Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UuF7Xr_zzPcsUs0jhfj3mF4QaGU.roa
File: UuF7Xr_zzPcsUs0jhfj3mF4QaGU.roa (raw, json)
Hash identifier: jp4Oj8zAq488Zm2qSFIFHue0Ur+c2JtdSUxKAULbO8g=
Subject key identifier: 52:E1:7B:5E:BF:F3:CC:F7:2C:52:CD:23:85:F8:F7:98:5E:10:68:65
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196A1B75D76B2D7A12C2DF0DC41E1D1BB9E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UuF7Xr_zzPcsUs0jhfj3mF4QaGU.roa
Signing time: Mon 05 May 2025 18:31:10 +0000
ROA not before: Mon 05 May 2025 18:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.86.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.203.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.135.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.41.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.210.58.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 09:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:b7:5d:76:b2:d7:a1:2c:2d:f0:dc:41:e1:d1:bb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 5 18:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52e17b5ebff3ccf72c52cd2385f8f7985e106865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:76:62:23:42:0b:94:69:31:9c:1d:92:10:
3b:06:dc:36:fe:91:af:e6:c5:90:7f:12:a5:9d:cb:
4d:2a:7f:5e:1d:d1:5f:a2:18:d0:3a:70:e6:33:9b:
38:97:2b:61:78:6b:dc:13:d5:53:d0:29:10:cb:73:
3e:cb:35:fa:dc:07:61:31:54:d4:32:1c:c3:42:8c:
84:cc:49:ca:29:a4:e8:d0:62:a9:23:28:fe:c9:80:
1e:b3:a3:e7:5f:7a:c5:53:ce:93:e7:4b:f8:8f:2d:
c8:34:28:14:e8:35:67:d7:ca:8e:c8:9a:14:3c:4a:
47:f7:5c:6c:c5:9c:30:e3:db:fa:69:cb:29:69:53:
e5:a6:22:30:1c:75:7b:e3:8a:c6:b0:40:fc:c3:09:
c5:cf:71:35:83:f1:36:a0:15:84:ed:12:4a:ba:90:
f4:e3:63:8d:1e:e0:02:39:d7:95:20:7e:fd:c3:ef:
2a:6d:5f:7f:3c:eb:bd:bc:9f:3f:ec:b1:0f:62:6e:
a0:76:a2:33:f8:cd:d1:1f:eb:38:d6:38:35:96:d1:
d5:37:73:f2:d3:45:8d:64:60:20:75:48:6e:0f:94:
68:5b:54:11:54:ac:2a:28:b4:f2:f7:74:04:b2:eb:
4c:8f:00:5b:6d:89:70:02:ec:a8:4a:c6:13:6d:be:
fd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:7B:5E:BF:F3:CC:F7:2C:52:CD:23:85:F8:F7:98:5E:10:68:65
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UuF7Xr_zzPcsUs0jhfj3mF4QaGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.224.0/24
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.203.0-109.176.207.255
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.41.0/24
213.210.52.0/22
213.210.58.0/24
213.218.211.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
48:d7:b9:8e:d5:b9:39:ee:10:4a:06:ac:8b:56:c1:09:7c:03:
13:ff:75:72:30:86:b1:62:f9:5d:a1:71:e3:1a:e0:87:2d:84:
57:45:0c:01:64:a6:96:ca:d4:26:fd:70:15:5c:aa:a3:e5:f4:
04:8f:85:51:e2:c5:13:fa:2b:10:db:70:f2:19:b1:b0:7e:8b:
3f:e6:ed:e5:97:82:fc:7c:56:81:9a:83:dc:8f:61:07:62:73:
eb:40:c0:39:78:37:c8:72:c0:10:71:3a:0f:f9:fd:4d:bd:6e:
7b:fb:1e:bd:d3:f3:f4:b4:f6:0a:b7:2f:91:d9:29:91:26:c3:
e6:dc:71:1d:72:06:d9:89:34:47:11:a0:f1:1a:12:b8:03:4a:
f0:78:dc:a7:58:34:ea:34:c9:13:a9:22:69:96:ac:9a:4c:aa:
b4:5f:9d:7d:20:20:22:83:c1:7b:06:5e:4a:41:21:d9:1c:71:
53:2b:a7:7c:88:c4:c5:5e:8b:70:2c:2d:89:1a:a3:cb:cd:d8:
0c:45:13:6f:1d:7f:25:d5:70:70:ef:d9:f6:eb:1c:d3:5f:69:
61:ef:b7:f7:db:dd:dc:d6:54:6f:36:7c:15:e2:86:b5:a4:d2:
a8:75:f2:d2:c6:38:5f:2b:30:f8:66:61:66:53:18:b0:35:0a:
55:31:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:31:28 2025 by rpki-client