Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/V4MgG4Jcg7OLQh5YHcaOIiMZkPA.roa
File: V4MgG4Jcg7OLQh5YHcaOIiMZkPA.roa (raw, json)
Hash identifier: kOsogx1kXcwHpwkm/fvFVPKI7NVPIyUQDePsehdlerA=
Subject key identifier: 57:83:20:1B:82:5C:83:B3:8B:42:1E:58:1D:C6:8E:22:23:19:90:F0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191ADDD8A09AD50673B37AF2EC2D7AA2DA8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/V4MgG4Jcg7OLQh5YHcaOIiMZkPA.roa
Signing time: Sun 01 Sep 2024 13:54:22 +0000
ROA not before: Sun 01 Sep 2024 13:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.152.178.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.63.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.23.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.254.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.130.138.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
213.210.58.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
217.145.76.0/24 maxlen: 24
217.145.78.0/24 maxlen: 24
217.145.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 15:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ad:dd:8a:09:ad:50:67:3b:37:af:2e:c2:d7:aa:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 1 13:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5783201b825c83b38b421e581dc68e22231990f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:3c:fb:40:8c:af:83:3b:5b:6c:09:b7:6f:
dc:89:a8:77:14:ed:8e:05:d6:87:c6:31:d0:23:01:
94:5c:4f:0e:04:67:37:e4:4b:dc:cd:5e:16:ed:89:
72:9f:b6:15:7c:a0:19:02:75:51:ff:64:54:f8:94:
ca:c0:38:a1:e1:8f:09:78:b9:2a:89:e9:02:b4:b1:
f5:a9:b5:a4:0f:9e:ed:0c:5b:ca:b4:aa:5a:dd:e7:
06:de:f1:22:e6:3b:3f:89:33:e6:61:f6:3f:7f:2c:
22:a9:85:1f:2f:07:94:92:a3:a0:c5:96:13:63:f4:
de:0c:91:ce:30:bf:46:af:87:47:15:32:64:4e:3b:
78:7b:66:28:5b:e0:e2:e1:82:ae:ca:69:ea:e8:b4:
52:cd:9e:48:b9:bb:07:ba:4b:65:43:93:e9:dd:14:
a5:7c:92:d3:31:8e:e6:9f:7a:aa:f0:df:8c:0c:b7:
85:99:84:98:03:b3:9f:ad:34:45:3f:44:1d:a5:d8:
cb:2c:2e:0e:dc:17:b7:76:00:4e:c9:7c:63:18:ba:
b9:01:03:79:15:6d:b4:83:b6:cf:36:f9:58:84:14:
23:97:b3:e2:b2:80:87:d2:19:1e:39:d0:d8:40:f3:
a7:d3:45:bf:1b:95:19:6f:8f:98:b2:88:61:c2:b2:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:83:20:1B:82:5C:83:B3:8B:42:1E:58:1D:C6:8E:22:23:19:90:F0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/V4MgG4Jcg7OLQh5YHcaOIiMZkPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0-82.152.178.255
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.63.0/24
89.213.129.0/24
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.254.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.130.138.0/24
213.130.151.0/24
213.210.58.0/24
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:af:d0:fb:a3:fd:8d:39:35:a3:f9:51:f5:a5:04:78:75:d4:
a4:e7:c4:b8:ed:56:73:73:7e:b2:34:33:f7:91:29:9c:c6:ae:
60:23:d1:f7:0f:d5:d8:13:e7:48:0b:43:7e:f8:0d:c8:50:08:
43:a1:d5:ae:89:ca:7a:0c:d1:72:13:04:38:92:83:30:8d:16:
5d:24:0d:91:69:22:9c:b1:d4:34:b4:b0:6e:72:b0:44:5c:6f:
1e:27:7d:f8:8f:66:e1:17:df:e6:df:c1:77:26:16:6e:24:58:
8c:4d:92:f4:9a:da:04:29:e2:a8:2c:fc:29:42:cc:9c:47:3f:
6d:4d:32:30:c3:3f:7f:1c:49:c7:4e:24:c7:6c:c3:50:1a:98:
de:e2:25:4f:85:7a:e2:34:91:65:64:d3:2d:f7:f5:01:a5:da:
0c:bf:57:74:f0:ab:69:e0:25:e1:0b:89:1f:ca:88:5e:22:26:
c5:2a:e2:94:48:ff:7d:78:55:3f:36:18:e0:a3:71:d8:f7:a4:
d3:11:ae:b9:3e:c2:e3:db:a8:09:3a:bd:0a:9e:61:e3:7d:87:
6b:40:18:21:6e:1e:91:3e:bf:77:db:78:be:93:81:08:bd:10:
57:5e:8b:0c:a6:1c:00:fe:54:c0:7f:68:8e:f1:a9:20:a6:0e:
8a:9f:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:26:11 2025 by rpki-client