Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MMGzHC__HiAR7cRIPkxkAQhfaaE.roa
File: MMGzHC__HiAR7cRIPkxkAQhfaaE.roa (raw, json)
Hash identifier: rGWwWbafsFvC1l/Hfb+MYRTK3f581BCYcum2NGofZIQ=
Subject key identifier: 30:C1:B3:1C:2F:FF:1E:20:11:ED:C4:48:3E:4C:64:01:08:5F:69:A1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190D5555B338C4C3C0AE4293E73C6F99EBD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MMGzHC__HiAR7cRIPkxkAQhfaaE.roa
Signing time: Sun 21 Jul 2024 12:47:39 +0000
ROA not before: Sun 21 Jul 2024 12:47:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 82.152.4.0/24 maxlen: 24
82.152.5.0/24 maxlen: 24
82.153.153.0/24 maxlen: 24
82.153.156.0/24 maxlen: 24
82.153.200.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
213.210.63.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 13:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d5:55:5b:33:8c:4c:3c:0a:e4:29:3e:73:c6:f9:9e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 21 12:47:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30c1b31c2fff1e2011edc4483e4c6401085f69a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:0c:6c:b3:3b:4f:0a:91:b4:c0:b1:48:b3:
b3:58:94:b1:7d:37:5a:11:5d:1b:05:36:27:5c:dd:
3b:4f:2e:b2:68:f0:96:c7:fa:fa:c3:63:a5:3a:5b:
19:01:b1:a3:65:cd:e7:22:c5:4f:28:5c:96:cd:c4:
1c:ac:2f:4f:2c:13:8b:92:15:c2:53:ea:59:38:1d:
b2:64:b0:e3:61:92:aa:94:82:ae:e6:eb:e0:c3:58:
9a:27:17:3a:34:73:87:03:1a:bc:7e:ef:ad:bd:1d:
d4:cc:95:14:78:74:f7:75:31:a6:ef:87:ed:92:cf:
55:b5:eb:64:65:24:de:94:3c:ee:61:44:0f:97:c4:
66:69:8c:ca:78:35:2b:fa:9c:38:33:8b:fb:22:fb:
9c:87:7c:c6:41:84:b8:ef:f6:a0:dd:3b:ab:47:20:
9c:f5:1b:72:da:f4:70:cd:2e:82:72:9d:7d:d8:21:
f8:9d:49:32:56:c5:fc:ce:75:a3:81:1a:3e:21:9d:
a8:59:91:d3:d0:e9:b5:9b:6f:73:0a:57:32:f8:87:
e3:e0:4e:62:1f:37:2a:e5:47:b2:c9:fa:a0:46:2c:
8e:5e:07:78:c5:09:af:5d:52:83:20:5c:e8:d1:1c:
c7:b2:81:9c:ba:25:22:67:48:5d:be:0b:c5:a0:ab:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:B3:1C:2F:FF:1E:20:11:ED:C4:48:3E:4C:64:01:08:5F:69:A1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MMGzHC__HiAR7cRIPkxkAQhfaaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.4.0/23
82.153.153.0/24
82.153.156.0/24
82.153.200.0/24
82.163.0.0/24
109.176.193.0/24
109.176.244.0/24
212.38.79.0/24
213.130.150.0/23
213.210.63.0/24
213.218.211.0/24
213.218.233.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b8:6a:0a:b4:c2:53:15:1e:52:47:e8:ba:a6:75:e6:e9:e8:
02:47:35:22:c1:e5:75:45:93:87:91:42:9e:2a:72:3d:34:05:
71:65:02:20:25:7d:bc:3b:b6:1b:0a:e3:f3:60:af:07:fb:8e:
20:38:cb:eb:74:55:30:bf:c9:04:b1:b0:d2:8e:72:2b:57:ce:
94:a6:7b:e7:1b:d1:e7:bc:5d:1f:06:e3:7f:8d:d9:5e:9a:a9:
7f:13:a0:98:bb:08:c7:1b:c7:c3:aa:e4:7f:94:3b:ff:ac:3a:
c9:6d:3c:29:4f:04:79:fd:e9:96:3b:51:82:2a:49:0e:79:db:
7f:1b:5e:80:2d:e8:4e:c2:62:94:c9:89:88:5a:aa:c4:5e:55:
b2:29:3c:a3:90:45:be:f3:a5:25:56:e2:64:f2:91:5a:1b:85:
de:14:66:4b:58:7c:3b:fb:56:ef:76:b5:6d:d8:35:2b:81:05:
52:39:2d:dc:81:19:60:43:23:16:3a:58:02:7d:83:0c:ee:0c:
1a:e4:10:cf:87:a6:fb:10:ed:d1:0b:9f:e9:c5:e7:89:e6:4b:
b8:32:03:75:51:c9:e6:7e:e5:64:10:1b:12:3b:97:90:47:49:
99:5e:84:5a:33:19:3f:b7:06:c0:19:06:97:01:2e:15:7b:08:
4e:84:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:33:55 2025 by rpki-client