Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zhdX36P4fhVbwEZFsLz0NIwYzKc.roa
File: zhdX36P4fhVbwEZFsLz0NIwYzKc.roa (raw, json)
Hash identifier: 0YtKPOfIKqH/6uOmXV8LYiGtCirfCYPAtGqmlWjjbJk=
Subject key identifier: CE:17:57:DF:A3:F8:7E:15:5B:C0:46:45:B0:BC:F4:34:8C:18:CC:A7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019686A6A64F1B5E9CA5D2FA40E85B8721A1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zhdX36P4fhVbwEZFsLz0NIwYzKc.roa
Signing time: Wed 30 Apr 2025 12:23:10 +0000
ROA not before: Wed 30 Apr 2025 12:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.86.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.203.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.76.0/22 maxlen: 22
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.135.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 16:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:a6:a6:4f:1b:5e:9c:a5:d2:fa:40:e8:5b:87:21:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 12:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce1757dfa3f87e155bc04645b0bcf4348c18cca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:c7:eb:86:e6:45:ba:9b:88:39:64:90:da:
2f:d5:42:c1:11:71:74:af:03:b9:fb:c1:03:40:95:
17:5c:1a:c5:2b:d6:d6:01:74:24:08:00:b7:40:1a:
5f:71:3b:3d:8e:43:71:df:cf:b7:13:3a:bd:a9:05:
39:1e:43:72:e2:30:23:f7:08:ca:72:af:b0:e5:da:
31:e4:30:65:f5:1d:85:0b:2d:5c:c1:c5:7e:3f:66:
64:29:7a:9b:2c:df:76:ac:92:c6:70:37:e8:e3:31:
4c:d1:2f:85:22:28:45:b1:75:bf:4e:af:44:94:18:
ec:b1:12:d4:5e:03:9c:63:ca:6a:6b:7d:02:7b:f1:
e9:ef:24:90:a7:5e:06:60:a2:4d:03:9b:fb:1e:ba:
3f:3c:4d:78:8d:3d:a2:fc:86:cb:65:0a:1b:69:b6:
fe:c8:95:e3:5d:59:6c:df:dc:dd:20:d6:06:a8:13:
3b:51:8d:d3:ee:92:82:61:c4:2f:76:6c:12:62:a2:
a3:6f:da:9d:8e:91:dc:45:f1:d5:8a:fc:35:d7:62:
d5:95:9f:3c:0e:2c:8f:cc:bf:2d:da:23:1b:90:ea:
09:42:2f:31:b3:cf:4d:8b:a1:3c:70:56:8c:fe:52:
1c:a5:49:47:5e:2d:0d:00:ff:a7:41:33:37:e2:67:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:57:DF:A3:F8:7E:15:5B:C0:46:45:B0:BC:F4:34:8C:18:CC:A7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zhdX36P4fhVbwEZFsLz0NIwYzKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.203.0-109.176.207.255
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.76.0-194.105.95.255
212.38.79.0/24
212.38.81.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:80:0a:96:68:e7:e2:11:06:84:f6:ef:e9:15:74:a1:ce:90:
16:1b:81:6c:13:f6:47:c2:fc:8d:46:b1:f7:58:67:01:a3:16:
95:1a:a2:75:13:b4:42:31:4a:e6:fd:71:bb:5e:1c:1d:94:ae:
25:70:03:52:57:2d:01:1d:1d:90:e4:05:d6:6c:49:30:ad:12:
20:29:5c:37:2c:04:8d:e9:56:4d:81:c0:1d:76:6e:6f:f3:49:
6c:60:84:f1:bf:48:2b:c1:1d:57:1f:b1:30:21:bd:a4:ac:90:
77:61:d4:73:73:7c:e4:e0:15:8c:bc:de:38:f0:6e:98:1b:a1:
ff:bb:f3:59:9f:57:16:88:60:ff:68:9b:9f:52:c2:17:04:68:
4b:31:bc:54:aa:33:26:d9:24:51:a1:04:91:dc:d1:ed:db:d7:
94:8d:1c:3b:20:7e:c7:68:e5:2e:37:46:b1:34:86:bb:36:7a:
82:7c:bf:43:b1:c0:d7:7e:13:aa:0b:9f:7d:ce:2c:b1:aa:75:
c8:d2:cf:c5:a0:be:ed:b6:ed:fd:cf:2f:fe:f0:ca:36:ed:a9:
f0:d9:1f:c3:51:15:41:67:4f:a5:4d:d1:6d:42:c5:16:c7:b2:
01:11:49:8e:11:3e:e1:73:98:2d:bb:9c:a3:9a:30:02:11:a4:
cc:8c:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:30:18 2025 by rpki-client