Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Rc9WvqhDyfXj6jo6CKVb1CzXugs.roa
File: Rc9WvqhDyfXj6jo6CKVb1CzXugs.roa (raw, json)
Hash identifier: 5nYoFyp33R+CrMbJy14/THF8TnRDANrnHcjxyiknP0Q=
Subject key identifier: 45:CF:56:BE:A8:43:C9:F5:E3:EA:3A:3A:08:A5:5B:D4:2C:D7:BA:0B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01925330F1A9C239B8EF782D5C0D9594E987
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Rc9WvqhDyfXj6jo6CKVb1CzXugs.roa
Signing time: Thu 03 Oct 2024 16:22:49 +0000
ROA not before: Thu 03 Oct 2024 16:22:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 82.153.216.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.153.218.0/24 maxlen: 24
82.153.219.0/24 maxlen: 24
89.213.208.0/24 maxlen: 24
194.105.76.0/22 maxlen: 24
213.130.132.0/22 maxlen: 22
213.210.52.0/22 maxlen: 22
213.218.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Oct 2024 18:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:30:f1:a9:c2:39:b8:ef:78:2d:5c:0d:95:94:e9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 3 16:22:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45cf56bea843c9f5e3ea3a3a08a55bd42cd7ba0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:8f:3a:3e:b5:eb:7f:69:d8:f2:a5:e9:31:
17:15:f7:a3:1d:4c:3f:40:be:24:37:25:f5:cc:5f:
40:79:75:dc:ea:99:d9:c2:4e:2a:24:2f:0c:78:6d:
e8:90:23:8f:0a:90:a7:62:68:f9:56:e1:50:cc:3b:
fc:0c:78:ed:80:ff:e9:67:e4:1d:53:a6:22:b3:e4:
6f:c9:f4:a9:40:ca:25:f0:e0:a8:02:3a:c0:fe:43:
6e:14:f4:3a:21:7b:49:a2:5c:31:a3:ba:af:d6:c2:
52:aa:40:b5:73:7d:60:03:61:f3:51:a4:b2:07:bf:
53:bf:44:01:55:62:7d:b8:d5:58:ac:83:97:c8:df:
65:1c:c6:f0:19:b1:7a:c7:90:9c:d6:09:49:d4:0a:
b2:9b:02:a4:04:20:0a:b6:d3:61:47:51:69:aa:15:
82:70:15:50:b4:ed:46:c3:c0:09:9c:18:f2:ce:e2:
dd:d1:dd:72:8c:1f:69:bc:23:5f:46:ef:53:ee:f4:
5a:20:8b:c8:87:7e:a3:d4:a6:68:79:13:1a:3f:d7:
45:58:c1:08:8a:c1:33:02:f7:99:b7:6d:6a:76:9f:
53:4a:a9:bf:e5:21:e3:ed:49:2c:71:5c:55:44:f2:
9a:13:6d:2d:fe:5a:2e:8f:bc:8e:e1:4c:41:3f:f9:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CF:56:BE:A8:43:C9:F5:E3:EA:3A:3A:08:A5:5B:D4:2C:D7:BA:0B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Rc9WvqhDyfXj6jo6CKVb1CzXugs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.216.0/22
89.213.208.0/24
194.105.76.0/22
213.130.132.0/22
213.210.52.0/22
213.218.244.0/22
Signature Algorithm: sha256WithRSAEncryption
71:aa:66:b2:57:5a:b0:87:b1:a0:dd:77:c3:6f:66:34:0f:c8:
83:6c:5c:63:01:f3:8a:91:75:6c:bb:d4:0f:43:8f:30:5e:ae:
7f:18:cb:94:0c:5f:6f:c2:80:77:f8:86:4d:0d:b5:9e:6f:3c:
47:5e:1e:16:d1:d0:c8:38:a4:74:03:eb:56:fe:dd:42:bd:d7:
a5:3d:0a:14:5f:9d:9d:21:36:2a:cd:a5:33:22:4a:80:9d:ee:
f0:d5:5a:7d:12:90:70:08:94:94:0d:e5:2d:63:5b:79:b7:6f:
d6:78:cb:98:c3:b5:2e:61:ba:63:b9:0b:14:bf:c2:36:07:51:
be:0c:12:f8:a0:fc:34:f2:18:aa:4a:30:35:88:b3:bb:ed:0e:
15:37:54:46:ee:62:34:7b:28:a5:50:5c:bf:03:5b:4e:fe:50:
70:96:46:d0:89:42:7d:55:3d:22:e6:b1:b1:13:fb:8a:6d:b5:
65:a4:b8:cc:f4:ed:7e:57:f0:f2:59:48:72:ce:23:73:79:06:
04:72:45:50:01:25:27:66:34:45:db:25:c7:72:08:ca:a7:0f:
ab:1a:20:f5:97:30:77:19:5c:1c:20:76:d5:29:04:99:ea:6b:
55:26:19:de:43:0e:5f:ca:a8:64:e5:43:b7:f9:2b:b4:f6:13:
9d:ee:aa:8b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZJTMPGpwjm473gtXA2VlOmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMDAzMTYyMjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWNmNTZiZWE4NDNjOWY1ZTNlYTNhM2EwOGE1NWJkNDJjZDdiYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYuPOj61639p2PKl6TEXFfejHUw/
QL4kNyX1zF9AeXXc6pnZwk4qJC8MeG3okCOPCpCnYmj5VuFQzDv8DHjtgP/pZ+Qd
U6Yis+RvyfSpQMol8OCoAjrA/kNuFPQ6IXtJolwxo7qv1sJSqkC1c31gA2HzUaSy
B79Tv0QBVWJ9uNVYrIOXyN9lHMbwGbF6x5Cc1glJ1AqymwKkBCAKttNhR1FpqhWC
cBVQtO1Gw8AJnBjyzuLd0d1yjB9pvCNfRu9T7vRaIIvIh36j1KZoeRMaP9dFWMEI
isEzAveZt21qdp9TSqm/5SHj7UkscVxVRPKaE20t/louj7yO4UxBP/kQ8wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFEXPVr6oQ8n14+o6OgilW9Qs17oLMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUmM5V3ZxaER5ZlhqNmpvNkNLVmIxQ3pYdWdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCUpnYAwQA
WdXQAwQCwmlMAwQC1YKEAwQC1dI0AwQC1dr0MA0GCSqGSIb3DQEBCwUAA4IBAQBx
qmayV1qwh7Gg3XfDb2Y0D8iDbFxjAfOKkXVsu9QPQ48wXq5/GMuUDF9vwoB3+IZN
DbWebzxHXh4W0dDIOKR0A+tW/t1CvdelPQoUX52dITYqzaUzIkqAne7w1Vp9EpBw
CJSUDeUtY1t5t2/WeMuYw7UuYbpjuQsUv8I2B1G+DBL4oPw08hiqSjA1iLO77Q4V
N1RG7mI0eyilUFy/A1tO/lBwlkbQiUJ9VT0i5rGxE/uKbbVlpLjM9O1+V/DyWUhy
ziNzeQYEckVQASUnZjRF2yXHcgjKpw+rGiD1lzB3GVwcIHbVKQSZ6mtVJhneQw5f
yqhk5UO3+Su09hOd7qqL
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:30:06 2025 by rpki-client