Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8mbRu2AkZOLfB1GZtqEK0tnSgN0.roa
File: 8mbRu2AkZOLfB1GZtqEK0tnSgN0.roa (raw, json)
Hash identifier: h0IfznZhwMQDgLmNNFnx31jQM7grstg5/V7snjEwcgA=
Subject key identifier: F2:66:D1:BB:60:24:64:E2:DF:07:51:99:B6:A1:0A:D2:D9:D2:80:DD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019258B76E0F6BE8301EFD452834913B73D8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8mbRu2AkZOLfB1GZtqEK0tnSgN0.roa
Signing time: Fri 04 Oct 2024 18:07:49 +0000
ROA not before: Fri 04 Oct 2024 18:07:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.220.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.229.0/24 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.23.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.243.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 12:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:58:b7:6e:0f:6b:e8:30:1e:fd:45:28:34:91:3b:73:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 4 18:07:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f266d1bb602464e2df075199b6a10ad2d9d280dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:73:b4:f3:bd:1f:aa:7a:e2:25:db:85:a7:
d6:24:9a:2a:ea:09:72:68:b7:a9:10:48:21:0b:94:
be:82:1c:82:f8:dc:a2:1e:fa:d9:13:bd:2d:3c:47:
f9:3b:5d:aa:df:e7:24:29:a8:7c:44:b0:30:96:aa:
f2:c8:52:d1:6d:c0:2c:1a:58:c2:54:3e:df:1f:04:
94:3a:e0:4c:d9:7b:37:a7:ee:74:65:b6:cf:f6:82:
aa:68:d3:ca:e7:ee:8f:38:c9:95:ee:92:de:0e:fc:
46:5c:20:33:22:67:2a:bf:e0:3e:8b:43:b4:fe:4d:
27:38:ee:c7:a6:ed:c8:70:6d:5e:42:76:b0:06:52:
07:2f:08:8f:69:0e:aa:63:a5:ad:60:18:29:d4:ce:
10:7f:bf:3a:99:4d:cb:cc:f6:86:bd:08:75:2b:41:
49:05:ae:97:6e:9f:18:7c:b2:98:de:64:97:13:66:
61:42:4c:0f:a8:df:e5:40:9a:a3:a3:96:75:51:86:
a6:aa:80:11:c5:02:d6:2b:0b:cb:8a:34:d5:2c:2b:
6c:2d:e2:6d:47:f3:29:a8:46:6e:7d:25:26:f5:0f:
c5:5c:59:83:9d:b8:75:bb:68:5c:f5:93:ca:1a:f0:
87:21:e1:95:ad:81:9e:c6:48:b9:62:2e:b6:d0:74:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:D1:BB:60:24:64:E2:DF:07:51:99:B6:A1:0A:D2:D9:D2:80:DD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8mbRu2AkZOLfB1GZtqEK0tnSgN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.153.220.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
63:8c:47:14:b3:1a:ce:8f:c6:4b:14:42:1b:e9:c3:f0:d8:c7:
a2:1a:e4:e4:a1:08:a9:0d:cd:31:f8:2e:0c:eb:ab:fd:4a:4f:
7f:a0:0d:e5:62:41:41:36:52:93:84:fb:88:76:54:29:8b:01:
3f:9b:76:f9:40:3f:97:f1:38:c9:a4:ed:33:02:36:75:bb:a4:
bc:37:79:62:38:2a:30:c6:ec:d5:f0:4a:c8:84:60:86:4e:cd:
14:ff:35:e2:9e:a9:44:dd:2d:b9:33:0f:ad:a8:9e:77:85:a8:
46:21:39:89:d9:e6:71:7b:71:33:57:1f:36:ee:f2:fd:e3:7e:
bc:e9:1f:41:80:de:20:78:08:c9:83:c9:c5:3e:49:50:f3:d7:
de:32:18:85:06:00:e9:ae:92:55:e1:99:1f:04:38:c9:7e:ee:
57:7e:e6:be:56:7d:56:57:c5:f6:e0:94:ea:5e:53:3b:a5:af:
07:3b:64:90:06:37:20:d1:72:8a:cd:e8:e1:1e:aa:bb:22:39:
95:a1:0c:4c:5c:7a:45:9e:75:7f:27:09:db:8e:4f:a4:74:f4:
6d:09:8e:c6:da:11:d2:ba:9e:ab:16:9f:58:f2:13:2f:68:9b:
64:15:e3:c1:ad:08:39:eb:e3:5a:55:de:32:95:86:4d:af:9c:
27:48:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:33:32 2025 by rpki-client