Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/gpJoIgoNALNr__brx3wxVfaC5kI.roa
File: gpJoIgoNALNr__brx3wxVfaC5kI.roa (raw, json)
Hash identifier: 2Zul886Dk2QWIHwSUuos6/pH2YDM7j8ESQLhsblktsc=
Subject key identifier: 82:92:68:22:0A:0D:00:B3:6B:FF:F6:EB:C7:7C:31:55:F6:82:E6:42
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 019423D6FA21FF58C822583959300C3170A9
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/gpJoIgoNALNr__brx3wxVfaC5kI.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272809
IP address blocks: 82.86.64.0/22 maxlen: 22
82.86.64.0/24 maxlen: 24
82.86.65.0/24 maxlen: 24
82.86.66.0/24 maxlen: 24
82.86.67.0/24 maxlen: 24
82.86.68.0/22 maxlen: 22
82.86.68.0/24 maxlen: 24
82.86.69.0/24 maxlen: 24
82.86.70.0/24 maxlen: 24
82.86.71.0/24 maxlen: 24
82.86.72.0/22 maxlen: 22
82.86.72.0/24 maxlen: 24
82.86.73.0/24 maxlen: 24
82.86.74.0/24 maxlen: 24
82.86.75.0/24 maxlen: 24
82.86.76.0/22 maxlen: 22
82.86.76.0/24 maxlen: 24
82.86.77.0/24 maxlen: 24
82.86.78.0/24 maxlen: 24
82.86.79.0/24 maxlen: 24
82.86.80.0/22 maxlen: 22
82.86.80.0/24 maxlen: 24
82.86.81.0/24 maxlen: 24
82.86.82.0/24 maxlen: 24
82.86.83.0/24 maxlen: 24
82.86.84.0/22 maxlen: 22
82.86.84.0/24 maxlen: 24
82.86.85.0/24 maxlen: 24
82.86.86.0/24 maxlen: 24
82.86.87.0/24 maxlen: 24
82.86.88.0/22 maxlen: 22
82.86.88.0/24 maxlen: 24
82.86.89.0/24 maxlen: 24
82.86.90.0/24 maxlen: 24
82.86.91.0/24 maxlen: 24
82.86.92.0/22 maxlen: 22
82.86.92.0/24 maxlen: 24
82.86.93.0/24 maxlen: 24
82.86.94.0/24 maxlen: 24
82.86.95.0/24 maxlen: 24
82.86.96.0/22 maxlen: 22
82.86.96.0/24 maxlen: 24
82.86.97.0/24 maxlen: 24
82.86.98.0/24 maxlen: 24
82.86.99.0/24 maxlen: 24
82.86.100.0/22 maxlen: 22
82.86.100.0/24 maxlen: 24
82.86.101.0/24 maxlen: 24
82.86.102.0/24 maxlen: 24
82.86.103.0/24 maxlen: 24
82.86.128.0/24 maxlen: 24
82.86.129.0/24 maxlen: 24
82.86.130.0/24 maxlen: 24
82.86.131.0/24 maxlen: 24
82.86.132.0/24 maxlen: 24
82.86.133.0/24 maxlen: 24
82.86.134.0/24 maxlen: 24
82.86.135.0/24 maxlen: 24
82.86.136.0/24 maxlen: 24
82.86.137.0/24 maxlen: 24
82.86.138.0/24 maxlen: 24
82.86.139.0/24 maxlen: 24
82.86.140.0/24 maxlen: 24
82.86.141.0/24 maxlen: 24
82.86.142.0/24 maxlen: 24
82.86.143.0/24 maxlen: 24
82.86.144.0/24 maxlen: 24
82.86.145.0/24 maxlen: 24
82.86.146.0/24 maxlen: 24
82.86.147.0/24 maxlen: 24
82.86.148.0/24 maxlen: 24
82.86.149.0/24 maxlen: 24
82.86.150.0/24 maxlen: 24
82.86.151.0/24 maxlen: 24
82.86.152.0/24 maxlen: 24
82.86.153.0/24 maxlen: 24
82.86.154.0/24 maxlen: 24
82.86.155.0/24 maxlen: 24
82.86.156.0/24 maxlen: 24
