Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OH1mSLkSw6kpXYoQd6a664WHbvM.roa
File: OH1mSLkSw6kpXYoQd6a664WHbvM.roa (raw, json)
Hash identifier: muWVeMtfzuCPbkwm9g/a8PBPnPA5pLSgVyZYEneh9iE=
Subject key identifier: 38:7D:66:48:B9:12:C3:A9:29:5D:8A:10:77:A6:BA:EB:85:87:6E:F3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01945F0CA66FCD48045D15CDE94CF377E04E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OH1mSLkSw6kpXYoQd6a664WHbvM.roa
Signing time: Mon 13 Jan 2025 09:44:12 +0000
ROA not before: Mon 13 Jan 2025 09:44:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.212.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 11:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:0c:a6:6f:cd:48:04:5d:15:cd:e9:4c:f3:77:e0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 13 09:44:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=387d6648b912c3a9295d8a1077a6baeb85876ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fa:5e:c4:6b:0e:a5:cd:55:3c:8a:68:e8:35:
0b:ab:1d:9b:f5:b5:af:a0:30:46:df:f1:e6:c6:e2:
1c:a1:1d:8c:d5:27:d8:02:07:47:0d:d8:18:be:86:
25:0b:4c:f1:39:44:a5:15:7b:88:80:b9:92:50:86:
48:f7:cc:06:52:5c:61:17:03:66:e1:94:e9:90:88:
30:70:34:78:dc:27:6b:a0:a1:83:87:7a:b2:85:42:
c2:a6:64:c3:f3:00:3d:a3:54:98:d2:1e:c8:1d:a6:
d1:77:42:e4:c9:33:24:a2:b2:4e:32:69:26:00:64:
ec:d9:28:8a:ff:5c:9a:c6:af:d7:4a:2e:aa:97:70:
bc:b4:d9:e6:a8:ac:f8:22:45:10:55:ab:76:d8:36:
da:d5:e8:5e:33:ce:16:90:92:cb:9c:e4:ee:83:ae:
d0:97:eb:f0:e3:3f:9a:a9:9b:5a:a8:e2:3f:6d:49:
db:0e:38:b9:5d:d4:cc:a6:b8:d6:0d:38:38:29:1a:
40:fc:8b:13:2f:2d:80:08:b4:70:e2:b0:13:7b:eb:
2b:56:c5:f7:61:8f:40:06:3a:90:47:ef:53:0d:89:
74:75:65:e9:d1:dd:d9:1e:ba:77:1a:41:38:6d:b0:
d9:8c:11:57:88:26:d9:8f:1d:37:c5:e9:10:bc:6e:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:66:48:B9:12:C3:A9:29:5D:8A:10:77:A6:BA:EB:85:87:6E:F3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OH1mSLkSw6kpXYoQd6a664WHbvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.210.0-213.218.212.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:cb:c9:21:3c:25:9c:04:f2:76:a7:02:fd:16:1a:52:9f:db:
f5:88:92:c7:12:8a:b2:52:be:81:ae:39:98:89:b9:66:3c:64:
b7:d9:c0:d3:c7:f7:05:4e:9c:2b:14:9f:13:12:2f:64:b7:62:
0d:17:5f:c7:3f:6f:20:c5:c1:e5:58:6d:34:c6:b8:71:43:27:
41:b9:bf:99:6e:a8:ba:d4:f6:0f:b1:1b:c0:f1:93:1e:73:98:
3c:bc:38:c1:a3:34:e2:19:2a:f6:b3:b6:d1:e9:65:03:41:fd:
91:61:47:48:f5:1e:5f:5e:26:7b:60:16:92:93:f4:ee:c6:61:
80:e2:d7:e2:a8:c9:84:0c:c8:54:b2:44:00:0a:bb:dd:0e:57:
86:fb:3d:56:26:98:b5:0c:40:86:a2:63:0d:d2:1f:87:21:b7:
73:ff:2b:79:b7:ac:3f:f8:7d:34:99:37:3e:5b:c0:57:26:d6:
02:0c:b5:7b:d0:2b:7a:cd:2c:df:76:32:8e:e6:82:27:01:3a:
b3:e8:18:7b:09:0f:9e:9c:73:d5:a8:f8:f6:4b:8d:07:3d:cb:
97:19:73:97:ff:98:71:d1:ec:54:3f:2d:77:86:5e:a8:ee:44:
f0:88:02:a0:f4:ad:19:b5:18:09:32:15:a1:0b:68:35:db:d3:
9b:7d:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:11:25 2025 by rpki-client