Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/94_RA6yos1tbiFSDqN3eTRZo8E8.roa
File: 94_RA6yos1tbiFSDqN3eTRZo8E8.roa (raw, json)
Hash identifier: e1R7XxPg7brIM1DCDfyWQ62demlB5vIt5dbFJmzETgI=
Subject key identifier: F7:8F:D1:03:AC:A8:B3:5B:5B:88:54:83:A8:DD:DE:4D:16:68:F0:4F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196820D49A0B4B2C188032FBB73529A22B6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/94_RA6yos1tbiFSDqN3eTRZo8E8.roa
Signing time: Tue 29 Apr 2025 14:57:10 +0000
ROA not before: Tue 29 Apr 2025 14:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.86.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/23 maxlen: 23
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.203.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.135.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 12:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:0d:49:a0:b4:b2:c1:88:03:2f:bb:73:52:9a:22:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 29 14:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f78fd103aca8b35b5b885483a8ddde4d1668f04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:18:ce:d9:80:5b:64:c1:91:6d:90:b6:ba:
00:18:ce:17:f6:3d:c9:63:63:2b:fe:59:32:8c:1e:
bf:ea:30:bc:5b:53:c5:65:06:70:6e:c8:d8:d2:2f:
3e:2c:15:c8:52:ba:f2:1d:1b:6f:33:22:f5:11:1d:
2d:40:d2:f6:d1:7e:f5:1e:19:4a:3e:50:86:66:b0:
80:5e:47:66:55:75:3d:c6:f8:b4:92:6b:bf:f6:24:
37:bc:4e:01:db:e2:58:72:23:8e:ad:e7:fa:f9:ed:
b5:9f:3c:4d:0e:f5:53:75:c6:1b:43:93:82:4d:60:
bf:40:17:a8:9e:4d:90:a1:66:25:86:1b:79:75:d7:
18:22:a2:dc:cf:50:a2:72:7e:22:0d:54:8c:3f:59:
73:78:ad:25:58:64:9b:75:1c:35:3f:a6:58:e0:58:
de:83:bb:d4:50:70:5f:7a:85:b0:a2:a2:2e:47:5e:
6c:4d:9a:f5:93:9a:1e:e4:9e:8b:de:b0:fd:cb:f0:
98:06:4a:2e:3c:d7:f8:b7:65:e0:e4:c7:11:db:a8:
e2:01:7a:db:c4:c4:3c:cd:f1:6e:cd:28:ea:4d:0c:
ac:c9:ed:19:a2:1b:3f:83:7b:9d:33:d0:49:42:88:
f7:16:2d:eb:af:6f:15:77:7f:d0:dd:d3:62:c8:10:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8F:D1:03:AC:A8:B3:5B:5B:88:54:83:A8:DD:DE:4D:16:68:F0:4F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/94_RA6yos1tbiFSDqN3eTRZo8E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.224.0/23
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.203.0-109.176.207.255
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:6c:b9:08:8d:0c:d4:f1:81:09:3c:ab:3a:26:c7:2b:d6:a0:
8c:24:42:cc:5b:63:23:5e:c5:8d:61:26:91:82:31:7a:c6:dd:
fa:1b:eb:0d:3b:a6:2c:f3:63:07:31:f0:75:0b:49:bc:34:86:
e7:b8:24:22:74:41:95:8e:a3:3e:55:e0:6e:4c:f0:63:79:dd:
36:18:5c:19:61:b0:76:7f:22:d2:cd:7a:0d:93:e8:9e:f4:0b:
7d:2e:db:40:0c:b2:78:cd:96:06:b7:f7:20:bf:14:71:c5:c0:
b1:38:6d:2e:05:a7:39:f5:3c:f0:0c:94:10:ff:05:4f:3c:3c:
d7:eb:26:a8:6e:e6:0e:d5:ea:c6:3f:3f:e2:f6:4f:ad:c3:a8:
ee:36:2e:e9:d3:7d:b1:d7:5a:4f:5f:66:c8:26:a5:6b:f1:ee:
6c:f5:da:72:20:b6:73:60:c2:8d:6f:cb:7d:c5:8e:08:39:c0:
42:ca:e0:91:77:f1:11:95:ff:bb:36:e2:1f:39:55:36:44:76:
58:85:6d:dd:89:45:70:87:31:13:20:bc:30:5f:4e:9e:82:f2:
ea:0f:d2:bb:f8:28:3c:52:23:6f:43:ca:cf:20:23:cb:77:d8:
58:ef:1c:63:e4:3c:69:ce:d6:d2:4b:39:cc:f2:6d:5d:a8:87:
69:ef:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:33:47 2025 by rpki-client