Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UaCuPDtiVEfbJvCTrtgFv0R_Cv4.roa
File: UaCuPDtiVEfbJvCTrtgFv0R_Cv4.roa (raw, json)
Hash identifier: kaB0v/n42aUvDX2Bs50f8Daym6DnhOhW0QMgiLWjybg=
Subject key identifier: 51:A0:AE:3C:3B:62:54:47:DB:26:F0:93:AE:D8:05:BF:44:7F:0A:FE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019306B38E9511A0FC27DCDA375D14025811
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UaCuPDtiVEfbJvCTrtgFv0R_Cv4.roa
Signing time: Thu 07 Nov 2024 12:57:30 +0000
ROA not before: Thu 07 Nov 2024 12:57:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.153.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 18:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:b3:8e:95:11:a0:fc:27:dc:da:37:5d:14:02:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 7 12:57:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51a0ae3c3b625447db26f093aed805bf447f0afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:66:17:1a:c3:b2:c0:89:4c:ea:ef:84:2a:
b1:1e:83:49:f1:5b:80:93:f4:9d:95:59:76:2d:4c:
dd:81:75:29:fd:3e:63:35:3a:57:ae:4d:49:aa:31:
54:27:e0:95:a8:68:99:fb:45:65:ae:83:af:d9:cb:
d6:ff:1f:1f:28:07:3e:59:2c:2a:c5:94:37:43:78:
a5:b6:f9:90:c8:2a:73:1a:96:03:9e:12:eb:db:e1:
f6:69:4a:85:d2:96:0a:f2:cd:77:19:b7:24:b9:ec:
86:b7:51:ce:08:5c:18:2b:56:3c:46:be:7a:c6:82:
7b:a6:7a:e3:91:ff:44:7e:71:c6:8f:5d:57:a0:0d:
f7:62:7f:3b:08:ee:0d:e6:23:78:4a:f6:5d:45:2a:
84:fb:b9:ad:fb:c3:79:3c:71:87:f9:94:ee:45:0c:
03:05:d6:2a:06:a7:7d:e8:6d:4d:00:32:2b:d7:db:
21:6f:69:c6:fd:9e:00:57:f7:57:bb:6c:70:e2:2f:
d7:50:fe:1c:9a:2a:9a:af:08:81:fd:01:27:76:ff:
47:27:6a:0f:55:5e:6e:8e:97:93:ee:dc:47:c4:01:
4f:3b:83:53:1c:ac:e2:5a:4e:dc:94:4e:63:d8:1a:
4c:06:a6:2b:fd:68:e8:ea:8d:cb:06:9f:91:9e:4c:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:AE:3C:3B:62:54:47:DB:26:F0:93:AE:D8:05:BF:44:7F:0A:FE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UaCuPDtiVEfbJvCTrtgFv0R_Cv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.130.153.0/24
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:03:09:9c:0a:97:0d:4f:d7:ee:77:69:fb:53:c5:35:7a:3e:
32:51:a8:36:e7:84:c8:bc:ff:bd:03:a4:90:af:f2:eb:25:59:
f5:7c:79:14:2d:68:a5:0f:fc:ac:c8:76:cd:d7:db:23:01:05:
1f:2e:55:9c:b3:13:f8:50:d6:3d:2f:c3:73:99:3c:48:87:dc:
11:5d:e0:d2:9b:14:6d:d1:73:13:d9:40:33:dc:2c:3a:27:cf:
6e:28:4c:35:ee:a8:c8:68:eb:10:4f:ce:ac:01:01:62:c6:28:
32:0b:4c:75:b4:38:38:81:3a:14:de:d7:c2:8f:ca:5f:77:18:
81:7a:90:51:27:15:70:cd:69:67:39:16:d2:74:f2:b5:86:20:
aa:b4:ef:1f:01:78:ae:15:34:d5:17:7a:28:9e:26:0a:3f:a2:
30:af:18:c1:ad:88:74:59:a2:78:4e:5d:a0:35:23:72:ad:3f:
dc:6d:e2:93:da:bc:db:d7:55:64:4f:93:c6:cc:58:6e:ae:fa:
ef:d4:8d:16:51:b5:3f:47:67:a7:d9:b3:22:6e:75:d4:5b:c9:
1d:a8:fb:97:f5:10:63:77:64:86:df:a8:95:7a:e0:5f:94:c7:
b8:a0:0b:84:fa:fd:e9:5b:21:46:1d:3d:8b:7c:2b:3d:f9:f7:
e8:22:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:21:42 2025 by rpki-client