Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8EGfaC0qB_KCapxund--Tr-jgWw.roa
File: 8EGfaC0qB_KCapxund--Tr-jgWw.roa (raw, json)
Hash identifier: iX1ITHWhI4INZ8EIhfso23V+s0xpXoo8WvqAHKXJtPg=
Subject key identifier: F0:41:9F:68:2D:2A:07:F2:82:6A:9C:6E:9D:DF:BE:4E:BF:A3:81:6C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196CB2DFC497033D43D6FFB0EE65FC2DB74
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8EGfaC0qB_KCapxund--Tr-jgWw.roa
Signing time: Tue 13 May 2025 19:45:10 +0000
ROA not before: Tue 13 May 2025 19:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 193.8.94.0/24 maxlen: 24
193.8.231.0/24 maxlen: 24
2a09:17c0:b19a::/48 maxlen: 48
2a0e:1a83:88::/48 maxlen: 48
2a0f:1206:77::/48 maxlen: 48
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c7:100::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e202:97::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea44:88::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a12:ecc0:3::/48 maxlen: 48
2a12:ecc0:4::/48 maxlen: 48
2a12:ecc0:66::/48 maxlen: 48
2a12:ecc0:188::/48 maxlen: 48
2a12:ecc0:316::/48 maxlen: 48
2a12:ecc0:34a::/48 maxlen: 48
2a13:18c6:44::/48 maxlen: 48
2a13:18c6:99::/48 maxlen: 48
2a13:8c82:2::/48 maxlen: 48
2a13:8c86:100::/48 maxlen: 48
2a13:8c86:140::/48 maxlen: 48
2a13:c900:22::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
2a13:c900:110::/48 maxlen: 48
2a13:e102:2::/48 maxlen: 48
2a13:e107:29b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 16:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:2d:fc:49:70:33:d4:3d:6f:fb:0e:e6:5f:c2:db:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 13 19:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0419f682d2a07f2826a9c6e9ddfbe4ebfa3816c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:b3:5d:75:c7:43:92:0b:63:25:4d:85:f0:
44:05:e2:01:85:18:8d:b9:96:79:50:a2:17:00:6a:
fb:86:50:b3:10:3a:39:ab:63:59:58:3c:43:fa:e7:
8f:ae:d9:4d:b2:51:0c:35:c5:43:dd:6a:9f:f5:9a:
29:7a:4a:8d:9e:21:f2:21:a6:b9:d3:a5:3e:5e:20:
ae:29:a0:61:2b:91:e3:80:ba:47:c1:b3:ac:9c:3d:
e4:9b:71:d4:b6:0e:4e:80:7d:9f:6d:94:fc:80:31:
49:f0:ca:9c:bc:b2:85:3d:db:b0:24:f7:fc:bb:c8:
cf:3c:15:89:8c:dd:83:c7:d9:48:52:22:b0:90:ee:
b6:92:7c:e1:cf:92:8d:83:a0:44:3a:79:87:b4:1c:
0e:a0:dc:1a:32:42:03:4a:c2:2f:b8:d1:b2:9c:05:
7e:04:38:75:72:55:e9:a6:d0:89:b0:cc:c8:1a:27:
3b:be:e0:65:26:37:25:2c:e6:9a:b8:c9:11:d4:33:
49:a4:89:f7:6c:70:cc:d6:8a:da:13:a7:e1:eb:c7:
16:a3:07:72:d3:0c:9a:f2:05:c9:43:74:5c:b9:33:
9e:ea:a4:b1:69:57:d9:87:e8:bf:9c:b3:e6:6d:9a:
98:65:49:7e:e8:8a:e9:a8:62:17:cb:85:87:36:ec:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:41:9F:68:2D:2A:07:F2:82:6A:9C:6E:9D:DF:BE:4E:BF:A3:81:6C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8EGfaC0qB_KCapxund--Tr-jgWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.94.0/24
193.8.231.0/24
IPv6:
2a09:17c0:b19a::/48
2a0e:1a83:88::/48
2a0f:1206:77::/48
2a0f:e1c0:3::/48
2a0f:e1c7:100::/48
2a0f:e200:5::/48
2a0f:e202:97::/48
2a0f:e440::/29
2a0f:ea40:8::/48
2a0f:ea44:88::/48
2a0f:ea47:ff49::/48
2a12:ecc0:3::-2a12:ecc0:4:ffff:ffff:ffff:ffff:ffff
2a12:ecc0:66::/48
2a12:ecc0:188::/48
2a12:ecc0:316::/48
2a12:ecc0:34a::/48
2a13:18c6:44::/48
2a13:18c6:99::/48
2a13:8c82:2::/48
2a13:8c86:100::/48
2a13:8c86:140::/48
2a13:c900:22::/48
2a13:c900:66::/48
2a13:c900:110::/48
2a13:e102:2::/48
2a13:e107:29b::/48
Signature Algorithm: sha256WithRSAEncryption
03:20:30:ff:a9:54:dc:df:28:63:1d:d6:02:86:93:15:a9:fb:
d0:42:ff:f7:24:8d:bb:99:c6:63:27:e4:db:95:8d:25:7b:b8:
85:b0:21:9d:ae:06:ee:65:92:b9:b8:72:61:17:a6:1f:f0:7b:
b7:c6:8d:95:7e:c6:33:cd:b2:05:57:8d:e9:5d:7b:57:19:43:
2b:49:db:35:8b:e0:e8:07:dc:0a:eb:8c:14:f7:75:7d:19:a6:
19:77:1a:ce:ab:71:fd:3e:aa:ad:2e:17:d2:4d:63:07:d0:b5:
c3:e4:40:2f:a4:b0:d2:14:ab:1c:c6:49:cc:07:8d:01:cc:fe:
b9:52:21:11:04:dd:04:7e:3e:78:b4:1c:55:96:13:e9:ea:4f:
13:4a:0d:cd:46:5c:b2:ea:08:3d:eb:44:0b:6e:82:c9:db:87:
cc:54:23:36:bd:ae:06:95:b8:4f:95:2c:59:92:68:a5:dd:3a:
34:b6:ff:05:32:99:8f:e3:c1:bb:51:cf:31:0e:0d:59:4c:44:
fb:70:a6:01:f2:9d:47:7a:de:a4:3b:16:c3:3b:b5:a1:0d:55:
79:b2:af:10:af:23:36:36:f6:9c:31:56:e8:45:e6:4e:a7:df:
ad:2e:40:de:05:c1:fe:c3:b8:49:42:92:f2:99:84:2f:cf:09:
d3:9d:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:16 2025 by rpki-client