Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CbTT7BPh_PEySf0zFdvV2m8hdjg.roa
File: CbTT7BPh_PEySf0zFdvV2m8hdjg.roa (raw, json)
Hash identifier: dqwSi5/tTp0OhqSk6HJh9DVLZGnQ/vTh95VHGw1bQzM=
Subject key identifier: 09:B4:D3:EC:13:E1:FC:F1:32:49:FD:33:15:DB:D5:DA:6F:21:76:38
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190A28A0CF3D7BA971D224AB22A2ED91507
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CbTT7BPh_PEySf0zFdvV2m8hdjg.roa
Signing time: Thu 11 Jul 2024 16:04:34 +0000
ROA not before: Thu 11 Jul 2024 16:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 08:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:8a:0c:f3:d7:ba:97:1d:22:4a:b2:2a:2e:d9:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 11 16:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09b4d3ec13e1fcf13249fd3315dbd5da6f217638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bc:fb:19:61:3f:1c:f1:d6:c3:bc:0c:a6:1c:
59:a8:0d:a2:04:0e:7c:fd:f7:7d:f0:69:53:7e:2c:
8f:9e:26:89:cb:e5:4f:03:12:0f:b0:c1:cf:4c:cc:
f3:89:90:42:75:65:0c:22:85:69:56:60:31:1d:82:
8b:3c:04:1d:9e:88:ea:0c:da:a9:e8:ba:fe:e8:15:
99:42:99:9a:7a:7a:3a:44:88:e9:82:36:e9:e7:06:
28:ed:dd:3d:78:fb:f8:95:c1:84:cf:62:b7:82:3f:
e8:a1:fc:40:fc:41:c8:c5:63:2e:e9:ff:8f:99:7d:
5f:f3:45:3b:3b:ee:ca:83:ce:02:0b:d5:22:4b:4a:
d3:47:5b:6b:95:51:ac:0f:d2:a8:d6:ae:e8:9d:8d:
a5:63:d7:99:75:eb:09:0a:69:a8:05:76:90:e9:64:
01:e0:fa:28:58:37:b6:2b:e8:fe:8f:23:11:b9:b5:
a1:d2:8a:f0:31:25:3b:2d:b4:75:09:2e:a0:59:fd:
19:3f:90:fd:dd:72:56:43:26:8d:39:a9:e1:a6:1d:
a4:8c:79:cf:ef:fa:c1:9f:e2:f8:f8:08:5e:64:14:
75:48:3a:fe:71:a3:3f:bc:57:dc:3b:1f:fc:b2:96:
49:49:53:df:20:9c:71:5b:95:88:70:f4:83:3e:a6:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:D3:EC:13:E1:FC:F1:32:49:FD:33:15:DB:D5:DA:6F:21:76:38
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CbTT7BPh_PEySf0zFdvV2m8hdjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.50.0/23
89.213.56.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
69:69:9c:e4:ba:0b:42:14:bf:ea:b0:d7:c4:ad:1e:b1:ce:fe:
b5:5b:38:66:af:58:ab:e0:d6:62:34:59:ba:e3:51:09:bd:89:
c3:34:e9:30:98:c1:6e:08:83:f3:2c:a0:50:fb:62:01:3e:c0:
50:59:d4:a2:16:a3:81:39:80:c0:89:92:1d:d1:30:c3:6b:ca:
a6:0f:c0:ff:9f:a3:4a:ea:ea:8e:5a:6d:72:c7:a0:58:e2:fc:
d6:db:30:1a:70:fc:a3:15:f4:78:df:c6:24:56:2b:57:f3:76:
80:2e:70:d6:1d:4f:c1:e1:6a:91:9e:9b:33:ea:24:f5:44:81:
86:65:dc:f4:bc:69:77:73:1b:5a:b7:93:1d:85:d0:b2:b1:71:
db:01:62:d2:a4:4c:eb:3c:42:2d:fa:c4:6e:d1:c0:d3:56:4e:
f3:4a:a2:a9:67:63:e2:f0:5d:3c:ed:ea:03:7e:03:66:18:e9:
17:db:71:5c:87:d1:5e:aa:ad:d1:f5:05:29:ae:64:e1:8e:67:
ca:dd:89:60:80:0a:5f:42:dc:d0:e4:50:85:35:bb:36:b7:12:
4c:8a:ea:a6:5b:85:26:ca:5e:d6:8d:b2:36:00:ce:2e:16:0a:
00:b3:2c:1c:ae:92:72:db:cf:8a:4d:de:e3:39:97:c7:14:9b:
49:6a:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:15:49 2025 by rpki-client