Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/B8qalIvEM_PqEDnWDqSB3W1tYhI.roa
File: B8qalIvEM_PqEDnWDqSB3W1tYhI.roa (raw, json)
Hash identifier: my+j5Y+4cjh64KxJ+xIu7m5Zhm/ucB6OZLWNMeci76s=
Subject key identifier: 07:CA:9A:94:8B:C4:33:F3:EA:10:39:D6:0E:A4:81:DD:6D:6D:62:12
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018FA4375C88450B632E7097C543463A69A6
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/B8qalIvEM_PqEDnWDqSB3W1tYhI.roa
Signing time: Thu 23 May 2024 06:50:42 +0000
ROA not before: Thu 23 May 2024 06:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 45.94.14.0/24 maxlen: 24
45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.0.0/17 maxlen: 17
212.26.6.0/24 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/24 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 24
212.26.37.0/24 maxlen: 24
212.26.38.0/24 maxlen: 24
212.26.39.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/24 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.76.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
212.138.41.0/24 maxlen: 25
212.138.42.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/24 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 25
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 25
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.192.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.250.0/24 maxlen: 24
2001:1490::/48 maxlen: 48
2001:1490:1::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
2001:1497:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 06:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:37:5c:88:45:0b:63:2e:70:97:c5:43:46:3a:69:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: May 23 06:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ca9a948bc433f3ea1039d60ea481dd6d6d6212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:25:d4:e0:77:2b:1f:8a:fc:a4:a9:99:05:
2a:24:53:bb:f4:1c:77:34:d9:e1:5a:ce:bb:fe:e0:
ef:e4:13:8f:fa:d9:d5:9c:d6:8b:c8:91:f4:ac:15:
87:bf:7d:a6:6a:12:6a:34:bf:a8:89:5f:c9:10:4d:
d0:9f:5c:95:57:a0:08:58:80:8c:30:62:56:eb:b2:
33:65:2d:b0:f3:96:06:e5:f1:0d:5d:07:3d:20:8c:
d6:26:84:7c:7f:26:40:5b:fa:04:f7:41:a8:06:4f:
94:e7:d9:05:73:5b:c4:42:15:5b:51:87:1d:d7:ff:
d3:cf:73:b1:e7:58:64:02:24:1a:83:1b:2e:57:a2:
3d:ef:e9:e7:e4:b9:8b:a4:11:00:f2:2d:07:9b:48:
26:40:bf:b4:ef:d1:3f:13:fb:45:69:f2:ca:f9:45:
5d:0a:39:cf:89:1b:ed:89:78:33:b0:c2:b2:6e:23:
04:e3:16:75:32:48:bf:1d:77:f0:70:70:c8:68:ca:
6c:14:e8:45:a9:02:61:bb:19:00:cb:2d:8c:7e:a6:
f5:c2:cb:4e:11:6e:b9:97:fd:20:27:97:10:3b:70:
ce:4d:bd:c5:88:27:d0:73:fa:da:31:29:74:88:89:
26:fb:27:d0:40:19:2b:02:8c:36:69:31:1e:78:31:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CA:9A:94:8B:C4:33:F3:EA:10:39:D6:0E:A4:81:DD:6D:6D:62:12
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/B8qalIvEM_PqEDnWDqSB3W1tYhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.14.0/23
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/47
2001:1490:103::/48
2001:1490:106::/47
2001:1490:110::/47
2001:1490:113::/48
2001:1497:2::/48
Signature Algorithm: sha256WithRSAEncryption
15:02:a2:1a:71:ef:7c:2d:db:ec:80:80:ad:4e:08:58:2e:1c:
33:e9:e2:ee:af:20:6d:5e:0f:68:0f:4e:70:cb:57:70:e9:e6:
74:50:a8:7a:64:82:f1:1e:04:a8:53:fb:7f:91:b1:71:09:78:
6e:ce:91:d8:84:d5:a6:b3:51:00:a4:59:30:73:1f:ee:96:b4:
9d:01:c2:0a:71:26:bf:16:7b:d9:6f:e6:b5:ff:cd:19:e1:ed:
d2:0c:17:a1:11:b2:5e:a2:20:1e:81:7e:5e:12:82:38:55:e5:
9c:a9:53:ee:8b:5a:3e:f5:6f:fb:11:80:0f:f2:af:e2:9f:12:
47:75:c8:8b:30:39:83:b6:ac:aa:14:eb:1b:1c:a5:f0:7d:0a:
a2:38:f8:65:bd:64:2b:eb:dc:82:2f:2b:f9:61:4b:06:c0:37:
90:40:a1:91:a9:3f:85:14:dc:12:6b:a1:a9:2a:fb:8e:d1:c2:
e5:60:83:75:73:fb:9b:24:e8:2e:5d:f8:d7:27:0c:bf:10:5c:
c2:20:3d:95:8e:4e:6f:5b:d2:55:c4:8f:56:1b:c7:81:92:30:
1d:9b:78:28:2a:49:a5:af:fe:f1:55:31:d8:61:dc:11:fa:14:
53:32:a9:a1:b1:c1:ca:2d:98:cc:86:86:30:81:55:89:2c:2e:
0b:a2:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:23:28 2025 by rpki-client