Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bEcD933TTEqotHA-NXOErZiIFAE.roa
File: bEcD933TTEqotHA-NXOErZiIFAE.roa (raw, json)
Hash identifier: 1gB+Tb5lQ5pFQ23u6lEMn/QOI5ubHID7OS/p9bcLX6s=
Subject key identifier: 6C:47:03:F7:7D:D3:4C:4A:A8:B4:70:3E:35:73:84:AD:98:88:14:01
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196A1B1E018C914D92E7DC6952E2AAB23AB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bEcD933TTEqotHA-NXOErZiIFAE.roa
Signing time: Mon 05 May 2025 18:25:11 +0000
ROA not before: Mon 05 May 2025 18:25:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.86.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.203.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.135.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.41.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 18:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:b1:e0:18:c9:14:d9:2e:7d:c6:95:2e:2a:ab:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 5 18:25:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c4703f77dd34c4aa8b4703e357384ad98881401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:4d:bd:7d:29:e5:d7:30:4c:54:1a:02:06:
5d:32:65:7b:fb:96:a1:31:9f:75:31:17:db:e9:25:
5b:16:59:0b:e2:75:3d:91:2a:19:ca:07:fc:5d:f5:
91:4c:59:b0:56:16:ed:16:3d:93:80:16:30:bd:74:
7b:9d:ad:2e:9c:51:41:d1:a0:35:31:66:4a:eb:ae:
e8:e7:ae:77:eb:c9:be:2c:6c:00:15:e9:55:29:44:
ab:28:f6:18:03:9a:69:b4:ee:74:c7:6d:d0:48:aa:
c6:fd:f5:ec:7f:df:d4:01:e4:cf:89:0d:38:93:2f:
4a:cc:af:65:a4:2b:fd:74:cc:23:25:58:ef:ad:0b:
8c:7b:a6:7e:91:f1:dd:cf:d9:e8:29:aa:35:94:ba:
aa:8a:54:13:22:af:b6:24:2a:49:23:ec:e0:fe:b8:
d7:19:30:a6:6e:38:19:b4:1a:ae:06:a9:d1:79:16:
8e:30:1b:21:ef:76:bb:25:92:2d:03:1a:ef:f6:07:
c9:d0:3b:f5:d9:f3:3d:ad:84:c5:f0:39:23:c5:f8:
5a:e5:f8:bc:66:8e:ef:2a:7b:bd:88:a5:d5:2a:70:
e5:e5:0a:a5:bb:f6:e4:bd:18:c4:00:41:04:26:7e:
ea:b6:6d:66:a0:c9:04:c8:3f:28:f7:bb:c1:ed:c4:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:47:03:F7:7D:D3:4C:4A:A8:B4:70:3E:35:73:84:AD:98:88:14:01
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bEcD933TTEqotHA-NXOErZiIFAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.224.0/24
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.203.0-109.176.207.255
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.41.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
61:1c:39:59:a7:ad:17:e6:d3:0d:a0:1a:06:6c:50:84:d3:60:
d4:a9:fd:31:2b:84:32:8b:e6:ff:43:22:7a:ea:f2:c9:33:98:
25:6b:f0:b1:0a:dc:f0:f5:14:aa:c7:96:8d:68:69:6a:1b:7d:
5e:45:d4:2a:49:16:53:06:77:65:0e:05:fd:04:c2:18:f7:83:
dd:14:3a:62:b4:83:11:aa:c1:ec:30:a1:00:d1:b2:b6:83:65:
c1:a7:ed:b8:42:c1:9c:e3:b9:99:d5:7c:ba:02:72:05:c4:02:
dd:7f:d2:76:5b:67:58:02:a4:d3:3f:4e:d8:d5:3d:5a:28:8e:
b7:ee:e8:92:fe:29:d2:bf:ed:31:d4:37:94:df:7f:d7:99:bc:
0a:e4:ee:f8:42:ca:98:da:a0:88:34:e5:6e:b3:1d:51:fd:cd:
b7:9f:3d:f9:64:0b:87:82:c1:d0:88:7e:a6:8f:48:d0:8f:54:
5e:6d:ca:b9:47:25:c2:92:0e:a2:54:53:a2:6c:66:aa:c1:27:
33:c9:82:df:e5:6c:5c:ca:24:90:7e:37:ce:fb:bd:84:58:92:
13:2d:5e:05:af:c8:1f:ff:09:76:27:a8:f2:3d:82:66:d9:81:
09:18:2e:4f:f1:36:2c:20:55:e4:6e:b1:9d:10:2a:4a:66:04:
5f:d2:6e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:19:17 2025 by rpki-client