Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2MMRvtdrPybNqTtRNBdXyf_6BJg.roa
File: 2MMRvtdrPybNqTtRNBdXyf_6BJg.roa (raw, json)
Hash identifier: yTPfJkDK52x05zImCjKJlbOtUd4ux5J6a4QeZBTPyGA=
Subject key identifier: D8:C3:11:BE:D7:6B:3F:26:CD:A9:3B:51:34:17:57:C9:FF:FA:04:98
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194D0F99C220BBF87965DC127B132D7B9A7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2MMRvtdrPybNqTtRNBdXyf_6BJg.roa
Signing time: Tue 04 Feb 2025 12:40:06 +0000
ROA not before: Tue 04 Feb 2025 12:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.196.0/24 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 16:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:f9:9c:22:0b:bf:87:96:5d:c1:27:b1:32:d7:b9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 4 12:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8c311bed76b3f26cda93b51341757c9fffa0498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:c9:23:22:b7:af:59:6d:d7:a9:e8:9a:76:
02:02:18:66:92:a5:30:8c:cb:08:5e:f0:62:51:6e:
78:55:a0:94:93:7b:d8:90:ab:d0:5e:1f:8b:04:ba:
7b:23:82:ba:12:3c:b6:d5:d0:02:02:ac:55:75:6b:
60:18:5d:cf:36:b8:56:db:db:87:10:0b:4f:e8:5b:
50:a1:fc:62:2c:36:8c:96:4d:c6:6c:c7:2a:f1:d5:
1f:1e:83:91:ae:53:5b:58:76:85:a8:98:35:38:b9:
71:6a:08:ea:99:e8:97:12:cb:77:8d:96:1f:f9:4a:
e6:b1:13:e0:dd:d0:61:17:9a:38:99:f7:d1:34:c0:
ee:c7:32:34:ae:98:e5:38:5f:07:f3:7e:54:ba:61:
8b:c1:8c:9a:1a:df:7b:ba:c1:f7:2d:f3:2c:c0:36:
93:b5:e1:e0:8b:a8:8e:54:b5:6e:7e:f3:cd:e5:f8:
7c:25:c7:f5:c2:1d:c9:f8:43:1c:10:e1:d3:4c:64:
f8:82:a9:db:74:9b:0a:fd:83:60:bd:7e:ff:73:63:
81:18:8d:34:71:57:5a:1d:2c:ec:04:b1:27:4b:c0:
6c:a4:40:9e:81:a2:0d:90:7e:d2:9c:4c:9b:7f:27:
7f:36:59:ae:69:5b:79:bb:88:89:63:fd:c6:d1:d1:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:11:BE:D7:6B:3F:26:CD:A9:3B:51:34:17:57:C9:FF:FA:04:98
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2MMRvtdrPybNqTtRNBdXyf_6BJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.50.0/24
82.153.69.0/24
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:8c:8e:9f:79:21:c2:02:e7:1a:9d:82:b1:5c:7a:40:34:10:
9a:89:c1:fb:35:c8:98:90:58:fd:de:bb:42:51:77:64:b6:c4:
2b:a7:80:43:ae:b1:01:2f:82:62:5b:8e:b8:3c:b4:ac:dd:99:
43:26:ea:56:18:e6:aa:2d:47:93:8c:e7:20:08:e7:14:c9:ad:
15:1c:b5:56:09:9f:d0:c3:d0:47:4c:1e:62:23:b8:97:f3:76:
18:b9:5d:0e:fe:ca:98:1e:52:32:41:a4:fb:12:f2:b1:2e:fc:
cf:d6:77:5d:df:b8:56:41:57:d1:2a:28:be:cc:0f:0e:d3:32:
e5:6c:46:27:bd:a9:78:29:9e:52:60:2d:d3:ac:f2:e2:ad:67:
be:6f:68:e1:c3:5d:39:78:db:76:89:5b:bc:66:92:30:6a:7e:
1c:07:1c:63:6d:19:0b:82:43:ce:ee:f9:a8:4c:23:dc:d2:20:
37:16:68:3b:97:cb:92:4e:5e:ce:16:59:f8:65:27:d9:7c:c8:
6b:29:5d:eb:d0:a6:9c:bf:02:c5:33:26:68:46:25:01:f1:de:
21:b0:a0:31:db:4a:da:bb:b2:5d:6a:52:8a:c7:9c:9a:65:2c:
26:4e:8b:9e:05:f6:92:49:ab:d1:33:a4:51:f6:d8:1a:9f:ac:
d4:7a:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:10 2025 by rpki-client