Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ArWTaB4cZAtbi3dCACIuXVjVQx4.roa
File: ArWTaB4cZAtbi3dCACIuXVjVQx4.roa (raw, json)
Hash identifier: lHPtcaVJxYUMGjC3v0W4/NuI6+Gky3NICGH6L10l5tU=
Subject key identifier: 02:B5:93:68:1E:1C:64:0B:5B:8B:77:42:00:22:2E:5D:58:D5:43:1E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019497C6AAE73742E694739B58A97F250C4D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ArWTaB4cZAtbi3dCACIuXVjVQx4.roa
Signing time: Fri 24 Jan 2025 10:06:06 +0000
ROA not before: Fri 24 Jan 2025 10:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.7.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.222.0/24 maxlen: 24
82.153.228.0/23 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.196.0/24 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 09:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:c6:aa:e7:37:42:e6:94:73:9b:58:a9:7f:25:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 24 10:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b593681e1c640b5b8b774200222e5d58d5431e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:37:84:60:90:8c:19:1b:73:61:c2:6f:7f:
fa:95:32:8c:62:f7:c0:5f:af:16:8c:bf:ec:a1:58:
f8:51:e2:86:a5:cd:9d:ed:7f:7b:89:05:63:7e:8d:
60:60:4c:ce:0a:42:59:fd:94:12:9b:0e:88:0b:18:
ef:59:e6:36:2a:20:57:86:6e:25:d9:3b:b0:ef:ba:
00:0a:5d:37:90:32:db:ac:04:ca:b6:b4:c6:a9:f0:
67:39:e3:c2:6a:93:37:0a:3f:18:77:82:91:fd:b6:
7b:a9:33:aa:ff:cd:ae:7c:ac:a3:80:d8:eb:72:92:
44:c0:20:b3:ea:b5:8b:6e:c0:16:c9:24:1a:6d:a4:
80:a3:80:9a:f8:ff:46:a3:c3:a0:59:8c:20:2e:01:
d2:b7:4b:5c:4e:3e:79:59:00:2a:d2:c7:e3:ea:02:
ab:6e:ca:d1:ce:e8:af:34:83:c6:f9:fd:d2:ba:f1:
10:8c:e3:55:08:00:e7:33:68:96:ab:f2:36:57:f2:
f0:07:af:9b:a3:d3:ca:82:05:8a:95:44:fd:43:90:
86:84:d8:f4:da:48:e3:37:ff:19:37:86:cd:6e:f9:
df:ee:95:ef:b0:73:82:2e:a5:6e:af:10:cc:c7:17:
fd:dd:38:5b:c6:5c:b2:79:fb:eb:37:6c:2a:03:8e:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:93:68:1E:1C:64:0B:5B:8B:77:42:00:22:2E:5D:58:D5:43:1E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ArWTaB4cZAtbi3dCACIuXVjVQx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.7.0-82.152.8.255
82.152.176.0/23
82.153.136.0/22
82.153.222.0/24
82.153.228.0/23
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
85:57:ce:db:8c:bd:44:2e:ff:4e:a6:b3:6b:0a:df:f9:cf:8d:
7d:ed:99:2d:8f:64:2a:a8:94:77:2a:d7:cb:07:1d:77:21:04:
63:7a:ba:c3:05:da:9e:6b:16:d2:c5:33:28:73:f0:b4:9a:b5:
be:88:19:77:47:0e:f0:12:31:f6:e3:43:1f:30:fa:fc:31:50:
a3:a9:3e:a9:b9:0b:11:a8:84:24:d6:ca:db:9c:c0:ea:de:39:
5e:3a:40:3b:21:33:98:02:66:5b:65:7f:5a:6d:77:0c:14:51:
cd:c1:a6:f1:4d:67:8a:9e:07:a0:cd:4c:fd:94:28:68:34:78:
8d:40:9e:70:ef:75:02:c0:6c:2c:8b:55:3d:00:6e:bc:98:f6:
d3:4d:2c:4d:8a:e1:02:dd:a6:4e:fc:92:40:e8:17:41:d8:a0:
7e:4d:a9:e4:e4:e8:28:95:c0:36:ba:ad:64:49:b4:2e:72:38:
22:73:8d:da:9d:8b:16:b8:b5:64:f5:5e:9a:68:ef:7c:59:15:
fc:c7:47:80:85:ba:5f:13:8e:b5:4c:4a:c8:8f:97:71:35:8b:
13:13:a2:ad:2e:c7:67:76:b3:44:5d:ae:8a:60:31:8f:0d:a3:
29:49:c2:f7:14:03:7f:ab:a0:04:01:7e:e0:c9:cd:19:4a:88:
47:3b:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:22:21 2025 by rpki-client