Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8xf43tQTk2JQRvNx9P8EHPTjymg.roa
File: 8xf43tQTk2JQRvNx9P8EHPTjymg.roa (raw, json)
Hash identifier: VtUq1qK44Q2Z2NgkGfhyanxumhWlNF26xXgSoHpjpss=
Subject key identifier: F3:17:F8:DE:D4:13:93:62:50:46:F3:71:F4:FF:04:1C:F4:E3:CA:68
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019122C3D4C735893314DDF69E130DA9AB67
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8xf43tQTk2JQRvNx9P8EHPTjymg.roa
Signing time: Mon 05 Aug 2024 13:39:04 +0000
ROA not before: Mon 05 Aug 2024 13:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 16:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:c3:d4:c7:35:89:33:14:dd:f6:9e:13:0d:a9:ab:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 5 13:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f317f8ded41393625046f371f4ff041cf4e3ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:1c:47:b9:64:68:02:bd:ec:cf:0f:94:82:
de:93:5c:fc:b2:32:4b:dc:c6:93:2e:ae:df:7a:3e:
65:c6:e2:e2:4a:15:e1:bf:96:13:73:8b:0c:b2:d0:
9b:3d:b1:42:f1:ea:b0:13:fc:48:fd:96:9f:d6:7f:
6f:11:46:3c:45:be:b3:53:16:a0:02:2c:c6:9c:8a:
c8:ac:b0:73:d3:98:ef:c1:a6:3c:18:5a:f7:db:07:
41:4b:0d:34:ab:04:25:1c:84:d4:f8:89:b4:0b:9e:
bb:3f:a2:5d:89:f5:60:56:84:3b:5d:a3:91:5e:0c:
4a:4e:7c:61:21:63:4e:77:87:53:91:96:c3:d5:2d:
b7:06:a7:52:54:04:10:1e:e0:19:87:98:5e:f4:73:
fd:a7:58:f6:00:33:9d:d3:21:5e:c9:82:50:62:0d:
f7:47:1a:fb:2b:73:5c:fb:1a:80:6f:f0:9b:19:c8:
ca:37:02:0b:81:7b:b8:36:dc:6e:11:8f:c2:b4:b5:
a7:65:9f:4d:0b:84:43:de:98:9f:39:1d:48:15:1e:
7e:a0:75:31:8d:8d:b9:da:e6:af:87:a4:73:67:7b:
ed:f5:d8:7e:40:32:74:46:ac:12:68:90:ed:c6:d0:
ed:73:88:00:00:a8:7a:44:0c:fb:49:13:29:64:61:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:F8:DE:D4:13:93:62:50:46:F3:71:F4:FF:04:1C:F4:E3:CA:68
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8xf43tQTk2JQRvNx9P8EHPTjymg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.50.0/23
89.213.56.0/22
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:10:cb:a5:c6:26:1e:13:dd:c8:73:59:c4:6c:2e:df:6b:7c:
b6:c0:1e:64:cf:dc:f4:db:93:f4:b1:49:a9:12:95:7f:51:f6:
f7:8e:1f:b4:1f:ee:34:6e:21:16:50:75:aa:26:52:7d:24:99:
d3:f1:4a:34:56:7d:bd:13:1d:cd:cf:87:dc:12:86:3a:6f:be:
2f:c2:1e:d1:b5:df:0a:a7:7f:e4:5f:70:41:66:5c:64:b9:66:
e9:08:49:83:00:b2:63:39:ab:cd:14:83:4b:33:d7:3c:2f:89:
40:52:ca:71:1b:e3:7d:46:18:c9:e3:04:74:d0:fe:41:4e:b7:
13:d2:26:25:2e:87:38:05:78:b8:94:fd:14:70:74:19:72:fa:
7b:f3:39:b2:47:aa:c5:35:73:78:82:80:18:27:9e:bd:86:6c:
76:99:c4:df:56:21:7c:b9:3c:91:18:2b:d5:1b:bc:43:3f:bf:
87:0f:82:12:97:66:12:76:84:0d:88:42:0c:fb:cc:c8:c3:74:
da:1a:f9:37:f1:e9:90:fc:48:58:76:e0:38:1b:ad:2d:9a:77:
25:60:c0:ca:dd:52:0f:a5:0d:6b:9b:04:8e:75:97:c9:62:22:
49:a0:b6:3f:5d:0d:01:87:eb:49:be:2b:e5:d4:d4:c2:52:85:
f9:1e:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:30:21 2025 by rpki-client