Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3OKAJq3aOnC5B9_fF3NbRur7jWs.roa
File: 3OKAJq3aOnC5B9_fF3NbRur7jWs.roa (raw, json)
Hash identifier: cIHmKySc2y/GvtF2vZdRPHNJ44tFjn1FsYAGJ2HaCFY=
Subject key identifier: DC:E2:80:26:AD:DA:3A:70:B9:07:DF:DF:17:73:5B:46:EA:FB:8D:6B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019384168D8951EE00F5FBDC756AE2499F7A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3OKAJq3aOnC5B9_fF3NbRur7jWs.roa
Signing time: Sun 01 Dec 2024 21:18:10 +0000
ROA not before: Sun 01 Dec 2024 21:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.168.126.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 17:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:84:16:8d:89:51:ee:00:f5:fb:dc:75:6a:e2:49:9f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 1 21:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dce28026adda3a70b907dfdf17735b46eafb8d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:1d:10:00:9f:4e:bf:15:72:3b:46:05:16:
e7:09:28:fb:99:e7:af:cd:eb:aa:75:c7:c3:eb:45:
1a:0b:e7:9f:e2:fc:9d:73:7b:f4:af:00:cb:b3:bd:
8a:18:c9:10:08:fe:c4:0b:04:dd:37:75:00:38:be:
45:61:c5:5f:ce:0e:27:9c:29:45:a8:e5:69:2c:90:
98:51:61:9e:2d:13:56:32:84:14:7c:a0:b1:4a:25:
e1:2f:eb:26:15:05:3b:6f:39:8a:90:4d:f0:9a:1f:
61:40:33:b0:70:72:57:a7:dd:86:66:63:6f:f4:68:
b0:ef:c5:f5:3f:36:93:7d:cc:a9:28:34:4f:a3:76:
f2:bd:9d:e6:30:2d:f3:57:d2:df:72:d0:73:ed:d3:
c9:4b:7f:da:38:dd:c2:a0:5d:fc:16:5b:08:09:5a:
da:54:f3:d2:50:30:3f:84:67:01:62:19:93:a2:2e:
28:85:d4:2b:a9:c2:27:b3:f0:a6:7e:d9:a2:13:2a:
7a:93:b6:c7:d2:fc:67:11:c0:4a:cc:c2:2d:f9:ed:
ee:43:22:7d:dc:04:a8:74:4d:92:99:4f:5a:47:c5:
17:dc:81:a4:4e:fd:9c:16:30:6c:24:79:99:03:1c:
53:ad:97:37:97:db:28:79:aa:79:89:34:1b:3d:ee:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:80:26:AD:DA:3A:70:B9:07:DF:DF:17:73:5B:46:EA:FB:8D:6B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3OKAJq3aOnC5B9_fF3NbRur7jWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.210.52.0/22
213.218.210.0/23
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
21:c1:7b:92:ba:93:0c:5c:31:c4:fe:16:c3:b0:ab:76:29:3a:
67:5b:47:df:b0:ff:46:66:e3:ef:69:70:9d:7e:f1:3c:9e:c2:
8f:35:a2:5a:36:45:2e:d9:02:56:82:2a:a2:b9:35:7d:47:96:
d0:1c:e3:9d:6d:9d:35:0d:71:b5:44:2b:cb:4a:b2:ec:d2:12:
80:6b:9a:f8:20:1e:84:aa:53:41:d8:0b:6e:ce:ff:d3:96:ec:
89:c2:7f:5a:f2:c1:d8:e0:f2:5f:0b:92:6e:7d:20:43:5c:b0:
bf:c8:9a:08:b6:f4:b6:06:d2:fb:17:11:d9:fe:33:9a:23:61:
47:f8:8b:ed:7d:49:df:c2:a1:7b:98:cd:87:e4:23:e6:cf:aa:
02:e6:ce:54:3f:f3:f6:91:3f:f4:2b:f8:a8:7f:d0:d1:e3:8c:
d6:fc:dd:91:74:d9:ae:2c:61:90:4c:06:b9:a3:1e:f9:1b:f3:
b2:f1:df:e2:60:02:28:31:80:67:97:58:2f:b7:1e:6f:09:14:
60:b0:16:6a:09:c1:dc:2b:01:78:d9:14:be:b8:02:c9:9d:ce:
e9:d6:4a:db:b4:71:22:e1:b3:92:73:be:c1:7f:0d:f4:23:21:
58:8f:67:ef:20:82:13:40:e6:4f:85:1c:a7:70:5a:41:cd:fb:
9c:ae:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:10:11 2025 by rpki-client