Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JyXU1kFJ_Xb8TdtZx-Kkim614UA.roa
File: JyXU1kFJ_Xb8TdtZx-Kkim614UA.roa (raw, json)
Hash identifier: 7Ht4VN5iadANgJcV0RxcaHe7lyA80AXLYbFpWQTCAcM=
Subject key identifier: 27:25:D4:D6:41:49:FD:76:FC:4D:DB:59:C7:E2:A4:8A:6E:B5:E1:40
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01951A0706A99B54B0CD2FBE290F2BDB4C74
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JyXU1kFJ_Xb8TdtZx-Kkim614UA.roa
Signing time: Tue 18 Feb 2025 17:07:02 +0000
ROA not before: Tue 18 Feb 2025 17:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 12:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:07:06:a9:9b:54:b0:cd:2f:be:29:0f:2b:db:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 18 17:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2725d4d64149fd76fc4ddb59c7e2a48a6eb5e140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:ff:ec:30:fa:24:5c:ad:38:5c:11:db:f2:
88:fd:3f:ea:32:1d:43:4a:e1:69:9f:7d:e8:22:b3:
6a:5c:e8:03:f0:d7:31:4e:0a:18:de:40:05:d1:d8:
fc:45:77:58:4e:fc:8b:58:3d:f0:7d:be:3c:67:a1:
a9:c0:36:c8:7a:a4:f5:f4:dd:67:87:9a:6f:4b:c3:
e9:ef:48:16:4c:83:ab:bc:cb:9d:f6:2e:e3:e0:3a:
34:c8:72:7a:ac:5f:3a:69:3d:66:6a:56:90:38:1a:
46:46:57:54:37:ef:fb:7e:f0:fb:1c:d2:92:ec:af:
02:a9:d9:36:74:ac:89:92:8c:44:63:fc:11:1e:d0:
d8:48:52:ea:5c:4d:99:ba:94:fe:c6:55:60:c1:ca:
ee:d0:ec:f7:c4:d1:5e:30:ec:98:ac:02:a5:9b:01:
4b:b8:a6:4c:cf:77:34:92:59:f9:21:9b:f2:14:43:
4c:f3:bc:90:42:14:6b:13:22:05:e8:ad:05:72:4f:
f7:5a:17:8e:66:29:8d:f4:e2:6f:14:35:08:be:25:
38:9e:b7:83:f5:a4:0f:f0:5c:c5:6f:9b:45:75:e1:
d7:3c:74:58:4c:de:35:39:8e:76:b2:71:c4:ee:69:
70:22:67:78:e4:4c:1c:c6:d9:6f:e7:6e:b5:8d:72:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:D4:D6:41:49:FD:76:FC:4D:DB:59:C7:E2:A4:8A:6E:B5:E1:40
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JyXU1kFJ_Xb8TdtZx-Kkim614UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.215.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
14:89:b9:c4:ee:15:2d:4e:e2:75:3b:03:c6:ab:c7:c0:b7:00:
43:c2:03:e4:86:da:76:fb:8b:a9:bb:85:e0:ed:e3:37:a1:a7:
12:16:b0:6e:c0:bf:6c:a2:9e:8c:81:c4:e4:77:05:b2:59:d6:
43:f0:ba:dc:5a:c2:b2:87:be:81:8a:d6:4e:96:65:89:8c:87:
81:7f:0c:f9:24:24:48:5b:8a:15:3a:7b:75:e3:53:91:f8:49:
fc:bc:93:e6:8a:08:6e:63:03:8d:e9:e1:2c:69:0b:88:5f:6a:
1a:00:97:36:c3:1e:cc:85:b8:a0:78:96:37:85:35:f5:40:10:
9f:62:68:e5:f1:c7:88:ec:45:d9:49:45:e2:4e:94:f8:db:e5:
2a:5a:03:4b:9f:a7:43:46:fe:f5:da:45:21:59:00:c0:34:e8:
af:aa:de:08:28:91:16:51:46:b6:53:c4:ea:6e:ef:26:7d:21:
db:d0:f0:6e:47:7e:bc:f9:a7:f7:fe:4b:2e:b5:aa:f3:77:84:
01:74:99:5d:27:88:8a:41:6e:11:60:cd:53:1c:61:d8:e0:83:
ba:cf:a9:c5:0e:21:dd:25:3b:47:60:bc:1e:97:51:b4:bf:c9:
20:bb:b6:04:7b:33:76:f7:48:ea:ed:f7:f1:eb:87:5e:6f:9a:
8f:63:30:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:30:35 2025 by rpki-client