Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WbNGvuOtK49VAYoCxXANaFn2DTo.roa
File: WbNGvuOtK49VAYoCxXANaFn2DTo.roa (raw, json)
Hash identifier: pyNOSsrOJ26Ylz7JortS4lICsR6t9x2WUUTQBNDJP/Q=
Subject key identifier: 59:B3:46:BE:E3:AD:2B:8F:55:01:8A:02:C5:70:0D:68:59:F6:0D:3A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01905F411431D155D036D17186E8C6533C2A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WbNGvuOtK49VAYoCxXANaFn2DTo.roa
Signing time: Fri 28 Jun 2024 14:30:18 +0000
ROA not before: Fri 28 Jun 2024 14:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 80.240.88.0/21 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.24.0/21 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 16:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:41:14:31:d1:55:d0:36:d1:71:86:e8:c6:53:3c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 28 14:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59b346bee3ad2b8f55018a02c5700d6859f60d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:11:5c:65:71:01:30:cb:e6:72:f7:a5:fd:
51:5d:56:59:9c:8c:64:19:f6:8b:73:f6:7f:4a:be:
8a:7d:47:20:1c:ac:52:44:ed:18:51:c0:61:45:74:
f2:c0:9d:6f:ed:a7:43:88:4a:1f:a5:e0:d7:37:f2:
4c:48:bf:28:8e:04:f6:6f:b4:18:fb:94:e5:8b:f6:
c8:02:fc:32:87:0d:81:c6:bd:62:b3:06:ca:c0:40:
6d:e8:64:12:34:d9:bf:b4:4c:05:4d:54:98:bc:04:
4a:e9:a2:97:fd:e3:7f:2a:70:31:c2:3d:70:ee:6f:
b3:78:75:b3:3c:eb:12:ec:e1:b8:c5:b2:52:51:27:
25:80:d2:90:34:5e:59:94:4e:f5:e1:ab:3c:cc:75:
e1:a5:94:0d:de:02:22:5f:dd:9b:d6:6e:d7:87:a9:
cf:0f:ff:9b:0d:38:f1:92:68:c7:32:8e:73:2b:27:
82:ab:b1:cb:92:53:cb:a3:50:6e:74:4c:ca:66:f8:
2e:e3:d1:a4:2e:05:38:06:4e:79:ed:47:a6:d9:84:
59:b0:64:39:f3:0b:bb:d6:d6:e8:cd:87:0b:06:f7:
25:f6:96:64:56:13:da:e8:94:eb:bf:cf:7c:39:05:
2d:bb:4d:77:e9:4d:f6:3b:29:8b:26:9f:8d:49:66:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B3:46:BE:E3:AD:2B:8F:55:01:8A:02:C5:70:0D:68:59:F6:0D:3A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WbNGvuOtK49VAYoCxXANaFn2DTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
82.152.174.0/23
82.153.208.0/22
82.163.24.0/21
89.213.58.0/24
89.213.60.0/23
89.213.143.0/24
89.213.147.0/24
89.213.181.0/24
89.213.198.0-89.213.205.255
Signature Algorithm: sha256WithRSAEncryption
5f:b2:8c:a7:d7:0e:e4:0a:bf:b2:49:7a:a3:43:83:fd:c1:cc:
4d:b1:10:76:e3:e4:be:df:3a:86:e5:bb:21:70:0d:9a:d2:93:
f3:9c:cd:32:44:9e:e5:bb:1a:91:10:6e:98:db:bf:73:3f:eb:
26:85:49:de:5f:d9:ee:d3:dd:9b:0a:2a:61:7e:97:32:42:12:
f8:68:9a:36:dc:75:c1:9e:ca:f8:26:f7:3b:89:92:08:1c:06:
66:9c:b8:d4:fa:af:c2:4d:2a:7e:99:34:15:39:86:4c:47:77:
b6:57:f6:81:5c:21:34:44:55:77:d5:56:ab:5b:b4:9e:81:30:
86:80:dd:95:5d:79:7d:c8:f1:04:03:b0:74:8d:7c:a9:2f:29:
d7:92:7e:b8:0a:ee:8c:8b:0a:03:b8:13:d7:00:2b:55:f6:7d:
57:47:4a:3e:07:7b:d4:2f:d5:8e:32:a8:c1:77:10:27:9d:51:
3c:ac:39:c8:36:a7:c0:10:1a:12:78:63:20:b0:32:68:97:2e:
46:c5:0d:2e:9b:08:13:8e:4b:39:9e:ba:32:55:23:7c:f9:4e:
95:72:02:62:38:9c:22:f1:a5:77:f2:90:65:3c:b9:c3:80:f9:
07:be:f7:d8:cd:5a:20:ac:25:6e:81:cd:81:72:e2:02:c6:91:
b9:d6:07:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:21:14 2025 by rpki-client