Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C54SgWTD39Lt1cYPyGDIX0TSLo8.roa
File: C54SgWTD39Lt1cYPyGDIX0TSLo8.roa (raw, json)
Hash identifier: XfbqfdsVwSfyTWufk1BCj48IbgnPXFe/jIcG9lZpAe8=
Subject key identifier: 0B:9E:12:81:64:C3:DF:D2:ED:D5:C6:0F:C8:60:C8:5F:44:D2:2E:8F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01936D36FD95E49D923DD3E672668FEAAE22
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C54SgWTD39Lt1cYPyGDIX0TSLo8.roa
Signing time: Wed 27 Nov 2024 10:42:20 +0000
ROA not before: Wed 27 Nov 2024 10:42:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 82.153.255.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.127.0/24 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:36:fd:95:e4:9d:92:3d:d3:e6:72:66:8f:ea:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 27 10:42:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b9e128164c3dfd2edd5c60fc860c85f44d22e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:71:0f:2d:d9:6d:3e:a7:08:90:0b:9c:da:
93:7f:3f:a8:e2:23:a8:28:26:43:2c:bc:d3:02:4f:
13:db:59:78:60:4d:c8:90:cd:e8:97:ff:9e:b1:fe:
cc:97:7d:80:a9:78:30:60:90:8e:57:cc:33:51:1c:
ac:1d:15:a7:22:68:72:01:20:53:0a:7c:ab:08:02:
4b:63:7b:f7:9b:ca:03:2c:e3:0b:42:50:c9:26:78:
6e:a4:47:06:3d:59:5a:2e:4d:de:97:4f:81:e8:71:
40:59:f4:3b:a8:be:d0:33:d5:af:4e:aa:d6:57:a2:
41:b9:17:76:2e:52:71:00:d4:a2:49:bb:af:e3:93:
0d:bd:d5:af:55:3e:f5:e5:4f:69:f5:85:b8:db:dc:
51:04:fd:ab:e2:a2:92:50:d9:a7:10:c1:f5:ff:fb:
26:d7:c9:01:53:cc:6b:55:7b:1d:31:c4:07:85:fa:
27:fd:6a:4c:34:c4:06:d2:74:31:fc:21:5e:66:ee:
20:aa:1e:16:a0:f1:2e:ea:f5:1a:ea:82:e4:54:b1:
49:36:fa:43:4c:82:e5:92:e8:85:a8:78:72:72:b1:
81:4d:49:4c:b6:2e:d1:f4:db:7b:5a:97:84:f0:6c:
5d:ea:9c:15:83:d1:87:52:e2:02:fb:ac:68:12:e1:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9E:12:81:64:C3:DF:D2:ED:D5:C6:0F:C8:60:C8:5F:44:D2:2E:8F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C54SgWTD39Lt1cYPyGDIX0TSLo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.255.0/24
82.163.10.0/23
89.213.127.0/24
89.213.226.0/24
109.176.14.0/24
109.176.30.0/24
109.176.208.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f3:1b:78:c1:ab:ca:8d:05:5f:4b:af:84:76:4e:89:8c:71:
3e:70:ac:21:07:ca:ef:f1:ca:5f:2d:2b:25:43:1b:bc:43:91:
b9:63:bd:23:df:0b:d8:0b:c3:97:29:67:ce:b8:28:f2:c1:49:
55:a3:ac:76:ea:a0:81:48:06:5e:82:cf:73:7c:bd:90:7c:93:
cc:f4:54:ba:3c:d9:59:35:44:2b:f6:f9:fc:ed:13:d5:c8:5d:
ae:d1:c3:07:1f:e2:5a:ee:80:6e:58:b8:75:00:dc:f8:c0:39:
1b:25:03:15:c9:55:86:98:1d:6d:ab:a3:95:7e:af:e5:48:68:
43:4a:84:df:9e:70:30:fb:2e:14:c1:fa:84:59:e2:38:66:a2:
1e:87:16:2c:0b:d2:78:94:15:00:a6:f2:3c:3b:9a:12:c6:19:
91:22:63:95:26:c4:ae:5a:6c:12:99:20:6d:cb:02:ee:08:ee:
4f:14:f1:35:48:ac:00:58:ef:e1:18:09:15:19:c7:b2:b6:91:
e5:cc:ab:17:95:be:89:14:d5:25:c9:01:10:4d:f8:a5:bd:81:
15:6d:33:21:86:17:2d:f5:6f:76:7a:bd:83:5f:8c:d4:cf:dc:
78:03:77:ba:21:f4:b1:5b:3b:4e:3e:55:3e:4f:9e:14:db:f8:
6c:1b:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:28:56 2025 by rpki-client