Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B2EfrggyAy3oQIYW_Yrh88LaWfA.roa
File: B2EfrggyAy3oQIYW_Yrh88LaWfA.roa (raw, json)
Hash identifier: A3TRvLJ7EhFOPPV2aUh5aq6usoVyNunvQkMax9tbIiI=
Subject key identifier: 07:61:1F:AE:08:32:03:2D:E8:40:86:16:FD:8A:E1:F3:C2:DA:59:F0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193F072435E0392C56BD5641BE8D749DE65
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B2EfrggyAy3oQIYW_Yrh88LaWfA.roa
Signing time: Sun 22 Dec 2024 22:17:20 +0000
ROA not before: Sun 22 Dec 2024 22:17:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 81.168.120.0/24 maxlen: 24
82.152.248.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.153.34.0/24 maxlen: 24
82.153.37.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
89.213.4.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.190.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
185.49.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:72:43:5e:03:92:c5:6b:d5:64:1b:e8:d7:49:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 22 22:17:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07611fae0832032de8408616fd8ae1f3c2da59f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:f2:d5:aa:69:1f:0b:dc:d2:4f:dd:bb:e3:
1e:0a:5b:20:21:11:fa:a6:53:64:ef:5d:f8:f1:89:
b0:33:6d:f5:03:da:fc:3c:70:33:a9:b8:0b:3c:b5:
8e:ce:28:cd:99:14:51:dc:45:27:98:4c:d7:98:bd:
f2:7c:94:52:b3:54:a1:06:0b:e3:a6:9f:95:4c:32:
f3:66:06:75:41:d0:3a:9c:99:f2:60:04:aa:fe:00:
33:73:f1:a0:18:00:3d:17:a9:40:06:6b:39:3d:b1:
ea:4f:e0:a8:4b:26:81:85:c1:ff:c1:f9:54:af:80:
06:25:de:f4:f9:41:85:dd:01:34:04:62:1a:fe:1a:
6f:17:be:82:93:10:41:4f:0c:bc:79:32:67:33:72:
9d:15:e6:fb:56:cf:8e:d3:b9:8c:fb:0c:1a:9c:e7:
3d:2f:89:e9:83:a4:77:c9:da:be:eb:a6:f6:37:61:
9a:00:0a:98:0c:30:8e:ad:ac:bc:b5:ef:b0:7e:bc:
2a:5d:51:1f:4d:4f:a8:10:ab:5f:8a:b5:de:27:d9:
bc:b6:d1:0c:f3:00:9a:64:68:05:91:bb:62:05:8f:
77:3e:63:c8:e2:ce:cd:c4:d8:03:06:11:d4:1a:b1:
de:10:0a:f6:6a:b7:00:1c:8f:29:5b:4d:76:5f:95:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:61:1F:AE:08:32:03:2D:E8:40:86:16:FD:8A:E1:F3:C2:DA:59:F0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B2EfrggyAy3oQIYW_Yrh88LaWfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.120.0/24
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.34.0/24
82.153.37.0/24
82.153.69.0/24
82.153.72.0/24
82.153.79.0/24
82.153.132.0/24
82.153.224.0/24
89.213.4.0/24
89.213.7.0/24
89.213.130.0/24
89.213.190.0/24
109.176.247.0/24
109.176.251.0/24
185.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
38:17:6a:84:24:ef:ad:c5:53:5f:f3:71:c7:c4:88:25:51:49:
07:9e:d3:3a:d0:a6:05:15:14:16:46:0a:10:e9:31:6c:6d:da:
74:6d:75:88:29:0b:74:ac:95:05:f9:11:16:1f:dc:11:91:71:
57:72:c4:cc:be:b8:90:c0:23:0a:26:8c:5c:05:3f:20:1f:6e:
3a:48:e2:37:13:8d:33:30:46:e6:ba:f8:25:a4:e5:c2:67:04:
bb:ee:73:9b:52:33:12:24:43:0c:97:5e:d5:be:60:94:17:3d:
27:d9:5f:54:c1:dc:5e:63:b4:0d:54:0c:41:92:63:c5:4f:fe:
29:a9:7e:a5:c6:cb:d1:5e:a9:59:57:09:90:95:25:cd:de:ce:
12:c6:29:1c:fc:03:3f:a5:44:da:bd:e9:b1:f5:9b:3d:38:a5:
f8:09:b5:16:a2:f9:f4:b0:36:58:69:5f:c0:66:a9:28:ae:8a:
49:25:28:8c:68:f0:66:7f:ae:40:d5:d6:50:de:5b:2d:27:99:
91:02:c2:cd:84:f6:8e:11:0b:8a:69:5f:9d:c3:47:c9:10:f4:
ce:5b:2a:28:cd:08:4f:77:00:e9:09:ec:7a:16:0a:73:2f:cd:
75:c9:5a:95:05:f8:cd:12:9f:e3:0a:11:4c:ab:3c:db:8d:e2:
3a:49:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:10:11 2025 by rpki-client