Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IdzFijizT72D_ExV83E4Nq11sSA.roa
File: IdzFijizT72D_ExV83E4Nq11sSA.roa (raw, json)
Hash identifier: a0bJhiaKXnqWVkEQS2OhLc+UYBRXepfxKgkVCZEFlmI=
Subject key identifier: 21:DC:C5:8A:38:B3:4F:BD:83:FC:4C:55:F3:71:38:36:AD:75:B1:20
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F972CF29552F0F410D429F9537E1E950C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IdzFijizT72D_ExV83E4Nq11sSA.roa
Signing time: Mon 20 May 2024 18:04:16 +0000
ROA not before: Mon 20 May 2024 18:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 81.168.83.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.248.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
89.213.4.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.190.0/24 maxlen: 24
89.213.196.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
185.49.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 16:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:2c:f2:95:52:f0:f4:10:d4:29:f9:53:7e:1e:95:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 20 18:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21dcc58a38b34fbd83fc4c55f3713836ad75b120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:74:5e:40:2d:78:00:b3:7d:c6:9e:5d:8e:
c0:e8:3c:57:e3:a4:5a:94:82:da:16:28:20:e4:ce:
cd:d3:e6:fd:41:42:15:d1:26:30:b8:73:51:2a:ba:
6d:28:86:76:a9:59:9a:73:28:9e:6a:8c:a1:8b:60:
23:b8:02:77:a2:2c:6c:e5:2f:a9:e2:54:61:03:af:
4c:f2:c5:3d:83:27:45:e2:a8:51:c1:f8:fc:fe:c2:
9a:87:71:01:f3:e5:0f:69:f4:75:1f:d3:9c:21:03:
d8:04:2d:8a:f5:92:9c:56:c8:9b:58:86:22:bd:cc:
6f:59:9f:22:e0:6a:b7:31:b1:78:b0:22:03:34:a1:
39:36:25:1b:96:fa:df:f2:2d:8b:4a:ce:74:b2:c8:
8e:fb:cc:c6:f5:c2:8c:6d:ad:e4:3a:7b:90:b4:b8:
c5:5d:07:f6:48:61:ef:bf:02:fa:eb:ba:23:70:72:
eb:ae:b9:19:cf:bb:b6:6a:69:ca:aa:5e:0e:b0:bb:
3d:87:89:84:00:43:52:7e:5e:55:39:80:66:fa:a2:
1e:b7:23:51:27:16:0d:19:a4:94:03:11:01:80:4a:
21:da:74:b7:39:bc:6f:74:b1:87:53:36:de:ba:96:
bd:24:84:7b:47:8e:70:6b:c7:5c:3c:f3:9c:b4:e2:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:C5:8A:38:B3:4F:BD:83:FC:4C:55:F3:71:38:36:AD:75:B1:20
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IdzFijizT72D_ExV83E4Nq11sSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.83.0/24
81.168.120.0/24
82.152.8.0/24
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.69.0/24
82.153.72.0/24
82.153.79.0/24
82.153.132.0/24
82.153.224.0/24
89.213.4.0/24
89.213.6.0/23
89.213.130.0/24
89.213.190.0/24
89.213.196.0/24
109.176.247.0/24
109.176.251.0/24
185.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0d:97:cd:dc:f7:de:68:55:34:2d:c6:b9:31:37:ac:d4:82:
c0:ec:aa:26:5e:66:7c:50:62:f0:e3:81:ca:cd:60:f7:8e:da:
9f:27:99:17:31:ae:0a:1d:52:af:1a:a5:67:51:f3:cf:cc:67:
b8:03:42:17:65:01:38:9c:09:7b:6b:3b:fb:e5:2a:e1:6b:a2:
73:5a:2a:ab:34:8c:99:7d:9f:6b:5c:f7:9a:3e:80:f4:02:8a:
68:f7:0e:0e:ce:d2:41:5f:27:55:a7:cf:a1:a6:37:82:bb:5e:
b5:15:7c:7d:6d:60:0e:6d:cb:a8:e4:59:69:9a:bb:b9:80:a5:
fa:4b:d4:a4:a4:e1:3d:f2:a7:18:d9:15:e8:f1:77:94:4a:4b:
6f:bc:d1:8d:53:ab:e2:9b:ab:a4:f7:a3:41:43:4d:4c:e1:6d:
52:4d:c4:1c:1d:ca:d4:90:9b:7f:fa:e8:2e:53:95:0c:8f:a6:
6b:72:fc:35:c9:2c:ce:c6:fa:8e:23:45:62:6d:f6:72:0e:f7:
bb:f6:fb:eb:aa:41:36:88:02:6c:c6:11:31:5c:7f:99:d6:2a:
89:88:70:1d:2b:52:11:d2:63:10:8d:91:83:f6:c9:2a:e3:e0:
f3:10:87:ba:38:08:db:7f:af:be:c3:c4:92:a4:44:c3:f9:f4:
d4:a9:78:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:22:22 2025 by rpki-client