Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2DABNsPgaa2a-rqcFTQEySfU2Fo.roa
File: 2DABNsPgaa2a-rqcFTQEySfU2Fo.roa (raw, json)
Hash identifier: YYhPSmbNssj2GgdDoq/vnyJTdxh1tUjPmnmE7k6/yyg=
Subject key identifier: D8:30:01:36:C3:E0:69:AD:9A:FA:BA:9C:15:34:04:C9:27:D4:D8:5A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196CA22A7B54B2B004A297085C5A4F0AF5E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2DABNsPgaa2a-rqcFTQEySfU2Fo.roa
Signing time: Tue 13 May 2025 14:53:10 +0000
ROA not before: Tue 13 May 2025 14:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.168.119.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 09:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:22:a7:b5:4b:2b:00:4a:29:70:85:c5:a4:f0:af:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 13 14:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8300136c3e069ad9afaba9c153404c927d4d85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:ac:ca:9c:98:32:10:23:9e:3c:52:d6:c3:
ae:b7:fa:4a:61:c9:25:0d:d2:37:63:5a:13:cf:b8:
74:11:02:4f:c0:83:6a:a6:08:07:c4:24:e0:d1:df:
df:8e:ac:0d:aa:bc:46:cd:7e:9f:7e:6b:c3:06:5f:
ce:47:bc:04:bf:87:28:3f:a8:c9:23:17:ef:a6:af:
1c:e2:72:c6:42:d0:92:54:88:bd:dd:08:63:07:93:
2b:2e:13:3c:b7:d0:e0:fe:ef:20:c4:1e:88:de:bf:
29:f7:de:93:d5:23:28:dd:89:0d:a9:a5:be:08:b3:
d4:30:26:2e:39:db:3e:3e:10:ee:e4:33:b1:1d:3a:
e9:db:45:e6:b3:fb:fb:82:2d:57:1a:92:84:c8:71:
20:59:7e:7b:35:3b:25:5c:3a:81:d4:ca:92:41:85:
3d:6a:27:85:32:0f:94:b2:7f:e0:01:62:de:52:af:
c4:7b:fe:fe:6a:bc:0c:2c:7f:76:8a:dd:82:09:ce:
de:a3:ad:12:33:99:5d:d2:56:98:d9:51:a6:ce:b1:
53:fd:61:a0:e3:f3:73:29:e0:4e:da:9d:63:ff:4d:
0f:43:fb:61:5d:51:1f:10:78:30:3a:f2:94:47:17:
8e:ad:ae:a3:e6:fe:7f:55:1d:16:bc:61:20:5d:40:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:30:01:36:C3:E0:69:AD:9A:FA:BA:9C:15:34:04:C9:27:D4:D8:5A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2DABNsPgaa2a-rqcFTQEySfU2Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.224.0/24
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.239.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
59:ca:24:ea:dc:21:95:c3:f0:bd:de:e7:84:03:d2:36:bd:a0:
0f:4d:e4:be:3d:81:89:40:de:eb:90:bc:fb:8a:f9:98:f1:d9:
9d:ed:15:26:00:5e:a7:cb:6e:26:91:4b:31:3d:f5:91:8c:9b:
d5:24:5c:32:f6:7c:eb:04:bc:b1:66:41:6e:a0:4b:24:5e:49:
dd:46:a2:01:08:68:67:0a:6f:2c:70:99:b2:bb:a5:c2:f8:78:
92:dd:69:a5:55:a0:21:62:fc:8a:c4:25:70:f4:f2:93:e7:bb:
0d:e6:3c:76:7b:76:49:27:5d:0e:d6:10:aa:6a:38:18:43:cf:
1b:de:28:85:9a:5a:26:6d:8f:b9:92:59:f3:ab:9d:bf:1c:b4:
cd:ae:cf:b2:f4:32:fe:d6:00:e3:37:3f:c7:a3:36:82:64:8b:
09:a9:64:8e:7f:4f:01:af:2a:c9:f9:e9:1f:6d:af:cb:35:16:
62:2a:4a:2e:03:2e:3d:f0:00:6d:ff:6f:81:11:13:39:b8:68:
38:7d:39:01:94:5e:e6:ae:fa:84:76:43:df:3c:c1:51:90:eb:
8b:2c:03:e5:17:77:4a:99:46:a1:b3:97:9a:59:7b:ef:c6:54:
b5:1b:a4:bc:95:da:b3:0b:e1:ce:08:40:99:74:33:07:93:27:
6d:8c:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:26:05 2025 by rpki-client