Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0gJHYL8wknQcxUMCsQLAV4-MOzI.roa
File: 0gJHYL8wknQcxUMCsQLAV4-MOzI.roa (raw, json)
Hash identifier: r8l2A8tUtOFw7hOGuA/fGTffWOKIfjTNTB5NUrNuTws=
Subject key identifier: D2:02:47:60:BF:30:92:74:1C:C5:43:02:B1:02:C0:57:8F:8C:3B:32
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01968092770D58B98E05B0B84571F4EAA03C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0gJHYL8wknQcxUMCsQLAV4-MOzI.roa
Signing time: Tue 29 Apr 2025 08:03:24 +0000
ROA not before: Tue 29 Apr 2025 08:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.86.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/23 maxlen: 23
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.135.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 14:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:92:77:0d:58:b9:8e:05:b0:b8:45:71:f4:ea:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 29 08:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2024760bf3092741cc54302b102c0578f8c3b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:48:63:2f:72:45:f5:31:c8:09:1b:74:c8:
66:28:91:9e:ba:62:1e:d3:50:b5:9e:63:bf:af:8a:
eb:7e:da:5a:93:ac:04:04:64:62:f3:77:7d:1a:7e:
69:26:ef:bc:2e:c6:19:77:67:44:29:62:44:9d:80:
d0:70:82:3f:75:fa:d8:29:fc:7d:ce:54:55:95:2e:
28:1c:1c:d7:e5:f3:84:65:79:c1:2b:54:ae:b2:1c:
fa:81:52:8a:35:82:cc:eb:d5:af:98:21:31:13:99:
9a:ea:11:3b:1b:25:c9:64:11:1c:23:a1:c2:68:c6:
1b:0c:a9:04:3b:81:e7:e8:ba:fb:b2:a0:7f:cf:b9:
99:a2:19:36:1b:ea:b3:c0:ca:46:8a:b0:75:67:85:
5c:7a:42:ad:53:10:0f:e4:c5:e9:71:28:ff:5e:b9:
22:18:77:c2:9c:a4:19:8b:19:2d:ee:20:a3:56:b5:
37:e4:37:6a:85:dd:1e:29:74:a3:59:78:2c:e0:8d:
c1:57:43:b9:f7:6b:e1:e8:6a:1b:1b:44:53:6a:84:
97:51:65:3e:2a:b6:b8:3d:aa:b7:ad:0c:78:37:1b:
1d:a3:da:43:cd:ff:49:fd:bf:8e:60:a8:34:86:3b:
0b:2f:f9:79:44:78:44:e9:62:cc:ac:7f:02:41:bf:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:02:47:60:BF:30:92:74:1C:C5:43:02:B1:02:C0:57:8F:8C:3B:32
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0gJHYL8wknQcxUMCsQLAV4-MOzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.224.0/23
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
32:91:09:5e:f3:9a:f7:94:85:ca:35:34:cf:17:77:45:e6:a4:
52:f7:dc:88:c2:13:9d:30:9e:7c:41:bd:8a:75:ce:4a:be:43:
2f:16:b4:91:cb:6c:b7:0e:5f:35:7c:6c:7c:44:cb:27:4a:0d:
21:17:0d:1a:f6:26:ef:f9:cf:e1:50:53:95:ef:84:42:dd:62:
ac:ef:e1:c4:bd:82:d2:e6:1b:be:00:b3:07:a8:37:b6:55:23:
5a:38:c3:18:e2:36:63:68:31:c2:99:6a:1f:35:0e:42:0b:e7:
80:2d:cf:47:3d:9f:a8:e4:f9:04:b5:25:69:4d:cb:c7:69:f5:
b4:df:9b:6f:46:bf:5e:ce:b1:fc:bc:fa:67:3c:e9:24:af:c6:
40:64:83:fb:81:75:90:57:19:18:f6:2f:5a:f4:83:c1:61:bd:
f8:0d:cd:9d:b3:8b:81:6f:7e:cb:18:7a:97:5d:fc:b9:ab:40:
c4:d7:28:37:2e:ac:8c:6f:1b:87:e2:a7:53:7a:33:a4:0d:c1:
6a:92:64:79:bb:82:89:53:3e:77:e5:db:cb:f8:88:8f:1b:5d:
22:b0:71:3d:13:87:01:5d:39:2f:24:d7:82:30:b7:2f:2d:ed:
29:6b:e2:07:db:b5:9e:f3:a1:91:25:9b:ac:3c:54:6a:81:4d:
d4:d4:5a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:25:13 2025 by rpki-client