Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/8r-VBwFs2DTHrHtCapTQAdOT9fQ.roa
File: 8r-VBwFs2DTHrHtCapTQAdOT9fQ.roa (raw, json)
Hash identifier: bsFIJG5sHZmMH3EwHxoOaohfuFdqjsCgvF8aFWWo4Xc=
Subject key identifier: F2:BF:95:07:01:6C:D8:34:C7:AC:7B:42:6A:94:D0:01:D3:93:F5:F4
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 01963340630B6AC08D35993C56BA80C690AD
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/8r-VBwFs2DTHrHtCapTQAdOT9fQ.roa
Signing time: Mon 14 Apr 2025 07:42:59 +0000
ROA not before: Mon 14 Apr 2025 07:42:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5391
IP address blocks: 31.216.192.0/19 maxlen: 19
31.217.0.0/17 maxlen: 17
31.217.0.0/19 maxlen: 19
31.217.32.0/19 maxlen: 19
31.217.64.0/19 maxlen: 19
31.217.96.0/19 maxlen: 19
46.188.128.0/17 maxlen: 17
46.188.128.0/19 maxlen: 19
46.188.160.0/19 maxlen: 19
46.188.192.0/19 maxlen: 19
46.188.224.0/19 maxlen: 19
78.0.0.0/16 maxlen: 16
78.1.0.0/16 maxlen: 16
78.2.0.0/16 maxlen: 16
78.3.0.0/16 maxlen: 16
83.131.0.0/16 maxlen: 16
83.131.0.0/18 maxlen: 18
83.131.8.0/24 maxlen: 24
87.252.128.0/19 maxlen: 24
87.252.128.0/20 maxlen: 20
89.172.0.0/16 maxlen: 16
93.136.0.0/16 maxlen: 16
93.137.0.0/16 maxlen: 18
93.137.128.0/18 maxlen: 18
93.138.0.0/16 maxlen: 16
93.139.0.0/16 maxlen: 16
93.140.0.0/16 maxlen: 16
93.141.0.0/16 maxlen: 16
93.142.0.0/16 maxlen: 16
93.143.0.0/16 maxlen: 16
93.159.64.0/19 maxlen: 19
178.160.0.0/17 maxlen: 17
188.125.0.0/20 maxlen: 20
194.152.192.0/18 maxlen: 18
194.152.198.0/24 maxlen: 24
195.29.0.0/16 maxlen: 18
195.29.0.0/18 maxlen: 18
195.29.64.0/18 maxlen: 18
195.29.128.0/18 maxlen: 18
195.29.192.0/18 maxlen: 18
2a00:c30::/29 maxlen: 29
2a00:c30::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 15 Apr 2025 11:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:40:63:0b:6a:c0:8d:35:99:3c:56:ba:80:c6:90:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Apr 14 07:42:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2bf9507016cd834c7ac7b426a94d001d393f5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:89:c7:8d:49:66:bf:80:6c:15:4e:ee:f8:
78:00:49:03:5e:83:a0:35:b3:53:4a:94:26:19:20:
4d:b6:53:5f:53:5c:73:6c:d7:7d:1e:44:8b:f1:59:
b6:f5:dc:18:bb:06:69:c5:f9:a7:d9:db:cb:98:a4:
0e:e7:1c:c4:76:31:d7:87:2d:1f:e6:d3:5f:5c:5f:
a4:fb:de:93:e3:5a:16:5a:bb:56:9f:6a:4f:9f:13:
0f:2c:07:3d:6e:d7:c7:b6:68:58:fd:c4:d6:2a:91:
00:42:97:94:58:78:bf:63:cf:d9:9b:da:e3:bc:2f:
60:61:c4:92:bd:24:eb:14:cb:81:94:42:e9:75:8e:
f5:84:2c:85:56:ca:49:4b:81:84:e6:5d:8d:66:07:
e5:03:7c:90:49:ef:51:da:56:35:00:fa:57:8d:f3:
c0:81:3e:72:3e:9c:48:e2:31:a3:04:7e:2e:1e:19:
fa:d5:f0:e1:e0:8f:47:77:1e:31:d3:8e:ef:0a:72:
50:97:e6:e3:ca:22:fb:e0:d6:84:f8:0b:84:23:e9:
97:23:3d:ac:4d:28:25:50:8a:8d:1e:b0:0d:9c:22:
5c:55:d6:62:11:9c:1b:ae:88:34:ae:0d:d7:1b:b5:
f2:4a:e0:25:2a:19:e1:b0:d3:58:c9:dd:ff:2e:ff:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:95:07:01:6C:D8:34:C7:AC:7B:42:6A:94:D0:01:D3:93:F5:F4
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/8r-VBwFs2DTHrHtCapTQAdOT9fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.192.0/19
31.217.0.0/17
46.188.128.0/17
78.0.0.0/14
83.131.0.0/16
87.252.128.0/19
89.172.0.0/16
93.136.0.0/13
93.159.64.0/19
178.160.0.0/17
188.125.0.0/20
194.152.192.0/18
195.29.0.0/16
IPv6:
2a00:c30::/29
Signature Algorithm: sha256WithRSAEncryption
64:a6:72:19:9c:5d:39:ed:9c:b3:15:d5:0f:37:cf:b0:17:0d:
4e:59:e3:70:c6:f0:ce:e0:6c:fc:1d:a3:9e:7b:da:59:2d:d5:
f1:f8:69:a0:c2:1e:d7:57:39:a8:6f:63:d0:02:6d:93:e7:9a:
c4:aa:48:21:d0:ce:be:f8:de:3d:6d:06:e0:d1:c1:51:fc:0d:
df:29:7b:32:00:4e:6d:d4:5c:3c:7b:28:2a:14:ba:98:9d:a7:
a7:93:8c:b4:aa:ee:10:4c:22:7e:38:c2:f8:4a:a4:db:78:b8:
f8:df:9c:ee:ee:d1:ed:21:69:a4:66:57:ba:6b:3b:7f:9d:47:
4a:34:73:74:d5:f5:bb:27:74:3e:92:5c:b2:70:57:a7:bf:f2:
30:78:7a:9c:f8:c8:2b:de:13:cb:08:b6:bb:ca:1c:04:77:21:
db:3f:85:c9:41:b7:85:35:b9:ce:d9:7e:4d:1e:89:84:aa:65:
dc:34:78:0a:4b:1c:bd:d0:39:f5:ab:9b:0c:2c:6d:b8:65:ed:
dc:28:a8:fc:78:bf:e6:65:8a:80:37:c7:ba:b1:a4:f1:70:e5:
59:6a:8f:15:07:9d:b6:9b:9a:19:4e:52:9f:1e:a3:f4:4c:ac:
cf:ec:e3:95:13:c7:b7:cc:73:a3:e1:50:6c:95:15:82:bf:fb:
0f:50:e3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:19:00 2025 by rpki-client