Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X11m4eUA8aRLcabIB8Iw3oom4Ls.roa
File: X11m4eUA8aRLcabIB8Iw3oom4Ls.roa (raw, json)
Hash identifier: ZnQV6c4MrTuz5pOwDLSjerM7MESaGDq+b7DMBSjFVHA=
Subject key identifier: 5F:5D:66:E1:E5:00:F1:A4:4B:71:A6:C8:07:C2:30:DE:8A:26:E0:BB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01941404FEA56246FDDD7CD8E9F04C5DBA59
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X11m4eUA8aRLcabIB8Iw3oom4Ls.roa
Signing time: Sun 29 Dec 2024 20:04:19 +0000
ROA not before: Sun 29 Dec 2024 20:04:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 09:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:14:04:fe:a5:62:46:fd:dd:7c:d8:e9:f0:4c:5d:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 29 20:04:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f5d66e1e500f1a44b71a6c807c230de8a26e0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:12:2e:04:cd:d8:7f:0c:02:b5:31:40:d2:
39:2f:d0:f0:30:c0:19:62:42:82:99:d3:49:14:84:
46:70:79:25:06:02:3a:42:35:5d:0b:2a:1b:30:79:
3c:a4:b2:f7:b3:74:a3:cb:f1:1e:14:5e:90:53:d3:
90:c5:77:7f:1e:06:87:7a:3b:ab:56:c7:e4:02:57:
ac:a5:6b:6a:22:50:73:16:5e:84:eb:69:b6:20:0b:
14:1e:82:a0:ab:0d:82:53:5a:f4:6b:9d:ac:a2:2a:
aa:7c:ef:dd:22:c8:a8:6c:fb:b3:29:3e:c6:4b:a4:
5c:78:cd:9f:4d:08:3c:2c:4e:38:51:96:c6:a6:63:
ef:5f:27:1e:7a:13:e2:40:7c:db:09:09:66:9c:ab:
34:97:65:10:12:27:ea:3b:9d:e6:98:b8:7c:7f:93:
c5:7d:ca:95:d7:ed:6f:1e:0f:41:20:de:9e:71:74:
b7:cb:d9:c0:9a:61:72:7f:c7:c9:75:f8:20:08:2c:
da:f6:6c:46:54:0b:6f:c9:dd:4e:4a:91:77:6a:ee:
d3:e9:19:ac:4f:26:16:fc:b8:e1:6e:04:c7:fe:93:
3d:fa:74:25:7a:f9:8a:a1:bb:07:2c:4b:d4:72:05:
8b:9a:92:0a:9c:1d:67:c5:5a:1e:3b:0d:1b:e1:42:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5D:66:E1:E5:00:F1:A4:4B:71:A6:C8:07:C2:30:DE:8A:26:E0:BB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X11m4eUA8aRLcabIB8Iw3oom4Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.172.0/22
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:f2:fd:0d:1f:8b:35:5f:34:16:ed:56:98:2f:97:d7:88:3d:
55:cb:33:9b:5d:f6:95:c9:a9:3c:02:8f:ab:65:83:c5:8c:40:
19:03:b7:be:c4:1f:fe:2a:ce:be:f6:b2:6e:8f:9e:c7:8b:90:
0f:30:ff:a1:d6:33:84:b5:65:17:da:08:6f:bf:6d:be:91:25:
45:37:8e:42:63:15:89:9a:d9:1c:f8:94:e9:72:49:63:ea:7d:
fe:21:7d:c8:4d:52:03:0c:c0:4a:d8:57:fc:3f:58:fa:18:3d:
53:fd:79:55:9e:6d:a4:c2:0f:74:99:d2:c1:13:8f:1c:bf:de:
04:19:71:0b:1a:ff:54:c3:66:a9:0d:5e:09:4b:1b:18:57:68:
2c:ea:ec:79:f9:b5:89:98:bf:b5:d2:98:74:9c:77:a3:4b:f8:
50:95:ac:0e:00:bd:5a:ca:79:af:7b:04:11:18:82:9a:19:02:
26:95:48:2c:e8:e5:0d:bc:46:95:14:32:60:a1:06:e1:b4:45:
ff:46:2d:60:53:22:9d:9e:8c:90:81:27:10:5b:19:ad:e4:b2:
ae:b5:6e:04:e4:e5:b3:1f:7a:59:5f:88:a5:fe:ff:d9:f3:73:
b3:3d:22:b2:09:5f:df:3e:26:7c:db:b6:8b:d7:2d:55:44:4a:
db:49:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:04:46 2025 by rpki-client