Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6_QJVeQci-vhjVjrJAja28sRpTc.roa
File: 6_QJVeQci-vhjVjrJAja28sRpTc.roa (raw, json)
Hash identifier: DB2r/n/tlUSE7mytDC8QhW/HNsJXP83sZDl121yqQ4c=
Subject key identifier: EB:F4:09:55:E4:1C:8B:EB:E1:8D:58:EB:24:08:DA:DB:CB:11:A5:37
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01943B9EA12DB35374BA9A5A74EC8A83C410
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6_QJVeQci-vhjVjrJAja28sRpTc.roa
Signing time: Mon 06 Jan 2025 12:37:19 +0000
ROA not before: Mon 06 Jan 2025 12:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.220.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.212.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 15:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:9e:a1:2d:b3:53:74:ba:9a:5a:74:ec:8a:83:c4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 6 12:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebf40955e41c8bebe18d58eb2408dadbcb11a537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:45:cb:61:d1:36:13:f1:7b:99:5f:d5:67:
fb:a1:5f:34:95:39:bd:41:8c:89:9a:f0:b9:a4:73:
72:3c:31:e5:9d:63:cc:92:6e:09:19:28:fb:1b:4c:
50:23:a5:ce:19:84:9d:03:4b:6f:c6:e2:bc:86:fd:
d1:da:c7:30:b7:bb:9d:58:16:e7:f1:b4:83:d0:fe:
42:09:3e:e4:cb:c3:de:18:6e:39:ec:8d:77:d5:39:
16:7a:9e:51:2f:51:ff:12:79:16:47:0f:37:c0:3a:
5b:a0:05:2e:ae:72:2b:ca:6c:b6:30:c2:4f:29:ae:
b0:f0:89:39:43:31:ec:40:80:59:59:84:57:06:55:
05:72:27:6c:6c:72:2b:e4:1f:44:7c:7f:8d:af:50:
d2:05:77:08:11:c3:c7:4e:65:e5:17:80:eb:7e:bd:
91:08:51:81:53:f7:81:f1:c4:f8:eb:aa:ed:c5:66:
b0:e0:c9:3f:13:51:2e:09:b8:f2:82:6a:c7:7a:f9:
0e:7f:11:af:be:e7:2b:b0:3f:7c:15:a3:d5:01:b7:
8a:31:32:20:67:d5:fd:70:59:ec:ea:91:1a:78:a3:
30:bb:7e:14:41:80:04:8c:56:e9:0c:64:fb:cf:87:
4b:6b:93:b8:03:a1:3d:f2:94:05:dc:96:95:7f:47:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F4:09:55:E4:1C:8B:EB:E1:8D:58:EB:24:08:DA:DB:CB:11:A5:37
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6_QJVeQci-vhjVjrJAja28sRpTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
82.153.220.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.172.0/22
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.210.0-213.218.212.255
213.218.215.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
31:c1:7a:04:99:98:53:3e:9e:f4:19:95:8f:85:25:fc:33:77:
29:5c:51:ec:b6:9b:f0:47:27:96:5f:0b:9f:e7:72:d3:e3:d0:
a6:a4:df:75:94:29:31:d3:bd:66:7b:dc:14:4a:ce:7f:dd:2a:
fe:cc:fa:d6:36:7f:c5:f3:0d:68:98:09:7a:30:3a:b3:88:fa:
dd:80:ac:0f:2c:03:76:65:5e:e7:5a:26:08:9d:7d:61:1f:42:
8e:c8:79:bd:79:e6:64:de:16:cd:fe:bd:59:55:74:9f:fd:4f:
a9:fb:f5:bf:8e:71:a5:ac:5e:01:24:91:eb:df:ab:aa:cd:5d:
fa:3f:80:4a:00:86:21:85:71:b0:d6:ba:85:67:4b:93:f4:d2:
8e:cf:21:55:0a:42:c6:65:1f:df:02:dd:44:21:37:1b:8a:70:
15:eb:a4:75:68:78:d4:a4:af:5b:fa:20:06:ab:15:3f:51:62:
18:e5:cd:7c:0d:7e:5a:21:41:aa:4b:f6:7a:90:0e:ab:63:ca:
e1:b8:96:40:22:95:39:3a:21:0d:07:f3:75:c5:74:d6:c7:f0:
67:23:7e:03:79:ba:cf:a5:a0:7e:e0:b8:87:31:15:db:f3:2e:
85:b2:22:1f:be:56:bf:2a:e0:66:f5:bf:46:57:e3:5c:08:29:
ba:ac:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:30:46 2025 by rpki-client