Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/9u8M2DFXnp0xAxyjCBEr6zAu7M4.roa
File: 9u8M2DFXnp0xAxyjCBEr6zAu7M4.roa (raw, json)
Hash identifier: H78MllTGeSypJ/q+ClOm0At/5auSe+FVEqV9dl9EeiQ=
Subject key identifier: F6:EF:0C:D8:31:57:9E:9D:31:03:1C:A3:08:11:2B:EB:30:2E:EC:CE
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0193B1E78D88B88AD654EAC8F214639941A5
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/9u8M2DFXnp0xAxyjCBEr6zAu7M4.roa
Signing time: Tue 10 Dec 2024 18:49:22 +0000
ROA not before: Tue 10 Dec 2024 18:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 91.194.205.0/24 maxlen: 24
91.202.200.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
148.253.36.0/24 maxlen: 24
148.253.41.0/24 maxlen: 24
148.253.42.0/24 maxlen: 24
148.253.44.0/24 maxlen: 24
148.253.47.0/24 maxlen: 24
148.253.228.0/24 maxlen: 24
148.253.229.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.239.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.248.0/24 maxlen: 24
151.249.92.0/24 maxlen: 24
151.249.93.0/24 maxlen: 24
151.249.94.0/24 maxlen: 24
163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.93.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
163.171.96.0/24 maxlen: 24
163.171.97.0/24 maxlen: 24
163.171.98.0/24 maxlen: 24
163.171.101.0/24 maxlen: 24
163.171.102.0/24 maxlen: 24
163.171.103.0/24 maxlen: 24
163.171.104.0/24 maxlen: 24
163.171.119.0/24 maxlen: 24
163.171.126.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
163.171.176.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
163.171.198.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.224.0/24 maxlen: 24
163.171.225.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.249.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
194.107.19.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Dec 2024 18:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:e7:8d:88:b8:8a:d6:54:ea:c8:f2:14:63:99:41:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Dec 10 18:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6ef0cd831579e9d31031ca308112beb302eecce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:c7:b3:ec:81:96:ec:e4:54:72:f7:4d:5d:
28:68:07:8f:2a:e2:0e:a7:9e:b5:70:17:13:3e:fb:
12:d4:28:4e:4a:64:17:1d:a2:df:d7:3a:94:0f:5c:
83:c4:c4:a8:aa:eb:83:87:56:85:e2:a3:e2:a4:4a:
fe:3e:9f:bb:0e:2d:1d:84:4a:01:68:f8:0a:d1:ca:
11:43:30:02:75:8a:45:0e:49:ef:4b:c0:c5:98:14:
a6:c0:c9:fd:06:57:2b:5c:b5:90:87:21:7f:a8:16:
f9:63:cb:75:95:c9:a9:32:4f:24:9e:17:86:96:dd:
ac:4f:09:31:74:1f:11:66:a0:6e:69:31:33:d8:43:
71:32:70:69:6d:b9:7b:30:7c:81:9c:7f:bc:b7:72:
e0:6a:b5:d6:81:b5:91:aa:30:dd:37:a0:f4:73:0a:
f4:03:74:e0:0e:54:99:ac:e8:da:9a:30:5c:68:6c:
cd:f3:d8:d2:61:e5:11:e6:8c:76:4d:f0:2f:44:85:
b2:3f:9a:97:f9:b4:a7:06:d5:81:bd:c9:d5:0f:79:
79:ff:a7:b6:c9:1c:58:85:1e:5b:59:e8:f0:ee:f9:
c5:a2:37:ff:18:52:72:f7:5c:b0:c3:73:23:16:05:
2b:a3:07:38:78:9e:8f:e6:61:a6:ae:a1:41:a2:70:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:0C:D8:31:57:9E:9D:31:03:1C:A3:08:11:2B:EB:30:2E:EC:CE
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/9u8M2DFXnp0xAxyjCBEr6zAu7M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.205.0/24
91.202.200.0/24
93.188.135.0/24
148.253.34.0/24
148.253.36.0/24
148.253.41.0-148.253.42.255
148.253.44.0/24
148.253.47.0/24
148.253.228.0/23
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.239.0/24
148.253.246.0/24
148.253.248.0/24
151.249.92.0-151.249.94.255
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.84.0/23
163.171.87.0/24
163.171.93.0-163.171.94.255
163.171.96.0-163.171.98.255
163.171.101.0-163.171.104.255
163.171.119.0/24
163.171.126.0/24
163.171.166.0/24
163.171.176.0/23
163.171.182.0/24
163.171.188.0/24
163.171.198.0/24
163.171.207.0/24
163.171.222.0/24
163.171.224.0/23
163.171.231.0/24
163.171.249.0/24
163.171.252.0/24
194.107.19.0/24
IPv6:
2a01:53c0:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
62:1e:f8:d3:56:b1:5e:3a:23:df:e2:9e:5a:81:1e:e6:92:e4:
23:b4:1f:a5:03:2b:36:73:26:86:28:75:a9:25:c1:c4:b2:b4:
06:5d:97:78:6a:80:24:15:a7:92:f8:3f:5f:23:e9:da:4d:71:
2f:32:6c:e9:6d:a8:36:5e:36:14:ff:52:46:38:14:b6:94:86:
09:df:30:e1:c1:a0:dd:0e:61:d9:85:40:04:f5:ed:b5:82:e8:
52:a6:23:4a:95:7c:0a:b2:41:46:4b:60:66:cf:d7:82:48:56:
73:42:8b:38:d6:a3:3b:74:71:64:55:51:1d:30:47:d7:fb:77:
2d:18:db:00:36:bd:a4:b3:16:de:4e:db:68:4d:a7:43:ad:d1:
f2:c5:aa:33:c4:10:1d:ca:41:eb:8e:1f:8b:35:19:30:0d:19:
1e:e8:fc:e9:d6:79:65:48:cc:69:9f:f4:0a:80:30:7a:2e:42:
6c:a1:8c:20:d3:5c:d0:8a:a7:fb:23:b3:73:58:c5:77:50:d4:
48:07:46:13:bd:58:fb:8d:7a:7e:19:66:9c:f2:22:9f:bf:a0:
a8:cf:e0:8f:56:f7:27:25:47:37:32:c1:10:c7:9d:6f:e3:d4:
c6:cf:9a:a9:7a:ce:1c:d2:af:be:74:50:52:5e:1b:ab:b1:db:
f7:1f:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:54:31 2025 by rpki-client