Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Wj6HKAGmG1M1FILaCcxYUfKVei8.roa
File: Wj6HKAGmG1M1FILaCcxYUfKVei8.roa (raw, json)
Hash identifier: NQuOZHYtrbZjdUutyaayniVA1XwD5DaI5wkVkg4vtGs=
Subject key identifier: 5A:3E:87:28:01:A6:1B:53:35:14:82:DA:09:CC:58:51:F2:95:7A:2F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019036030621A7C61DA6BCF8808371A7D8A6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Wj6HKAGmG1M1FILaCcxYUfKVei8.roa
Signing time: Thu 20 Jun 2024 14:18:06 +0000
ROA not before: Thu 20 Jun 2024 14:18:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.6.0/24 maxlen: 24
82.152.7.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.35.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.97.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 14:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:36:03:06:21:a7:c6:1d:a6:bc:f8:80:83:71:a7:d8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 20 14:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a3e872801a61b53351482da09cc5851f2957a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:88:9f:f8:27:63:5a:1a:1e:23:37:b0:56:
3b:74:90:60:97:ad:b9:d3:5c:a7:6a:ec:8b:93:58:
ec:10:4e:9f:cb:fe:b6:ab:00:7c:f4:f7:fc:30:0a:
9c:63:06:35:b4:de:8e:f3:20:a8:25:0d:7c:d9:d0:
f5:c9:0c:08:ea:ad:dd:9e:86:45:4b:f6:cb:e1:07:
9e:73:c5:f2:22:19:14:1a:8b:1c:64:48:bf:23:25:
a6:87:b1:33:60:f3:c1:f1:55:5a:09:a1:4b:c0:d4:
c6:ad:30:d0:96:9e:9d:8f:3e:7e:21:e0:8b:26:f0:
6a:97:77:51:19:e8:0b:73:62:12:ed:3e:d3:99:80:
90:8b:b6:0b:9e:76:a3:a1:ab:cf:f2:1e:17:82:26:
a6:fd:6b:57:9c:8c:fe:eb:8e:8a:e2:55:ed:84:a8:
ae:db:4e:49:00:e9:9b:a3:76:3f:0a:66:5a:70:da:
8e:38:34:d4:17:40:e6:32:18:c3:06:ba:09:1c:30:
f0:fa:89:33:b7:e2:2c:01:10:a4:63:08:a2:87:28:
e3:ea:c4:40:5a:c6:8c:ee:2b:2d:37:92:c1:24:61:
77:b3:a4:6f:dc:86:6d:1a:86:74:d6:a7:b6:1d:db:
84:0e:68:12:af:c6:0e:33:00:70:ca:d8:9d:13:84:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3E:87:28:01:A6:1B:53:35:14:82:DA:09:CC:58:51:F2:95:7A:2F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Wj6HKAGmG1M1FILaCcxYUfKVei8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.6.0/23
82.152.176.0/23
82.153.35.0/24
82.153.136.0/22
89.213.97.0/24
89.213.134.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.202.0/24
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
213.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:bc:85:09:c7:e9:5a:ed:80:bb:36:51:2a:13:31:69:35:16:
b7:e5:2c:d9:ef:53:c8:1d:0d:e9:75:24:7c:a7:40:ed:eb:d2:
38:29:1d:b7:63:5b:95:06:21:cd:1d:0e:67:99:4f:ad:83:0b:
3b:e0:05:01:c6:f3:77:29:8e:2a:c5:e7:2d:6a:51:0d:99:c3:
3c:4d:2f:f4:3a:0c:2b:9d:c6:03:78:26:78:3e:61:ea:c3:a8:
74:ba:16:93:a3:47:4b:c5:78:d2:9c:62:bd:9c:17:fb:97:45:
45:b4:7a:95:da:34:0e:dc:fe:52:42:9b:18:dd:2a:65:9d:b0:
a1:e6:9c:af:88:7c:38:fa:de:6c:86:42:06:5e:87:0a:57:d8:
ee:da:9f:29:0d:be:8b:53:98:0b:8c:7d:26:82:49:b7:35:b7:
27:0e:35:4f:ee:52:f9:ed:6f:2b:29:56:35:bf:d6:fe:05:48:
14:96:9d:6d:fb:82:63:ca:d7:9f:24:97:b1:7d:e6:4d:00:f1:
ab:91:01:4d:f3:70:fa:99:f9:3d:14:f3:cd:fc:b2:32:4f:28:
fe:cb:39:71:12:76:cc:60:a4:d4:25:8a:b2:2e:f3:f2:a1:1e:
e3:5e:f7:3c:50:df:3c:bb:26:c2:59:4f:ac:87:c3:77:c1:11:
b6:03:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:17 2025 by rpki-client