Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6aFtYlhzXFFMpGaGwlBeCgU-kB0.roa
File: 6aFtYlhzXFFMpGaGwlBeCgU-kB0.roa (raw, json)
Hash identifier: rL6pmcepiJNK53NXSzgqe6cPGiLk277igsGfY8prV3o=
Subject key identifier: E9:A1:6D:62:58:73:5C:51:4C:A4:66:86:C2:50:5E:0A:05:3E:90:1D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FBE356AEF46F30AAE74853A86D7858C46
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6aFtYlhzXFFMpGaGwlBeCgU-kB0.roa
Signing time: Tue 28 May 2024 07:58:42 +0000
ROA not before: Tue 28 May 2024 07:58:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
89.213.248.0/23 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.16.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 14:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:35:6a:ef:46:f3:0a:ae:74:85:3a:86:d7:85:8c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 28 07:58:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9a16d6258735c514ca46686c2505e0a053e901d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:e7:a5:df:92:58:8f:69:52:45:23:60:ee:
ab:2a:81:97:74:ca:49:d5:c0:03:3c:a7:7e:99:e5:
36:20:37:7e:b7:9f:dc:be:4b:d4:18:47:5e:a1:c5:
cc:71:21:48:0a:5e:cb:09:75:51:cc:36:c2:3e:26:
66:cc:3b:12:b4:f2:10:03:15:58:9c:f0:9d:6c:70:
69:9a:1f:26:9c:73:ff:96:bb:69:db:49:0f:37:6a:
a5:12:6c:00:ef:a5:3a:e4:d6:13:03:65:7e:a3:d1:
8b:b5:5b:64:c5:dd:6f:6e:08:fd:2c:72:6f:de:3e:
a8:dc:0c:ff:01:b5:f5:57:a3:ab:69:c4:11:18:fe:
b3:62:76:df:11:c0:5b:d8:c5:94:6c:61:37:9d:6e:
35:22:52:d1:e5:15:97:cf:5a:b4:1a:ba:c7:ed:44:
0d:b6:53:45:cf:e2:f6:6b:1b:d6:e5:2c:31:ef:ff:
81:22:ae:f9:99:a3:c6:92:df:60:7a:a0:ed:b5:e9:
c7:3d:5b:07:3f:05:25:95:91:72:d4:a0:32:24:d6:
ea:69:36:00:c1:a2:9f:15:74:44:6b:99:ff:1d:1c:
b9:97:95:7b:d0:dc:c2:1d:aa:ac:90:88:e5:2e:4e:
5b:75:f8:f5:23:c1:bf:ba:cb:19:5e:68:d6:ad:90:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:6D:62:58:73:5C:51:4C:A4:66:86:C2:50:5E:0A:05:3E:90:1D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6aFtYlhzXFFMpGaGwlBeCgU-kB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
89.213.248.0/23
109.176.16.0/21
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:72:6c:c7:dc:0a:cf:a0:8c:73:7c:ea:98:fd:a4:1c:96:a2:
c0:a4:c0:eb:62:c7:0f:9e:76:ed:70:2f:24:e3:b9:d6:a1:b5:
9b:ce:0c:98:4c:1b:1f:39:a7:d0:27:d7:91:f3:6c:f2:54:37:
6c:64:04:bc:43:50:34:ff:95:5c:0b:16:3d:88:59:4b:37:c0:
0c:1b:b7:2f:d4:b0:06:bd:e9:a8:1d:e0:7c:c9:2c:ec:c5:0b:
e7:3b:db:e4:5f:4f:21:3d:c2:43:5a:37:84:8d:c8:03:cc:c2:
0b:1f:fc:8f:21:a7:7f:2e:c0:50:a7:41:d2:4b:8e:eb:49:ea:
53:ca:f4:ac:88:d2:0f:68:93:b2:e8:06:c3:0a:7d:12:2c:6a:
22:7d:2d:83:fa:d3:51:e0:65:11:a4:d2:09:e4:f7:5d:72:cb:
60:47:9b:4e:73:4c:f9:8f:dc:3e:da:45:b5:48:44:df:32:ae:
3a:9d:b1:65:90:77:d0:55:25:7d:b9:4b:10:3d:11:05:8f:e4:
cd:64:9b:1a:1c:66:75:59:61:cb:5d:7d:6a:4a:b1:f9:ab:aa:
3e:f4:b0:cb:fb:9c:6e:3a:8c:35:91:7c:c9:cb:84:a3:14:86:
4c:8a:08:a9:c8:c1:a4:88:2c:e7:0b:3a:19:78:e2:a6:19:d7:
15:51:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:22 2025 by rpki-client