Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W4Xr_fl6TCEFJm6LdPZMl64eYcs.roa
File: W4Xr_fl6TCEFJm6LdPZMl64eYcs.roa (raw, json)
Hash identifier: vb9exc124dPdda50tr/gunO8kyEUUvBlOz1fiHvLJRQ=
Subject key identifier: 5B:85:EB:FD:F9:7A:4C:21:05:26:6E:8B:74:F6:4C:97:AE:1E:61:CB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01955B881694E933840996F66B0530D4B86A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W4Xr_fl6TCEFJm6LdPZMl64eYcs.roa
Signing time: Mon 03 Mar 2025 10:23:20 +0000
ROA not before: Mon 03 Mar 2025 10:23:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.88.0/24 maxlen: 24
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 10:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:88:16:94:e9:33:84:09:96:f6:6b:05:30:d4:b8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 3 10:23:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b85ebfdf97a4c2105266e8b74f64c97ae1e61cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:91:bf:e5:b5:40:1e:ec:4c:02:67:f7:a9:
03:bf:fa:31:a5:a8:b9:08:ef:f6:d4:ba:1e:72:82:
29:32:5c:69:e8:00:df:9c:d6:b1:65:e6:c1:00:65:
ae:a9:36:b1:94:38:15:0b:d4:cc:73:26:f2:3d:08:
46:39:9b:9e:4f:10:4f:aa:59:5f:e7:2c:80:82:66:
9f:2a:ca:c4:e5:33:98:1a:23:e2:ca:18:6c:f7:b3:
58:17:55:8c:e3:fa:41:82:5a:82:3e:92:42:27:16:
e8:c6:be:33:7d:bb:f1:4a:cb:1c:a3:d8:26:04:91:
3a:9c:77:77:c7:56:c9:b1:66:6a:3b:c9:44:7c:f6:
98:a4:ec:4d:00:96:93:bf:9b:a9:de:c5:f7:fc:ad:
6b:15:35:5b:f7:f9:60:37:e2:a7:e9:c8:68:74:79:
77:d1:50:b2:bc:fd:ee:27:d1:ae:40:c1:09:ac:27:
ba:f5:86:85:b4:f6:56:65:a6:41:49:7c:13:cf:96:
d6:b8:0f:33:f8:f1:b9:4a:bb:fc:d9:df:4f:11:19:
a0:08:8f:0c:fd:0f:90:c3:96:1d:e4:2b:a1:09:3a:
51:ff:63:05:b1:4a:37:85:84:8f:ed:89:b0:11:4e:
13:e7:c7:12:9e:7d:e7:97:08:2c:07:7f:2b:9b:55:
b0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:EB:FD:F9:7A:4C:21:05:26:6E:8B:74:F6:4C:97:AE:1E:61:CB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W4Xr_fl6TCEFJm6LdPZMl64eYcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.215.0/24
213.218.226.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:1b:fb:30:41:10:50:b3:89:05:9e:e3:03:f5:67:46:30:e0:
a6:51:0a:54:92:5b:20:2e:c2:49:0f:7c:50:df:99:e8:47:53:
f5:58:46:cb:bb:bd:1f:40:f4:f9:ab:e8:b1:45:ae:20:05:c9:
bb:b0:6a:11:f9:22:fe:b8:29:a5:a9:4f:e1:79:97:c8:1c:44:
e5:c2:09:a4:b9:d4:be:0f:ea:d9:49:d4:3b:49:49:f6:3e:d6:
92:a4:30:a6:a5:e7:20:ad:38:95:b1:20:ad:02:ec:05:c3:74:
3f:b3:8b:02:40:fa:ea:c6:10:fc:31:5d:85:80:28:ef:c1:0f:
6d:5c:95:7c:38:7d:02:2f:2b:05:30:2d:e5:5d:95:42:0a:58:
d5:bc:a4:eb:06:31:48:fb:0b:f3:8b:31:7c:59:a1:2f:75:9e:
0d:f0:18:b5:8a:25:21:1c:a8:0a:47:bd:11:50:83:f7:82:1f:
0e:df:c9:b8:4c:48:0e:dc:7f:38:8e:99:29:76:50:8b:ee:ea:
ce:c8:14:57:57:b7:39:22:ef:5d:c8:8e:c6:dd:79:ef:ba:fd:
2e:ca:04:5c:c5:d8:c9:24:8a:06:44:e2:e3:6b:c9:d8:26:b1:
56:3c:d4:2b:60:18:14:d4:d4:15:20:de:d6:76:65:ac:b0:46:
8b:77:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:19:23 2025 by rpki-client