82.86.157.0/24 maxlen: 24
82.86.158.0/24 maxlen: 24
82.86.159.0/24 maxlen: 24
82.86.160.0/24 maxlen: 24
82.86.161.0/24 maxlen: 24
82.86.162.0/24 maxlen: 24
82.86.163.0/24 maxlen: 24
82.86.164.0/24 maxlen: 24
82.86.165.0/24 maxlen: 24
82.86.166.0/24 maxlen: 24
82.86.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 15:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fa:21:ff:58:c8:22:58:39:59:30:0c:31:70:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=829268220a0d00b36bfff6ebc77c3155f682e642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:c3:6c:14:14:fb:b4:04:bf:79:2d:d4:96:
03:af:34:c3:1f:e8:a4:e1:6a:25:a6:c9:de:14:d2:
e8:66:f2:80:64:8d:12:5a:1b:fe:51:9d:8d:57:74:
47:53:01:2d:72:20:c1:c9:10:dc:26:3b:70:af:d0:
71:4f:69:b1:d9:fa:3b:f5:51:dc:14:02:7f:82:8b:
81:e2:9a:46:93:2e:8f:5f:4b:aa:b0:4f:0c:1f:a7:
31:a7:80:bc:08:cf:82:95:4f:78:59:d3:cd:94:d4:
9d:95:38:f5:36:0b:5c:ae:09:c2:29:c2:0d:a8:28:
56:dc:ac:a8:7b:14:95:1b:cd:48:bf:d1:24:72:6c:
b3:11:7c:52:4e:34:a0:4f:5b:ad:a3:6c:b6:34:6a:
b7:2b:ce:c7:d1:0c:28:28:a6:4a:87:e3:fe:f4:ba:
6b:13:4e:ce:7d:c7:e2:f6:bc:5f:fa:d8:b8:47:e6:
dd:05:5f:e2:39:69:fe:f4:d3:99:e2:ff:0d:15:d1:
77:14:8c:00:f8:47:f0:c0:5c:37:5e:79:cf:67:a9:
20:ad:89:48:83:f0:2c:02:35:5b:ea:55:a2:3e:55:
dd:85:14:91:e6:96:ad:6b:c6:df:e9:24:67:5e:9e:
d9:88:e7:4a:a4:16:cb:5f:49:a1:15:35:94:13:4b:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:92:68:22:0A:0D:00:B3:6B:FF:F6:EB:C7:7C:31:55:F6:82:E6:42
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/gpJoIgoNALNr__brx3wxVfaC5kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.64.0-82.86.103.255
82.86.128.0-82.86.167.255
Signature Algorithm: sha256WithRSAEncryption
8b:61:a7:17:8d:25:bd:12:6b:ff:41:fc:66:f5:65:a0:45:b3:
8f:83:7f:d5:12:31:ba:e1:bb:d6:9b:45:96:d1:ca:50:7b:12:
aa:42:c4:c3:6d:e4:bc:d8:8b:66:ae:ef:11:80:41:b9:76:46:
8a:4e:72:65:17:32:67:bb:4d:75:9f:04:a1:b6:70:b2:01:db:
27:b7:fc:07:50:92:93:de:18:2c:f5:ca:d1:d1:ec:27:54:0d:
a3:be:d0:16:d4:79:11:44:75:fa:fb:96:d2:b2:b8:f9:27:92:
f1:07:13:1c:2f:93:42:00:86:43:48:e7:4a:1d:6c:78:b8:c8:
b8:0a:3e:95:f6:c8:69:a8:fe:61:f6:bf:0f:6d:91:9c:08:1b:
ac:8b:c2:76:29:f6:aa:b9:39:de:fa:9a:4a:a1:f0:bc:49:8a:
31:c6:db:ee:49:88:2b:bc:a4:6b:c7:31:61:fc:c9:23:d5:fe:
e9:6c:c8:1b:00:ae:99:f8:09:df:30:df:08:66:42:65:18:19:
85:f3:ba:dd:4c:03:ef:95:87:70:3b:11:a6:52:88:b2:66:4b:
c0:9a:28:48:08:84:2e:76:ca:0d:6d:f0:b6:a5:75:64:64:01:
20:48:b6:eb:85:2a:d1:cd:a9:6b:42:cc:69:0b:8f:c9:98:e2:
da:dc:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:35:49 2025 by rpki-client