Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7yhoU-Hq1nLZgHbhD2Liee-Qylo.roa
File: 7yhoU-Hq1nLZgHbhD2Liee-Qylo.roa (raw, json)
Hash identifier: V16MXhlCn2Rk8E4svRiWwj2sX/JeItKQzcQLUSufO0Q=
Subject key identifier: EF:28:68:53:E1:EA:D6:72:D9:80:76:E1:0F:62:E2:79:EF:90:CA:5A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192777A3B348DC30A4F15B73AC4816BBB64
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7yhoU-Hq1nLZgHbhD2Liee-Qylo.roa
Signing time: Thu 10 Oct 2024 17:29:12 +0000
ROA not before: Thu 10 Oct 2024 17:29:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.23.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
217.145.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 08:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:7a:3b:34:8d:c3:0a:4f:15:b7:3a:c4:81:6b:bb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 10 17:29:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef286853e1ead672d98076e10f62e279ef90ca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:a6:8f:94:6d:d1:85:b5:b1:33:df:23:2d:
59:d7:72:06:7d:36:ba:0f:39:7f:b0:ee:32:cb:93:
ae:4b:06:f1:a5:3f:dc:27:1d:1a:5b:44:16:ab:d3:
51:cd:45:46:af:3f:c6:27:20:33:05:b0:81:b6:46:
56:d6:c2:9b:1e:11:fe:40:12:0d:71:5e:c5:32:cf:
22:1c:94:52:84:e2:ef:cf:9f:35:03:fa:95:74:ed:
4c:ea:2d:d3:a4:97:86:30:d2:65:d4:83:cd:a1:dc:
d8:d8:9a:ff:ea:ec:93:2c:9d:63:87:59:df:44:1f:
2b:35:43:22:7c:33:4d:5c:04:45:ec:95:bc:68:b1:
69:68:71:8b:ad:99:2c:d7:3e:1c:25:e9:30:22:0b:
f1:d4:44:09:fd:6c:65:00:3c:2b:82:83:3d:7d:0e:
75:a7:b4:ca:e8:62:dd:5b:d9:c7:e6:41:01:69:42:
f6:ae:7b:2a:36:e1:c2:cf:9c:a4:e3:0f:be:ef:b4:
88:b4:1a:d3:36:7a:6c:05:5d:f8:6c:80:29:0e:35:
6d:c1:27:d5:cb:96:17:03:c1:18:3c:cf:dc:b3:89:
58:9e:b1:70:a1:2f:66:41:be:af:eb:1a:ed:8d:97:
4e:9c:9a:72:78:c7:65:50:c2:0c:ce:b2:fd:7d:49:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:68:53:E1:EA:D6:72:D9:80:76:E1:0F:62:E2:79:EF:90:CA:5A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7yhoU-Hq1nLZgHbhD2Liee-Qylo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
61:76:f3:84:90:b4:ba:15:e3:c8:c0:eb:30:e6:95:6a:73:60:
4a:db:40:f4:15:b0:32:a5:b1:7a:9a:cc:d7:dd:f1:ed:52:cc:
28:10:0a:6a:26:c6:cb:4a:0d:02:de:0d:9d:f1:6b:97:ec:64:
1b:9a:4a:0a:8c:b6:b0:1b:6f:9f:dd:c4:f9:6a:9b:9e:93:ac:
c1:1b:29:d9:1c:47:33:41:df:a3:a3:83:e0:91:c2:16:1a:76:
0b:bb:cb:4c:9c:1c:07:dd:1e:f0:2a:7e:bd:ef:bb:b2:db:b6:
f1:22:05:15:be:d6:2b:21:ef:7f:08:11:b2:83:53:bd:4a:69:
9c:76:bd:f5:cc:47:3e:49:e5:71:bf:01:af:ae:a9:1b:96:d2:
8e:0f:95:d8:47:3f:23:e6:c6:1b:ed:44:9f:a8:7b:21:e4:a7:
6d:77:2b:7d:8f:ec:61:82:66:5a:af:bc:f0:81:22:60:9c:0c:
37:ae:89:7d:38:96:37:77:c6:ba:e4:f8:37:e4:31:d9:1d:44:
51:23:d5:7e:9c:38:7b:9a:73:a7:3d:8d:65:13:6d:96:fc:e3:
7f:ce:c0:58:63:75:a8:f0:ea:44:22:a9:73:66:59:65:56:49:
36:f9:0c:d1:d8:fc:e2:04:dc:b3:72:c7:f2:15:44:07:41:2d:
a5:90:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:21:36 2025 by rpki-client