Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/A1Vupp2QJGVcH4I6ByR_76ccSPw.roa
File: A1Vupp2QJGVcH4I6ByR_76ccSPw.roa (raw, json)
Hash identifier: RTDezkRF+mpwF3Pzkqcgrff98umJYZONtg/k4I8bVto=
Subject key identifier: 03:55:6E:A6:9D:90:24:65:5C:1F:82:3A:07:24:7F:EF:A7:1C:48:FC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189B5AECA4BC22BCAC8CAD53545ADD0C365
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/A1Vupp2QJGVcH4I6ByR_76ccSPw.roa
Signing time: Wed 02 Aug 2023 09:57:58 +0000
ROA not before: Wed 02 Aug 2023 09:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.152.111.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.186.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.187.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.213.0/24 maxlen: 24
109.176.210.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
82.153.65.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.241.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 16:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:ae:ca:4b:c2:2b:ca:c8:ca:d5:35:45:ad:d0:c3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 2 09:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03556ea69d9024655c1f823a07247fefa71c48fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:f1:97:73:20:5b:4c:b2:af:03:12:46:f6:
b2:24:82:a6:26:b2:43:c1:d5:9e:3e:1b:b3:8e:38:
29:97:c5:da:af:b3:5a:85:96:5a:4c:0f:db:db:55:
97:45:46:32:ab:c3:20:f3:b9:31:88:2d:09:05:53:
58:42:ae:7e:02:62:6d:d7:69:88:62:4e:a8:a7:9e:
ab:2d:79:ba:bb:db:5a:6c:ca:23:bc:5e:3a:32:2a:
e8:8c:8b:a8:09:9b:72:c8:6c:82:65:82:3e:86:e7:
79:78:1c:82:62:45:0e:0f:69:7d:b3:21:3a:dc:80:
a6:35:e2:e9:29:61:c2:81:f3:e0:33:7f:81:6d:6b:
12:86:55:ca:14:c9:7e:2d:48:30:44:67:6a:1a:51:
09:fd:ec:1a:99:02:8a:52:ab:35:dc:38:91:ac:7d:
0a:79:33:d0:4b:76:82:36:02:90:6e:91:33:3d:79:
e9:c5:cd:8c:82:9a:e5:e1:22:94:ad:7b:e7:e1:a3:
18:26:c7:6b:5c:f4:e3:57:23:32:46:3c:6a:7c:19:
77:e9:8e:96:52:66:09:6c:bc:35:fb:2f:72:41:e5:
f0:10:8f:b9:3c:96:9a:50:e0:9d:b8:d9:24:b3:3c:
ae:bb:23:be:0f:ea:c1:d5:f0:b5:cb:61:b5:2e:a5:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:6E:A6:9D:90:24:65:5C:1F:82:3A:07:24:7F:EF:A7:1C:48:FC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/A1Vupp2QJGVcH4I6ByR_76ccSPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.65.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.223.0/24
82.153.240.0/24
82.153.249.0/24
89.213.6.0/24
89.213.136.0/24
89.213.139.0-89.213.140.255
89.213.152.0/24
89.213.168.0/24
89.213.173.0/24
89.213.176.0/24
89.213.180.0/24
89.213.182.0/24
89.213.184.0/22
109.176.210.0/23
109.176.213.0/24
109.176.240.0-109.176.242.255
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f9:36:41:63:2e:22:f5:c5:dd:69:67:6d:8f:24:97:88:f4:
88:6c:8c:a1:ad:d0:5a:38:2a:e7:a5:30:27:07:8b:e3:fd:d8:
ad:56:e5:a0:eb:c7:a2:45:35:21:82:82:42:4b:1e:ef:fd:13:
45:18:e0:d1:8a:98:8b:14:ee:71:cf:14:a3:cc:fd:a8:3c:b8:
76:9a:61:9e:d0:40:cf:52:63:64:22:90:7e:0a:61:8e:88:96:
d8:4b:51:43:38:9a:80:99:1a:7a:3b:5e:6b:65:42:94:49:de:
49:7c:e1:a4:89:5f:fc:52:cf:bd:8e:59:8e:7a:e6:4b:3e:ce:
95:cd:5e:b1:8c:10:ba:8b:ae:f1:fb:ca:ee:5f:69:14:d3:0c:
0b:75:08:80:79:ad:e3:6f:2a:f2:c9:fa:b8:f7:8b:0b:f4:f0:
2a:89:c0:c7:e0:5b:3a:6f:c7:4e:c0:95:09:d5:a4:0c:b2:31:
25:f2:15:e0:fe:64:1c:e1:03:17:fd:6e:2e:eb:3d:e3:b9:ae:
98:72:38:77:73:07:b6:fe:b4:c4:63:47:63:ef:16:c0:77:8c:
3f:0b:c4:a0:1e:1a:ff:c8:5d:c5:c8:87:94:e2:a7:c5:13:15:
9c:d6:63:a1:43:22:f1:2a:2f:ba:23:69:1d:ae:76:ae:4d:d9:
61:bb:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org