Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FGuXw7OvTd-xifil2dZYJTbV0Qc.roa
File: FGuXw7OvTd-xifil2dZYJTbV0Qc.roa (raw, json)
Hash identifier: boOJgndSsB1eCI6oGmG6MVsvdiacJthfH7DUJPn7G/k=
Subject key identifier: 14:6B:97:C3:B3:AF:4D:DF:B1:89:F8:A5:D9:D6:58:25:36:D5:D1:07
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01946B7AF171EC543B9FE952A79A1B7D9168
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FGuXw7OvTd-xifil2dZYJTbV0Qc.roa
Signing time: Wed 15 Jan 2025 19:40:06 +0000
ROA not before: Wed 15 Jan 2025 19:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 11:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:7a:f1:71:ec:54:3b:9f:e9:52:a7:9a:1b:7d:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 15 19:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=146b97c3b3af4ddfb189f8a5d9d6582536d5d107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:04:2b:5b:09:b1:8b:d5:8b:ed:ac:64:f2:
fd:b4:b0:98:ec:a1:bc:00:c7:71:78:7a:61:67:5e:
6d:dd:0f:62:81:9b:20:c7:2e:ff:6a:20:3f:0a:04:
18:8c:cc:9b:5b:ed:e4:79:19:de:83:14:a4:09:cb:
e8:5b:dc:fc:d1:04:05:e0:94:d5:04:ce:06:11:67:
ea:4b:3f:45:59:0b:e6:0a:f8:66:75:12:e1:dc:fa:
f0:08:b8:5e:05:56:dd:6f:04:3f:e3:a4:4d:a6:3d:
54:a8:79:d3:fd:3c:df:46:86:a4:88:a6:22:68:d2:
d5:d1:ff:53:68:91:cd:0d:c2:47:6f:66:23:74:e5:
d2:59:9b:a5:a0:82:9e:c0:40:1d:23:10:d1:b2:91:
f6:20:9b:b1:10:15:5a:f9:bc:8c:43:32:d2:22:50:
45:50:06:e4:04:62:de:09:d0:70:6b:65:9f:6c:cc:
e3:fd:43:2b:89:a1:43:6d:5a:cb:7f:85:da:04:1a:
34:87:5f:10:2b:12:4d:6a:8a:77:17:03:69:0e:7e:
63:ce:51:51:02:0f:12:d7:bc:19:76:55:c7:3b:50:
1b:17:24:a1:16:4c:e4:ff:30:7c:47:25:00:52:af:
21:cd:0a:ef:58:a4:d4:b0:79:2c:18:4b:9d:c4:ff:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6B:97:C3:B3:AF:4D:DF:B1:89:F8:A5:D9:D6:58:25:36:D5:D1:07
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FGuXw7OvTd-xifil2dZYJTbV0Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:5d:77:a4:a9:77:a3:3f:72:9c:2d:40:cc:8e:a3:1e:39:90:
0f:dc:ed:30:38:88:c3:7d:fd:1c:9e:d2:1f:35:3e:f2:d7:18:
43:85:35:c5:c0:03:e6:d9:be:43:ae:2e:09:b7:c9:d8:d6:25:
23:17:c7:26:60:0d:87:13:18:9d:53:e2:a1:3f:0d:30:7f:d4:
bf:1b:e0:1f:5a:3f:1f:0b:a8:ca:d0:9c:83:95:7c:69:00:b7:
df:c3:5e:42:42:bf:18:6d:cf:de:b0:50:e3:a8:0f:38:cf:0c:
74:2b:c1:a4:ef:38:59:79:63:58:1e:ce:16:4a:36:02:40:5d:
d7:4c:46:42:c2:aa:ea:b4:48:c2:4e:44:cf:7e:23:0d:b4:bc:
38:1a:c7:a4:8e:13:e7:35:c8:27:41:d9:1a:2b:25:d0:45:a6:
e4:ba:b6:ce:b8:45:1c:e0:f8:89:74:e7:26:e4:54:51:f0:43:
0b:25:5f:b8:31:8a:c0:a7:6c:38:28:c1:95:3c:22:0c:23:38:
9a:81:16:71:58:fb:de:9d:10:b3:80:28:a0:10:a8:27:60:03:
99:0d:a8:0f:44:63:ea:c7:2a:a3:43:b1:e0:b0:53:51:b2:7d:
7f:02:28:09:5e:2e:36:52:00:bc:cd:87:5a:94:f1:cc:c5:98:
9e:90:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:31:28 2025 by rpki-client