Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BIfk-iQuMKLomIkAl5R0cw3EBvQ.roa
File: BIfk-iQuMKLomIkAl5R0cw3EBvQ.roa (raw, json)
Hash identifier: JKH0fcJvCQqtiAo6AFdBwcC507UiebCyj/8erRq+gPs=
Subject key identifier: 04:87:E4:FA:24:2E:30:A2:E8:98:89:00:97:94:74:73:0D:C4:06:F4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FB3C99264E02DA3098D698557DCEE7531
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BIfk-iQuMKLomIkAl5R0cw3EBvQ.roa
Signing time: Sun 26 May 2024 07:24:42 +0000
ROA not before: Sun 26 May 2024 07:24:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 82.152.52.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
109.176.25.0/24 maxlen: 24
109.176.27.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.40.0/23 maxlen: 24
213.210.48.0/23 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 08:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:c9:92:64:e0:2d:a3:09:8d:69:85:57:dc:ee:75:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 26 07:24:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0487e4fa242e30a2e8988900979474730dc406f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:b3:e7:af:ae:b9:2e:e2:df:81:d9:e2:a0:
dc:52:4d:34:65:d3:d4:6f:fd:ec:16:34:95:cf:2c:
30:07:cf:c1:c7:8f:fc:fd:25:34:e4:78:74:ea:ee:
cc:d3:ea:72:fb:40:c1:cb:9f:65:4b:2b:01:28:db:
3a:4d:06:e6:21:11:7d:14:0a:54:fc:ba:0a:bc:c9:
a1:1a:c3:85:85:af:5f:e8:94:10:f4:99:e3:66:99:
4d:98:b9:a0:47:0a:ab:f2:5c:0e:42:cb:33:35:f6:
35:e2:07:26:03:02:47:60:8d:f1:34:87:24:5e:f7:
13:37:fa:41:46:44:1d:09:56:5c:58:3b:b9:10:ff:
31:5d:44:be:55:02:97:41:45:46:14:0e:10:f7:6e:
91:7f:a8:17:3e:06:38:7d:6c:e2:66:7e:c7:3f:02:
05:47:eb:37:f7:49:59:45:9c:eb:9f:4a:d0:a9:26:
f3:53:70:2d:db:ad:d6:14:bf:58:f8:0f:d5:82:2c:
14:d0:5b:89:75:da:3a:84:5c:2c:19:e1:94:80:b9:
4c:77:cb:0a:b3:8d:f8:aa:f0:06:1c:8c:77:b1:1e:
bb:cd:ec:6e:e0:78:e0:61:2d:55:59:c2:6b:d4:ba:
16:cd:fb:7f:eb:a8:fb:06:11:ff:49:19:66:80:d0:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:E4:FA:24:2E:30:A2:E8:98:89:00:97:94:74:73:0D:C4:06:F4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BIfk-iQuMKLomIkAl5R0cw3EBvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.52.0/23
82.152.55.0/24
109.176.25.0/24
109.176.27.0/24
212.38.88.0/23
213.210.40.0/23
213.210.48.0/23
213.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b3:66:47:73:c7:aa:05:bc:c5:83:b9:36:b9:4b:73:db:c1:
b5:ce:e9:e3:c1:0c:8b:ee:bb:f3:8e:cd:60:01:23:2a:b2:aa:
e5:a3:6e:38:03:c2:c6:9d:21:ea:0f:06:e6:d0:59:e7:11:73:
22:5b:11:23:b5:c7:54:e4:f2:38:31:97:2d:b9:50:19:5d:d3:
f7:6f:09:7a:db:c1:68:53:32:5f:df:f8:6d:94:0f:be:1a:3a:
00:ea:18:8f:34:d7:a5:cb:4d:96:51:52:d2:06:2d:df:0b:d5:
c7:50:3f:c3:90:0b:4f:51:0d:d6:82:e8:dd:a2:ee:35:2d:b4:
29:e5:05:f7:8f:e4:a9:8f:a1:a3:97:ad:71:4d:7f:bd:3c:cd:
68:4c:d4:7e:ea:cb:34:8d:e9:13:43:fe:dd:85:41:99:51:4f:
f2:30:fc:5a:80:04:89:f4:fe:5c:bd:ac:5d:fe:4d:b9:a1:98:
c4:5d:ab:7c:a6:67:62:7d:5a:55:71:10:e0:d2:30:65:71:fb:
5c:8e:46:80:bb:5f:5d:a7:ad:25:8f:d6:d7:03:a3:d3:ae:46:
65:fb:4f:5a:d0:b6:26:9b:8a:08:e0:72:48:5b:cf:d6:98:26:
f4:bb:d7:02:95:88:71:84:8e:c5:5e:f3:06:2a:0a:4f:0c:1f:
3a:e0:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:23 2025 by rpki-client