Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/8DL0kecPvPBVqt7hFfN83JpqbWw.roa
File: 8DL0kecPvPBVqt7hFfN83JpqbWw.roa (raw, json)
Hash identifier: 2Ely60+7lsh6ZOlS8NqdwnJWZFlt+R058w/5InXvkxw=
Subject key identifier: F0:32:F4:91:E7:0F:BC:F0:55:AA:DE:E1:15:F3:7C:DC:9A:6A:6D:6C
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0196AA00A27006DF8168C2E4A1873DFDBA95
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/8DL0kecPvPBVqt7hFfN83JpqbWw.roa
Signing time: Wed 07 May 2025 09:08:10 +0000
ROA not before: Wed 07 May 2025 09:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31515
IP address blocks: 161.30.0.0/16 maxlen: 16
161.30.5.0/24 maxlen: 24
161.30.7.0/24 maxlen: 24
161.30.8.0/24 maxlen: 24
161.30.9.0/24 maxlen: 24
161.30.10.0/23 maxlen: 24
161.30.10.0/24 maxlen: 24
161.30.12.0/22 maxlen: 22
161.30.16.0/22 maxlen: 22
161.30.20.0/24 maxlen: 24
161.30.22.0/23 maxlen: 23
161.30.28.0/24 maxlen: 24
161.30.29.0/24 maxlen: 24
161.30.33.0/24 maxlen: 24
161.30.40.0/23 maxlen: 23
161.30.42.0/23 maxlen: 24
161.30.44.0/23 maxlen: 24
161.30.112.0/23 maxlen: 23
161.30.114.0/23 maxlen: 23
161.30.115.0/24 maxlen: 24
161.30.116.0/23 maxlen: 23
161.30.118.0/24 maxlen: 24
161.30.119.0/24 maxlen: 24
161.30.120.0/24 maxlen: 24
161.30.121.0/24 maxlen: 24
161.30.124.0/23 maxlen: 23
161.30.126.0/23 maxlen: 23
161.30.128.0/23 maxlen: 23
161.30.129.0/24 maxlen: 24
161.30.130.0/24 maxlen: 24
161.30.155.0/24 maxlen: 24
161.30.163.0/24 maxlen: 24
161.30.164.0/24 maxlen: 24
161.30.165.0/24 maxlen: 24
161.30.166.0/24 maxlen: 24
161.30.167.0/24 maxlen: 24
161.30.169.0/24 maxlen: 24
161.30.171.0/24 maxlen: 24
161.30.176.0/20 maxlen: 20
161.30.193.0/24 maxlen: 24
161.30.194.0/23 maxlen: 23
161.30.201.0/24 maxlen: 24
161.30.202.0/24 maxlen: 24
161.30.203.0/24 maxlen: 24
161.30.220.0/24 maxlen: 24
161.30.221.0/24 maxlen: 24
161.30.236.0/22 maxlen: 24
161.30.236.0/24 maxlen: 24
161.30.237.0/24 maxlen: 24
161.30.238.0/24 maxlen: 24
161.30.239.0/24 maxlen: 24
161.30.240.0/24 maxlen: 24
161.30.246.0/24 maxlen: 24
161.30.250.0/24 maxlen: 24
161.30.251.0/24 maxlen: 24
2a11:ae00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 07 May 2025 09:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:00:a2:70:06:df:81:68:c2:e4:a1:87:3d:fd:ba:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: May 7 09:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f032f491e70fbcf055aadee115f37cdc9a6a6d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:38:33:3b:27:bf:56:fd:99:4e:cf:d1:76:
84:6c:d1:12:76:22:c9:e4:b3:38:fc:e7:eb:43:f2:
d8:96:db:03:0a:68:b6:d2:7f:78:ff:df:ad:73:f6:
da:fe:db:6c:9e:68:77:f8:1c:5a:c4:60:50:83:19:
d7:6c:0a:36:07:d0:3f:2d:d6:be:c2:d3:6e:a3:83:
35:cf:0a:24:91:f3:fd:42:ff:f8:56:4a:cc:31:97:
d6:c5:36:13:8a:96:ed:40:3f:06:10:42:2a:e9:f3:
46:3b:44:cf:00:04:db:09:e8:1e:b9:bc:46:2b:dd:
ea:76:1c:ac:d1:24:1a:27:a8:9c:e0:b3:c5:2d:5a:
b4:ee:f6:bd:82:1e:77:ef:4b:e2:de:2f:75:3a:a5:
fa:60:cb:01:27:e1:c4:34:d0:38:2f:7f:73:72:86:
23:4e:db:b5:e8:1a:e9:44:59:e3:40:c7:43:38:21:
ee:aa:26:a9:b8:24:c4:af:05:c2:49:f7:a1:e7:65:
3a:6b:ed:55:96:1d:29:21:0b:c2:1a:60:f5:cd:6a:
74:1c:ad:69:46:df:6f:56:05:b8:76:4a:ca:8d:5b:
9f:a7:fa:a0:fb:83:fc:6e:40:e2:4a:fd:ba:44:d9:
36:d0:df:fc:e3:f8:21:2e:62:be:b0:1d:39:75:bd:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:32:F4:91:E7:0F:BC:F0:55:AA:DE:E1:15:F3:7C:DC:9A:6A:6D:6C
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/8DL0kecPvPBVqt7hFfN83JpqbWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.30.0.0/16
IPv6:
2a11:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
12:fd:86:31:1a:86:5e:05:dd:98:93:79:14:e2:53:f1:2c:cf:
0d:f1:5d:93:b0:d0:a2:06:35:d0:4b:a0:ca:11:34:97:07:00:
ef:3e:9e:9e:c3:8e:93:4b:ed:8d:65:0a:b0:63:9d:be:3f:e1:
06:77:77:cb:e7:c3:6b:cc:d8:8e:b6:f3:66:be:50:df:4d:ae:
08:2d:b0:b0:c2:29:e2:68:5f:5d:d3:14:67:08:f9:d4:a8:2e:
ea:cc:33:4c:9e:27:f0:78:49:41:31:66:83:d1:ff:d7:3c:de:
aa:ec:b6:ed:6c:96:4b:b8:06:89:79:14:5b:a7:ac:8c:35:fd:
92:46:bd:48:ba:d2:2b:bf:58:c0:e2:51:f8:c3:b9:e1:8d:5e:
b0:8c:33:88:e1:8e:a6:16:1a:92:21:4b:e8:5a:5d:c5:fd:1e:
45:50:83:5c:7d:ae:e7:f8:17:4d:da:fc:db:82:c2:9d:cf:13:
f4:4a:6c:c4:be:3c:bb:37:ee:6d:d8:e6:81:8e:e9:bc:2d:9c:
7b:d9:30:b9:9d:a6:31:1c:be:40:3b:e2:28:0c:57:b7:ca:d8:
cb:91:14:84:2d:e1:d4:95:1d:0e:3b:f3:ab:9f:c4:28:60:55:
c9:2e:21:89:58:87:c9:52:99:44:3c:6b:a3:84:dd:75:58:ba:
61:1f:b6:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:23:01 2025 by rpki-client