Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IXKKP1RHt9jiQ5Jz9Jwz-Dq1bP4.roa
File: IXKKP1RHt9jiQ5Jz9Jwz-Dq1bP4.roa (raw, json)
Hash identifier: 3Ruv9AK/oK61hbRmnSIKMYs75RD8yEZFLlthckYrCIs=
Subject key identifier: 21:72:8A:3F:54:47:B7:D8:E2:43:92:73:F4:9C:33:F8:3A:B5:6C:FE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D6B20023AFD1A128A0D22BADC4A24CB16
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IXKKP1RHt9jiQ5Jz9Jwz-Dq1bP4.roa
Signing time: Fri 02 Feb 2024 18:41:16 +0000
ROA not before: Fri 02 Feb 2024 18:41:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 12:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:20:02:3a:fd:1a:12:8a:0d:22:ba:dc:4a:24:cb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 2 18:41:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21728a3f5447b7d8e2439273f49c33f83ab56cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:e3:08:ba:2b:ba:e1:48:56:3a:f1:97:06:
e0:cb:90:b6:14:d3:b8:a5:f7:5f:97:0d:f9:a3:72:
78:52:ec:32:2c:f6:8d:06:51:81:3a:05:d0:58:b4:
fe:11:3d:08:69:1e:db:83:75:e2:6f:7b:31:ac:64:
a4:8b:f1:7d:ce:e9:a5:9e:6c:cd:7b:cf:3f:a7:5a:
44:b2:99:41:b7:44:b3:ec:5c:f6:80:9e:47:0c:30:
6a:d1:b8:34:f9:0d:89:e8:dc:28:12:0c:5e:37:fd:
74:ce:b5:86:af:92:45:a5:33:97:0d:41:0f:d8:e1:
20:81:53:96:fe:a1:2f:16:5b:8b:68:8f:78:c4:8a:
d8:eb:c7:a8:38:f5:f6:6c:32:c1:ee:08:c7:91:40:
a2:dc:04:1f:88:d6:c6:45:be:3b:f1:81:57:c6:b9:
28:50:a0:06:9c:3c:df:70:8f:6a:c8:c3:ad:09:89:
7f:07:f0:e7:e9:a4:89:ee:ae:56:61:27:36:1f:b0:
5d:c4:63:60:35:ff:d8:66:8e:aa:a4:78:2a:e0:28:
55:64:87:e5:57:da:20:c6:0d:b1:8e:ef:ad:9a:0b:
b0:89:58:18:ba:e2:34:60:27:26:f7:f2:34:01:e6:
aa:dc:ac:34:83:5a:e2:64:3e:3c:73:f6:d7:26:e5:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:72:8A:3F:54:47:B7:D8:E2:43:92:73:F4:9C:33:F8:3A:B5:6C:FE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IXKKP1RHt9jiQ5Jz9Jwz-Dq1bP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f1:23:36:b5:e7:01:eb:a3:72:7f:90:e9:60:f8:69:bd:ed:
c9:d3:78:04:05:95:36:cf:50:2f:f7:7f:bd:3e:e4:c6:1b:bc:
09:01:fb:1d:6a:18:ed:fd:53:f0:d1:d3:e2:6a:de:20:d5:ff:
2b:87:ee:59:06:0f:2f:b6:ec:99:eb:66:a8:78:6d:d6:d0:78:
a7:09:eb:c1:2a:9d:e6:a1:89:ca:44:59:6d:ad:76:83:78:70:
ff:30:42:bb:e2:8c:0f:36:9c:8f:fd:13:5b:cf:9a:bb:77:90:
21:97:f1:64:cc:10:64:7c:21:58:95:37:20:f0:9a:b0:53:61:
95:28:20:6e:c7:cf:c9:ff:42:d8:90:c1:7d:de:f1:4e:cf:fa:
5c:25:bc:ab:3d:dd:bb:3e:73:fa:de:d5:be:fa:21:a8:1d:25:
1d:58:f8:5f:b9:33:cd:c7:f4:06:2e:06:91:97:37:79:72:d8:
e4:0a:af:21:6b:84:67:28:5e:ab:6a:f8:78:cc:79:64:8c:b9:
bd:d0:bd:64:7b:01:04:7c:e0:a4:0f:0e:66:d1:84:28:16:1a:
cf:20:a8:ff:40:01:fc:33:97:6c:f3:d5:af:eb:40:fe:47:d3:
0f:ee:18:5e:15:b8:7e:d1:5c:4e:a5:dd:e9:71:6c:07:cf:ae:
64:35:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:11:14 2025 by rpki-client