51:
00:cf:3d:dd:f8:1e:46:da:77:ce:cf:e8:c1:17:c3:71:59:74:
fd:dc:f0:50:fa:d9:75:9c:09:92:96:4e:91:16:8d:03:ea:58:
4e:1b:d3:c5:eb:b9:5a:af:8d:ff:4b:89:b5:77:97:5b:7e:16:
a2:8e:50:bd:a1:6a:11:c0:ec:0c:96:82:9e:76:52:2d:d9:94:
41:2d:8d:ad:1d:55:ad:bd:4d:bd:40:5e:55:e3:db:58:ac:da:
7c:b0:21:31:34:4f:d6:09:ef:b7:3b:f4:68:05:91:67:8f:03:
1d:e2:ff:7d:67:40:61:d6:4f:cd:70:f6:b0:64:c3:33:e0:b9:
67:d0:37:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:07 2025 by rpki-client