Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vuyeVlbJ8vzZDyc4LBRIMCpKTIw.roa
File: vuyeVlbJ8vzZDyc4LBRIMCpKTIw.roa (raw, json)
Hash identifier: HaVjISnd4irEv0HNTy8n67jr+WnAPVat0tb00Gmlq78=
Subject key identifier: BE:EC:9E:56:56:C9:F2:FC:D9:0F:27:38:2C:14:48:30:2A:4A:4C:8C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195F56E6EBAEC0FF14F077C599436E3FF08
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vuyeVlbJ8vzZDyc4LBRIMCpKTIw.roa
Signing time: Wed 02 Apr 2025 07:36:50 +0000
ROA not before: Wed 02 Apr 2025 07:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.210.62.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
217.145.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 14:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:6e:6e:ba:ec:0f:f1:4f:07:7c:59:94:36:e3:ff:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 2 07:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=beec9e5656c9f2fcd90f27382c1448302a4a4c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:bf:17:85:e5:92:4e:c7:e2:b9:92:09:99:
80:ba:b5:a7:32:d7:1f:a7:2c:1c:4a:5d:e1:0b:98:
a2:70:4d:54:25:0d:ba:9f:08:dc:1c:ef:b6:ef:f1:
1a:24:41:04:1c:08:8b:94:1c:e2:7e:d3:ba:28:b9:
c5:8d:3c:e4:04:5d:3a:d3:22:5e:3c:7a:7d:58:b9:
01:11:7a:78:47:0e:39:b4:a3:89:39:c8:18:9b:aa:
93:45:83:12:e5:7f:de:68:f2:13:b4:96:8c:e9:fa:
b0:8e:d7:db:59:7d:ae:d6:a1:af:26:1d:46:3e:ef:
a6:44:7f:6e:b9:56:99:fb:2c:54:78:79:cb:20:bf:
cb:a8:70:66:08:29:40:18:d3:0e:c5:a7:8a:81:ec:
cd:6a:6b:a0:c3:c4:ff:23:66:24:af:c4:c0:16:97:
a5:a3:f1:37:f2:65:da:fb:a0:e2:34:dd:55:97:4f:
22:4e:7c:ad:49:70:07:4d:a9:f5:50:8a:cb:f7:30:
1e:e1:28:c4:3a:66:71:70:67:db:d5:41:ff:03:78:
98:16:4c:5c:3f:04:85:f4:d6:6c:5c:cb:5b:83:80:
1b:37:0c:d5:f0:ec:cf:85:0d:12:dc:47:e6:12:40:
c4:39:21:ec:78:1d:39:41:9f:1a:b5:52:9e:f2:6c:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EC:9E:56:56:C9:F2:FC:D9:0F:27:38:2C:14:48:30:2A:4A:4C:8C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vuyeVlbJ8vzZDyc4LBRIMCpKTIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.131.0/24
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.193.0/24
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.210.62.0/24
213.218.211.0/24
213.218.226.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:e5:48:f5:23:91:b2:34:45:31:1a:61:d7:55:a6:2d:8b:cd:
56:ae:27:25:34:36:9c:16:bc:66:10:31:eb:c7:e1:0a:f9:26:
17:31:9c:bb:8d:80:e7:61:8f:2d:4c:40:55:f5:85:bb:d4:4f:
a3:05:c9:36:3e:1b:28:4b:d2:e8:ad:25:f8:14:93:c6:e9:de:
f6:77:ed:57:12:bf:94:b3:4a:2d:6b:f6:70:13:1e:6b:2e:81:
be:33:e7:01:bd:1c:e5:6a:f3:42:1e:3a:fc:2a:3d:91:89:f9:
d9:28:cd:99:f9:ca:1b:00:c3:b6:85:cb:30:f6:ee:8a:b2:96:
9e:72:ce:b8:c0:76:c9:68:79:1b:d0:0e:d8:8c:fc:41:6b:39:
57:59:38:2f:a0:1d:06:36:0b:bb:32:6e:fe:e7:38:e5:a2:51:
c0:64:c2:30:d2:dd:11:5b:f9:f4:7a:77:3b:5f:46:e4:e2:a6:
2e:a4:de:aa:8e:6a:dc:1a:13:e6:d2:06:82:08:0c:00:6d:49:
fb:b8:a8:48:26:55:81:c3:82:26:36:80:e1:d0:72:2a:9c:92:
cf:c8:db:fa:c0:13:ab:cc:44:ce:9e:f9:8f:cd:4e:09:e7:89:
73:54:3f:5a:fd:12:33:70:b6:1b:0d:69:36:3f:69:af:65:89:
dc:5c:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:17 2025 by rpki-client