Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VzRSEqvHORmibOgppYaYIu-Kup4.roa
File: VzRSEqvHORmibOgppYaYIu-Kup4.roa (raw, json)
Hash identifier: vNSSnnGGJHKXWMJhsspswCsW62wxdBW2sn/eE5M/t2o=
Subject key identifier: 57:34:52:12:AB:C7:39:19:A2:6C:E8:29:A5:86:98:22:EF:8A:BA:9E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019108DF69DE2E8209A328583AA5A91415FF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VzRSEqvHORmibOgppYaYIu-Kup4.roa
Signing time: Wed 31 Jul 2024 12:59:04 +0000
ROA not before: Wed 31 Jul 2024 12:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 81.168.126.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.127.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 12:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:df:69:de:2e:82:09:a3:28:58:3a:a5:a9:14:15:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 31 12:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57345212abc73919a26ce829a5869822ef8aba9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:e7:56:5c:a2:83:d8:74:ea:73:64:7d:8e:
01:63:66:cf:4a:4f:0c:3d:4a:f1:e6:66:63:cc:3d:
fa:4b:08:62:d2:9c:d6:39:c5:2c:22:6e:c9:61:cf:
d0:d4:aa:44:85:0f:ae:34:27:ad:28:a5:03:f8:02:
08:a5:d1:ee:ac:87:07:c9:ab:85:3a:9b:6c:3b:cd:
db:04:4c:7f:84:eb:f2:b5:ee:c9:1d:18:e0:d7:61:
92:be:fb:da:9e:68:c3:b6:70:69:e8:fc:7c:e0:45:
11:c7:a9:8e:63:7c:6c:6d:9e:55:e5:7c:8b:ae:57:
8a:cc:45:60:79:06:26:4d:72:38:06:e7:6d:f8:a0:
66:98:ee:14:03:e4:25:25:10:e5:97:11:14:55:b5:
5c:e7:83:13:83:29:60:ef:ee:d9:86:0e:fd:ce:8e:
b5:e9:b6:46:b6:86:7e:0c:30:be:04:bb:dd:a4:68:
b7:5c:93:d4:b7:66:39:43:42:ae:d6:55:65:e0:f1:
bc:69:e6:b5:1e:a1:9f:d0:8d:98:7b:0b:25:b9:38:
b8:2f:97:d9:b1:d7:8c:bf:c4:9a:38:09:dc:3a:65:
19:58:cf:40:c6:64:4f:76:54:3e:af:40:3c:0a:9d:
58:4e:84:0e:07:62:a2:dd:1b:67:3a:b6:c8:36:95:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:52:12:AB:C7:39:19:A2:6C:E8:29:A5:86:98:22:EF:8A:BA:9E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VzRSEqvHORmibOgppYaYIu-Kup4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.153.255.0/24
82.163.10.0/23
89.213.127.0/24
109.176.14.0/24
109.176.30.0/24
109.176.208.0/24
213.218.210.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4a:d0:00:df:80:4d:f3:29:d7:4b:8a:4b:f5:bc:cb:35:f8:
ce:3b:a9:90:b9:d7:4e:78:73:e4:1a:33:b0:5c:d1:43:04:ea:
b3:2e:cb:e5:40:dd:02:39:f3:56:a2:76:0c:85:ee:43:9c:8d:
78:59:ca:ca:9a:cf:2b:4c:fd:ef:37:91:49:ad:9c:2c:19:1c:
9b:90:2d:de:51:2e:48:ef:43:dc:7d:b0:74:8c:f8:d0:73:7b:
a8:74:f5:cc:7d:90:05:f1:42:02:70:56:a6:f1:22:d7:13:af:
e7:3a:f1:1f:46:fc:58:22:c8:f4:60:50:da:12:e6:0d:e3:61:
43:67:d9:d2:4e:4f:33:e0:89:05:bc:9e:8c:c3:43:2d:b4:ad:
4e:a8:2f:4e:8a:41:2e:d8:4c:8d:a4:bc:88:4d:85:e8:35:23:
27:d1:93:5d:0a:10:f4:38:d6:57:b1:27:35:ef:d8:4d:29:01:
ee:68:34:2c:cb:dd:1b:40:a7:b3:3a:ef:52:30:aa:89:c0:86:
b9:15:9b:4c:3e:5e:6b:c3:7d:57:d2:7a:a6:cf:e6:e9:ba:43:
bc:a2:13:01:ac:00:0e:0d:39:f0:d9:07:ef:c4:6d:42:20:55:
79:63:a3:78:1e:1c:18:49:29:4e:38:40:1a:7e:76:1f:da:f8:
7a:30:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:33:32 2025 by rpki-client