Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/F8p-MOff4BMFWg-B9Guz4ZEuLBk.roa
File: F8p-MOff4BMFWg-B9Guz4ZEuLBk.roa (raw, json)
Hash identifier: ji5R4jO8mdtbGpywEm6dtslezloLesmRTjhn5BcjRME=
Subject key identifier: 17:CA:7E:30:E7:DF:E0:13:05:5A:0F:81:F4:6B:B3:E1:91:2E:2C:19
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019425215C4088D8C23CAF3F9B50829C2394
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/F8p-MOff4BMFWg-B9Guz4ZEuLBk.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
5.182.47.0/24 maxlen: 24
45.159.112.0/24 maxlen: 24
45.159.113.0/24 maxlen: 24
45.159.114.0/24 maxlen: 24
45.159.115.0/24 maxlen: 24
62.3.42.0/24 maxlen: 24
85.208.252.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
185.4.28.0/24 maxlen: 24
185.4.29.0/24 maxlen: 24
185.4.30.0/24 maxlen: 24
185.4.31.0/24 maxlen: 24
185.50.37.0/24 maxlen: 24
185.50.38.0/24 maxlen: 24
185.50.39.0/24 maxlen: 24
185.116.160.0/24 maxlen: 24
185.116.161.0/24 maxlen: 24
185.116.162.0/24 maxlen: 24
185.116.163.0/24 maxlen: 24
185.213.164.0/24 maxlen: 24
185.213.165.0/24 maxlen: 24
185.213.166.0/24 maxlen: 24
185.213.167.0/24 maxlen: 24
185.255.88.0/24 maxlen: 24
185.255.89.0/24 maxlen: 24
185.255.90.0/24 maxlen: 24
185.255.91.0/24 maxlen: 24
193.141.64.0/24 maxlen: 24
193.141.65.0/24 maxlen: 24
193.141.126.0/24 maxlen: 24
193.141.127.0/24 maxlen: 24
2a05:ab80::/48 maxlen: 48
2a05:ab80:3::/48 maxlen: 48
2a05:ab80:4::/48 maxlen: 48
2a05:ab80:100::/48 maxlen: 48
2a05:ab80:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Feb 2025 07:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5c:40:88:d8:c2:3c:af:3f:9b:50:82:9c:23:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17ca7e30e7dfe013055a0f81f46bb3e1912e2c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:68:b1:b0:5d:a9:6b:cf:f2:83:f5:56:61:82:
5c:18:c4:99:0d:90:2a:17:e7:22:ac:06:dd:59:24:
3e:bd:c9:d1:01:ac:d5:fd:29:47:ec:ab:44:e0:a9:
5f:8f:b8:3a:66:16:4f:50:e4:8c:7c:37:34:18:d7:
98:4f:11:6f:e8:77:db:6a:34:df:3e:a0:23:91:48:
59:79:a4:53:ab:5e:c4:6e:6b:d2:ab:54:6d:09:1a:
53:8f:4c:fd:8f:a7:83:90:72:6f:fc:fc:a4:d5:b2:
6b:11:e4:72:3b:5f:8c:8e:39:a3:dd:43:c4:15:4f:
fd:c9:72:9c:21:db:41:05:42:32:07:d4:85:ed:a2:
14:0b:60:8d:f0:ae:af:c7:16:29:2f:f1:19:a1:28:
7b:74:25:eb:71:d3:b1:75:7a:75:24:c9:2e:8d:52:
cb:40:cd:f6:87:84:b2:ac:d3:90:c7:80:06:a9:29:
15:58:e0:c6:7d:3c:1b:f7:cb:7d:b4:43:33:79:53:
3e:ba:21:7e:24:d9:b1:d0:a1:51:81:03:22:17:a2:
02:2d:fe:9a:7c:b1:8d:8c:f9:1d:91:78:65:89:33:
a1:a4:ad:d0:6a:93:6c:dd:fc:ab:fd:84:80:df:48:
c6:66:bb:c7:0b:69:e9:3f:26:a3:cd:4a:a4:65:07:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CA:7E:30:E7:DF:E0:13:05:5A:0F:81:F4:6B:B3:E1:91:2E:2C:19
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/F8p-MOff4BMFWg-B9Guz4ZEuLBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
45.159.112.0/22
62.3.42.0/24
85.208.252.0/22
185.4.28.0/22
185.50.37.0-185.50.39.255
185.116.160.0/22
185.213.164.0/22
185.255.88.0/22
193.141.64.0/23
193.141.126.0/23
IPv6:
2a05:ab80::/48
2a05:ab80:3::-2a05:ab80:4:ffff:ffff:ffff:ffff:ffff
2a05:ab80:100::/48
2a05:ab80:200::/48
Signature Algorithm: sha256WithRSAEncryption
51:64:29:7d:29:65:fd:d1:b0:c2:71:82:f6:e2:78:78:18:96:
e2:66:07:7f:c3:5f:46:33:fd:76:45:95:69:40:c6:d2:29:d3:
fd:70:0d:ff:14:90:62:2e:fe:28:1e:64:62:65:f9:4d:8e:7e:
7e:0b:d8:a0:6e:05:39:ea:f2:d0:4c:73:3b:d1:2f:9b:d2:88:
c5:f9:5e:21:51:42:bd:1c:a5:69:1f:6a:b9:65:08:e8:12:2e:
66:72:1c:3e:b2:28:20:c0:4a:a9:05:95:ab:48:88:a9:21:96:
73:29:be:5d:b1:73:87:f3:f7:09:51:86:9d:3a:4a:a8:8a:75:
92:13:17:f9:f2:1b:67:1d:0f:ef:31:fe:b3:f2:a2:72:cf:f7:
3a:59:67:40:63:50:e3:cc:db:f6:79:fa:e4:cc:b8:33:cf:85:
1b:a1:eb:04:ab:39:ae:9c:18:4a:ba:72:f9:e6:3b:f5:0d:db:
87:18:ee:7e:da:59:f8:40:19:7c:b7:a8:d3:f6:60:f2:ee:d0:
76:35:16:20:08:c0:26:92:c6:46:c8:3f:78:b2:07:54:bc:da:
82:3e:0b:4b:93:1c:15:95:6f:c5:96:bc:08:01:f6:9e:57:3d:
2f:f2:0b:a5:0e:e8:97:0a:f5:32:2b:a6:a4:92:41:8f:18:c1:
26:bd:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:50:20 2025 by rpki-client