Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MZ_nci7sD_81z9OHZVs_o8pIt18.roa
File: MZ_nci7sD_81z9OHZVs_o8pIt18.roa (raw, json)
Hash identifier: kEk97NjD8da7l1lgr/mFmbxeUY/K+jGsX77r0JLEHCg=
Subject key identifier: 31:9F:E7:72:2E:EC:0F:FF:35:CF:D3:87:65:5B:3F:A3:CA:48:B7:5F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194740AB6797468C8D8CDF13EC076357952
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MZ_nci7sD_81z9OHZVs_o8pIt18.roa
Signing time: Fri 17 Jan 2025 11:34:06 +0000
ROA not before: Fri 17 Jan 2025 11:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.222.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 15:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:0a:b6:79:74:68:c8:d8:cd:f1:3e:c0:76:35:79:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 17 11:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=319fe7722eec0fff35cfd387655b3fa3ca48b75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:a7:72:cd:e1:e5:3a:75:ae:ea:ad:e1:ab:
93:4e:b6:06:12:73:3c:8b:1e:e3:5f:4e:fa:89:a9:
22:5f:5e:c0:a4:24:a1:f5:e8:85:90:1d:34:cd:2f:
7b:92:bb:51:5f:12:96:9f:5b:63:c2:da:ea:4e:2f:
d7:c4:74:7a:88:a4:f8:16:1a:bf:cd:76:25:88:c1:
dc:fc:f0:ca:4a:ba:58:1a:64:d6:fb:36:9b:91:c5:
36:8e:58:65:91:e2:bb:d2:f1:e9:ae:91:9b:3e:ca:
5c:dc:cb:e2:ec:b2:d4:78:81:99:de:a8:e2:b8:ea:
6f:84:47:43:81:30:b2:46:ab:25:ac:87:b7:7c:85:
c2:5e:3a:cf:ea:ef:b8:a5:4e:c8:44:a2:06:fc:78:
f6:72:77:a9:d1:0f:81:45:72:53:17:7f:6c:94:2e:
73:e3:f9:8c:c0:fe:10:c8:1b:92:9b:06:7f:70:da:
b9:e4:9f:51:61:f4:ec:d9:0b:6a:8a:65:c7:aa:e2:
f5:60:47:5d:ee:ec:a3:e5:2d:3f:fd:3e:76:9f:51:
be:78:f1:59:06:01:7e:71:7e:38:e1:fe:37:d3:ff:
72:c3:32:76:2d:ca:15:b0:c8:00:a7:b5:9c:69:22:
e3:96:cc:7d:4e:b5:57:5f:81:38:ad:04:65:74:bd:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9F:E7:72:2E:EC:0F:FF:35:CF:D3:87:65:5B:3F:A3:CA:48:B7:5F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MZ_nci7sD_81z9OHZVs_o8pIt18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
82.153.222.0/24
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:db:b1:90:26:9d:44:1a:5d:63:32:ec:4b:ea:3c:d5:8c:8d:
1a:f5:b6:af:58:3d:f8:eb:c8:37:55:f8:3c:16:de:1d:4e:c0:
00:2e:31:6e:c7:0d:47:ed:e4:7e:55:0f:9e:da:97:6b:49:e1:
e3:39:e0:66:22:09:30:08:c1:22:1c:a6:28:ea:2f:af:ca:82:
70:71:55:c9:46:d4:59:ec:3a:79:61:65:78:67:e4:bd:1f:fe:
d8:82:fd:d9:69:ad:fd:1f:59:ab:23:04:94:b7:60:e1:21:b9:
a6:9f:06:0f:c0:60:fd:c0:d2:df:d0:b1:5d:af:7f:62:b8:42:
05:72:2f:b2:61:7a:f3:8d:6e:90:b6:c5:ab:20:97:3a:07:46:
7b:38:d0:f3:9c:0f:52:95:fd:87:9c:2a:e9:8d:d8:18:35:95:
bf:38:0f:21:24:82:2e:2a:3f:2e:09:f9:53:3e:81:b7:67:e3:
79:4d:92:9f:c7:4f:9e:e9:31:39:21:08:56:4b:50:e1:8a:61:
45:1d:c3:69:1b:20:ee:99:12:52:34:30:35:f0:e3:0a:9a:04:
a9:e4:87:90:5e:64:da:bc:d3:b6:5b:2e:35:f2:cd:5f:12:fb:
1a:b0:c7:41:ff:16:70:7d:43:7d:90:b3:40:10:ef:b7:8a:25:
66:90:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:32 2025 by rpki-client