Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/tnYNKhdGDlsJqQvKa7gPCY2BHLk.roa
File: tnYNKhdGDlsJqQvKa7gPCY2BHLk.roa (raw, json)
Hash identifier: I/LKHxN6Hf97otIi/wV2hDZKSSSv67UffHM4UMfybfk=
Subject key identifier: B6:76:0D:2A:17:46:0E:5B:09:A9:0B:CA:6B:B8:0F:09:8D:81:1C:B9
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 0196931999AFD220EB2D2DA8B60A6984E454
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/tnYNKhdGDlsJqQvKa7gPCY2BHLk.roa
Signing time: Fri 02 May 2025 22:24:10 +0000
ROA not before: Fri 02 May 2025 22:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202105
IP address blocks: 83.136.8.0/24 maxlen: 24
83.136.9.0/24 maxlen: 24
83.136.10.0/24 maxlen: 24
83.136.11.0/24 maxlen: 24
83.136.12.0/24 maxlen: 24
83.136.13.0/24 maxlen: 24
83.136.14.0/24 maxlen: 24
83.136.15.0/24 maxlen: 24
87.237.224.0/24 maxlen: 24
87.237.225.0/24 maxlen: 24
87.237.226.0/24 maxlen: 24
87.237.227.0/24 maxlen: 24
87.237.228.0/24 maxlen: 24
87.237.229.0/24 maxlen: 24
87.237.230.0/24 maxlen: 24
87.237.231.0/24 maxlen: 24
185.11.120.0/24 maxlen: 24
185.11.121.0/24 maxlen: 24
185.11.122.0/24 maxlen: 24
185.11.123.0/24 maxlen: 24
185.51.204.0/24 maxlen: 24
185.51.205.0/24 maxlen: 24
185.51.206.0/24 maxlen: 24
185.51.207.0/24 maxlen: 24
185.82.116.0/24 maxlen: 24
185.82.117.0/24 maxlen: 24
185.82.118.0/24 maxlen: 24
185.82.119.0/24 maxlen: 24
185.108.240.0/24 maxlen: 24
185.108.241.0/24 maxlen: 24
185.108.242.0/24 maxlen: 24
185.108.243.0/24 maxlen: 24
185.133.84.0/24 maxlen: 24
185.133.85.0/24 maxlen: 24
185.133.86.0/24 maxlen: 24
185.133.87.0/24 maxlen: 24
185.164.24.0/24 maxlen: 24
185.164.26.0/24 maxlen: 24
185.164.27.0/24 maxlen: 24
185.164.28.0/24 maxlen: 24
185.164.29.0/24 maxlen: 24
185.164.30.0/24 maxlen: 24
185.164.31.0/24 maxlen: 24
185.203.108.0/24 maxlen: 24
185.203.109.0/24 maxlen: 24
185.203.110.0/24 maxlen: 24
185.206.28.0/24 maxlen: 24
185.206.29.0/24 maxlen: 24
185.206.30.0/24 maxlen: 24
185.206.132.0/24 maxlen: 24
185.206.133.0/24 maxlen: 24
185.206.134.0/24 maxlen: 24
185.206.135.0/24 maxlen: 24
185.217.8.0/24 maxlen: 24
185.217.9.0/24 maxlen: 24
185.217.10.0/24 maxlen: 24
185.217.11.0/24 maxlen: 24
185.238.69.0/24 maxlen: 24
185.238.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 May 2025 21:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:19:99:af:d2:20:eb:2d:2d:a8:b6:0a:69:84:e4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: May 2 22:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6760d2a17460e5b09a90bca6bb80f098d811cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:e2:b4:09:30:4a:c6:3c:86:b4:08:a2:39:
51:9e:f6:8a:65:40:ed:32:20:02:7a:6a:1c:9e:c1:
dd:2a:35:f2:b5:74:0e:8c:01:62:98:36:67:83:ba:
98:51:88:90:9d:1b:d2:16:1c:eb:b4:dc:8d:16:7b:
ed:41:87:15:25:c7:2a:a2:b6:57:fd:c6:52:f2:97:
03:78:c9:48:8e:65:52:e7:71:6e:da:b0:bd:d8:a5:
b1:e2:f5:cc:41:ac:ad:9d:5b:8d:d7:06:27:c2:e9:
cc:3c:59:20:0f:df:48:66:b0:07:3f:0e:f7:86:f8:
f1:39:9e:8a:4f:8f:ed:19:5b:a9:01:b2:ba:fa:87:
35:aa:39:bd:01:3c:e9:24:a9:3e:90:4d:c4:af:30:
81:20:01:e2:89:a3:2f:78:d6:5a:9b:1b:cb:4d:9b:
87:4c:ad:8d:80:40:59:8b:2e:b6:b5:88:c9:75:81:
87:ae:47:a6:61:e5:74:9f:66:8b:db:2e:75:44:1e:
7f:9e:23:da:44:43:22:cd:1b:e0:b8:32:83:c5:d8:
3d:5b:69:c7:bf:4d:a4:cc:27:13:7f:9f:61:40:d6:
1b:73:ae:7b:7c:80:5c:21:80:00:0b:e0:bc:9d:68:
f1:32:44:39:16:20:41:f6:4f:63:5a:93:20:1b:a3:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:0D:2A:17:46:0E:5B:09:A9:0B:CA:6B:B8:0F:09:8D:81:1C:B9
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/tnYNKhdGDlsJqQvKa7gPCY2BHLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.8.0/21
87.237.224.0/21
185.11.120.0/22
185.51.204.0/22
185.82.116.0/22
185.108.240.0/22
185.133.84.0/22
185.164.24.0/24
185.164.26.0-185.164.31.255
185.203.108.0-185.203.110.255
185.206.28.0-185.206.30.255
185.206.132.0/22
185.217.8.0/22
185.238.69.0-185.238.70.255
Signature Algorithm: sha256WithRSAEncryption
aa:11:b6:0a:05:9e:c7:d4:71:65:3a:6c:58:58:c2:58:23:26:
94:ff:c4:38:49:92:ad:e2:c2:27:4c:f0:5b:9f:04:2c:bd:89:
ed:a9:f7:06:c4:a0:96:46:ad:97:73:9c:7b:6b:6f:92:2d:a7:
01:62:71:79:6c:d5:b3:d9:37:da:1a:ea:ff:8a:d2:e6:13:47:
ac:04:38:53:0b:db:7b:ef:3e:df:ee:47:f2:15:f0:a5:bf:4e:
49:c9:e0:da:77:03:75:c9:4b:39:95:c9:e0:e1:15:80:30:25:
ab:92:39:a5:f3:c1:be:5d:79:c4:d0:99:c7:a5:2d:d2:9a:0d:
66:ed:00:c0:71:51:0a:b6:79:93:cc:db:5e:1b:32:f1:af:91:
a8:66:db:e0:00:c5:4f:31:20:2b:42:77:13:ce:bf:d2:2b:fb:
8e:df:78:99:8f:a4:76:5d:4d:ee:44:83:56:1c:58:51:1c:74:
98:a0:c5:09:02:45:70:5c:59:76:06:8b:e1:2a:24:a7:6f:d1:
5e:8c:eb:e8:41:15:2e:b3:3c:29:3f:c7:1a:a4:7f:6d:95:c1:
5b:2e:54:66:af:6b:59:9e:91:ca:99:2f:cc:f8:61:a3:0a:35:
00:77:92:1e:bf:07:68:0a:35:26:0a:07:f3:7f:b3:7c:f6:97:
96:c0:37:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:48:00 2025 by rpki-client