Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_sQ4T4OlGil0u_vb0eUSquaYCcA.roa
File: _sQ4T4OlGil0u_vb0eUSquaYCcA.roa (raw, json)
Hash identifier: ByPr0bYqHWe/EJ/clbiRJQ2Bcz5zlcIBKwwTYCEGaEg=
Subject key identifier: FE:C4:38:4F:83:A5:1A:29:74:BB:FB:DB:D1:E5:12:AA:E6:98:09:C0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191B7BC657BCADBAA5EE9CC2D8E7062AD70
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_sQ4T4OlGil0u_vb0eUSquaYCcA.roa
Signing time: Tue 03 Sep 2024 11:54:22 +0000
ROA not before: Tue 03 Sep 2024 11:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 81.168.126.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.127.0/24 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 14:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:bc:65:7b:ca:db:aa:5e:e9:cc:2d:8e:70:62:ad:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 3 11:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fec4384f83a51a2974bbfbdbd1e512aae69809c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:27:b8:05:85:02:81:e2:41:9e:e7:0f:48:
71:8d:43:07:aa:79:66:3c:17:6f:a6:7b:07:85:a4:
c3:e1:88:b9:5c:aa:a0:a9:3e:8c:31:86:97:e6:7d:
40:12:7f:d7:94:5e:23:9c:15:5d:0e:a6:0a:ce:e7:
f6:ff:cc:12:db:07:37:71:99:54:cc:e5:94:4d:d7:
7c:3d:af:5e:01:18:e4:c3:fb:47:db:bd:b6:42:98:
69:97:07:c4:e4:b1:f0:9b:46:1e:34:6e:ae:d5:72:
10:c1:42:c0:3b:01:52:61:7c:e4:6b:da:d7:f1:e0:
4b:83:ba:0b:a3:df:ed:b5:8e:c9:eb:52:95:e5:e5:
19:aa:dd:f6:af:3d:2a:31:60:42:a3:8e:58:36:bc:
5f:5b:94:c2:5c:b8:08:98:54:fe:69:0d:62:d1:5e:
b4:82:5c:0f:53:75:3f:5d:3a:e2:56:2d:31:71:87:
e6:b5:91:2f:38:0f:39:f6:51:bb:8e:10:ba:f1:29:
42:dd:11:91:5a:57:f5:40:76:e0:7c:04:0a:dc:d4:
13:fd:9e:c1:25:0e:51:02:f9:1c:f6:4e:99:f8:2b:
e7:67:bf:9b:cd:2f:4f:a8:b1:93:4a:d2:a4:bf:55:
be:53:97:90:84:b3:27:61:c4:bd:1f:9b:51:02:30:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:38:4F:83:A5:1A:29:74:BB:FB:DB:D1:E5:12:AA:E6:98:09:C0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_sQ4T4OlGil0u_vb0eUSquaYCcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.152.98.0/24
82.153.255.0/24
82.163.10.0/23
89.213.105.0/24
89.213.127.0/24
89.213.226.0/24
109.176.14.0/24
109.176.30.0/24
109.176.208.0/24
213.218.210.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9f:c6:7d:d5:4b:d5:46:b3:6d:75:97:8e:e2:18:ab:6b:bc:
a4:24:c8:7b:c8:c5:47:ef:d1:fa:a2:83:8c:c8:76:6c:ba:cf:
ac:42:41:a8:20:b6:44:77:2e:b1:2f:99:04:c3:67:27:be:e1:
5e:57:dd:d8:04:c7:92:ab:5c:db:65:59:6c:2e:2b:a9:63:57:
9e:5c:e6:18:32:e9:14:cc:9e:6b:f3:23:12:2d:39:e5:7b:5c:
7a:a9:97:03:ef:69:82:aa:1c:8c:66:ca:70:64:a7:f7:e5:1c:
7e:5f:54:59:0e:cb:ca:dd:ee:5b:e0:6c:7c:a7:df:d9:5e:40:
6d:c0:a8:ff:2c:a4:20:41:37:06:d3:e7:3b:e8:54:68:b4:ee:
0f:d9:4b:d2:fd:c6:2c:fd:86:cb:bc:5e:92:13:9a:10:f4:b2:
40:af:4d:55:b5:b1:a8:d0:9d:e8:2d:cb:ff:dc:b2:9b:38:ba:
33:b4:97:c3:55:a3:a8:97:b9:ba:10:bd:1a:46:8f:87:aa:92:
be:69:24:ff:a6:2b:9b:73:da:2c:4f:08:e1:f6:fc:56:ef:c3:
84:49:0c:88:be:ca:6f:64:17:64:31:7b:2d:63:f2:9f:54:7f:
3c:bf:0e:55:36:13:86:e9:94:65:c3:74:9e:b3:51:b1:0d:59:
dc:91:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:11:35 2025 by rpki-client