Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VnitZSDM8gGIBncDa0LNdrt7SFg.roa
File: VnitZSDM8gGIBncDa0LNdrt7SFg.roa (raw, json)
Hash identifier: pFt2vGMyHgTZyo6RHouwY5F9K9AGmylFc5qEbe8EoaE=
Subject key identifier: 56:78:AD:65:20:CC:F2:01:88:06:77:03:6B:42:CD:76:BB:7B:48:58
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193D56E679C65B260459962DA21E5186A50
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VnitZSDM8gGIBncDa0LNdrt7SFg.roa
Signing time: Tue 17 Dec 2024 16:23:22 +0000
ROA not before: Tue 17 Dec 2024 16:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 81.5.156.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
82.152.250.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.140.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.248.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:6e:67:9c:65:b2:60:45:99:62:da:21:e5:18:6a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 17 16:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5678ad6520ccf201880677036b42cd76bb7b4858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:9c:58:c7:c6:b3:4a:de:c4:86:e6:e5:b5:
8a:12:04:dd:bf:1e:37:7e:99:17:b4:4d:d9:85:0d:
4a:84:d4:bc:98:19:96:f7:b9:ac:9a:35:05:ab:7c:
6b:3b:63:67:0e:33:60:b2:fb:ba:8d:70:0a:26:d7:
a0:72:ce:79:35:d2:8f:85:8f:13:cf:0a:f2:34:30:
93:23:ce:37:26:f1:53:16:4e:33:ee:62:ce:b0:78:
74:c2:fa:16:85:89:fb:94:98:65:4c:fe:02:cf:c5:
42:43:8a:f8:82:63:5f:69:02:16:a6:b4:b0:e0:96:
ca:ab:43:a1:1c:a6:89:78:a6:7b:13:84:d4:fb:5b:
ce:83:ce:ae:c0:be:fd:ca:6a:f5:f4:f1:24:fe:d4:
c0:1d:dd:ca:25:d7:e8:3e:62:64:75:9e:eb:22:63:
62:f9:91:f1:85:8f:93:28:7e:51:a7:c1:29:e6:e7:
d2:94:34:cc:51:19:63:b3:02:4d:c6:74:16:73:47:
b5:d3:c2:27:10:ec:a9:f4:e6:87:17:d8:8c:3d:4a:
0d:d0:40:b0:9c:6e:5b:37:25:27:4c:bb:c0:20:09:
38:12:a6:a7:62:d4:92:60:e9:3c:27:dd:18:39:4b:
33:10:c6:de:1d:fd:f2:ef:76:38:d6:a3:0e:40:fe:
a8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:78:AD:65:20:CC:F2:01:88:06:77:03:6B:42:CD:76:BB:7B:48:58
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VnitZSDM8gGIBncDa0LNdrt7SFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
82.152.111.0/24
82.152.250.0/24
82.152.252.0/23
82.152.255.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.137.0/24
82.153.139.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.240.0/24
82.153.248.0/24
82.153.250.0/24
89.213.135.0-89.213.137.255
89.213.141.0/24
89.213.153.0/24
89.213.163.0/24
89.213.168.0/24
89.213.170.0/24
89.213.185.0/24
89.213.188.0/23
109.176.209.0/24
109.176.211.0/24
109.176.216.0/21
109.176.249.0/24
185.49.125.0/24
213.152.61.0-213.152.62.255
Signature Algorithm: sha256WithRSAEncryption
71:47:71:9c:fa:56:5d:76:85:24:da:68:c8:74:9f:99:dd:99:
d3:14:88:9d:ea:bd:77:15:dd:27:92:e7:14:a1:b9:31:46:f2:
2e:db:88:88:bc:d7:09:00:00:48:91:a5:4e:f7:7e:d7:fe:31:
91:60:30:a9:78:be:80:ac:d0:d8:dd:35:56:ae:4e:29:c0:70:
18:c3:27:69:80:e0:02:5e:cc:8c:5d:96:7c:d5:bb:de:06:17:
6d:80:41:7b:09:c4:a1:38:a7:53:6e:bc:de:eb:28:b3:cc:7c:
88:06:a7:9a:4f:93:d3:a8:1d:1a:ff:cf:36:5d:24:5d:65:37:
55:cc:fb:9f:c7:01:5b:95:1d:e7:95:93:66:9f:c3:c0:bd:c1:
73:a0:6c:ea:77:1d:62:5d:05:1a:80:43:c2:80:60:5f:d6:c5:
d0:8e:9d:a5:53:a7:9d:01:ec:3f:1b:0f:6e:15:57:a6:a6:5d:
ea:e3:b8:07:63:b0:76:4d:41:82:38:d9:d7:7a:60:00:75:40:
27:f3:28:f9:4d:f4:2e:0f:2b:ae:a4:d7:13:65:5c:a2:1b:f5:
11:45:62:a1:6b:ed:27:17:f8:59:3a:ce:28:5f:b9:79:b0:c0:
3e:b3:45:5d:41:77:5a:e2:8c:e4:ad:a0:cc:08:3b:d4:51:ad:
24:82:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:26:25 2025 by rpki-client