Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8-dxdTCqdMIQLz479-uLajiqx0A.roa
File: 8-dxdTCqdMIQLz479-uLajiqx0A.roa (raw, json)
Hash identifier: vcTz2ufK4xGabsJwD7ejhJUDFsAN+1TpZLVELtCVsqw=
Subject key identifier: F3:E7:71:75:30:AA:74:C2:10:2F:3E:3B:F7:EB:8B:6A:38:AA:C7:40
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0196FC4270F45407D175E2882E1185E09B98
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8-dxdTCqdMIQLz479-uLajiqx0A.roa
Signing time: Fri 23 May 2025 08:28:54 +0000
ROA not before: Fri 23 May 2025 08:28:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 05 Jun 2025 11:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:42:70:f4:54:07:d1:75:e2:88:2e:11:85:e0:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 23 08:28:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e7717530aa74c2102f3e3bf7eb8b6a38aac740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:5c:2a:48:55:9b:84:54:12:7a:a0:0e:b6:
b2:62:57:26:fa:00:a8:40:5c:62:a0:a7:f2:05:9a:
fb:e0:ea:30:ae:24:41:32:1b:88:e6:78:8c:f5:66:
5c:2b:11:19:7b:10:f1:d8:14:04:bc:09:55:cf:a7:
91:3d:b8:d0:1e:1e:16:00:4b:29:6b:ff:26:3c:3f:
7f:37:3e:6e:0e:41:7e:ab:32:1b:15:e1:dc:b7:92:
6b:8e:87:a5:a4:22:2b:4d:25:48:59:49:de:39:23:
cb:18:ac:cb:b5:ea:f0:f6:f8:14:76:02:d5:be:33:
28:3b:97:94:9b:ba:a6:3f:f2:64:fb:73:d4:b7:84:
de:ad:5f:ae:6a:aa:63:28:99:80:5f:d0:78:ae:1d:
99:f0:4a:c6:1c:94:55:de:34:44:58:17:6f:e2:ea:
62:88:d5:84:40:71:2c:af:a0:fc:66:d2:34:9f:fc:
fb:b2:e3:ee:00:2f:65:13:ad:2c:7f:53:1e:58:26:
80:6f:fb:55:4e:3c:01:70:51:15:c9:6d:71:ea:8d:
10:27:05:de:d4:91:ad:0d:81:8b:c8:18:49:0c:da:
fa:bd:53:4f:90:9e:ff:6d:85:20:e4:ce:3c:9c:6b:
c8:0b:54:a1:4f:af:d5:fc:3b:1f:d0:71:5a:c7:6c:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E7:71:75:30:AA:74:C2:10:2F:3E:3B:F7:EB:8B:6A:38:AA:C7:40
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8-dxdTCqdMIQLz479-uLajiqx0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
77.242.154.0/24
83.137.156.0/24
83.137.158.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.219.0/24
88.209.247.0/24
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:2f:0b:45:6a:05:b2:ed:53:85:3d:d4:0c:64:80:5f:f7:b4:
db:02:2b:e7:40:e2:3f:77:d8:47:cd:49:04:df:09:66:df:2f:
3b:23:ce:ed:6c:2e:cc:cf:ae:6d:72:a6:8a:57:bb:6e:5a:a6:
e7:3d:02:6b:2d:60:d0:2a:5d:4e:78:39:00:f3:af:04:5d:4a:
0d:06:4e:cb:1f:09:fe:d4:aa:e0:d9:6d:13:c6:f4:19:5a:2e:
98:78:77:b3:e9:a0:15:af:48:21:0d:ba:44:eb:70:e5:8a:ce:
c0:18:b2:55:d6:bb:91:fe:08:79:74:57:6f:cb:f8:88:3b:d1:
01:88:2c:88:f5:66:7d:5c:30:dd:bc:5f:ba:06:87:43:d0:b5:
ac:68:01:62:0c:ab:89:30:f6:d4:d6:71:93:79:91:42:e1:8f:
6c:1d:f5:65:47:63:f2:c2:fb:ef:62:4a:f8:cd:c7:ff:7e:8b:
ce:8b:74:0d:be:c5:69:b5:6e:2d:16:6d:b4:57:82:b0:39:2c:
a9:f1:92:3e:3a:5f:2b:02:33:be:0e:63:b6:67:3d:70:53:6e:
97:8b:68:93:b0:7d:e6:b2:be:bd:b8:6e:d3:97:46:90:d3:6b:
0b:4e:c8:85:4e:b5:74:28:ba:95:1b:70:42:5e:6e:3e:22:a1:
51:5c:d3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:20:57 2025 by rpki-client