Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aCjWRbSxg8D0BGpIubYAXX1fxRw.roa
File: aCjWRbSxg8D0BGpIubYAXX1fxRw.roa (raw, json)
Hash identifier: GCxr71Z4iRq1IQc3THDBolvGAp3hrWAqCe5KpKFBc2E=
Subject key identifier: 68:28:D6:45:B4:B1:83:C0:F4:04:6A:48:B9:B6:00:5D:7D:5F:C5:1C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194D7021AC4CEA3DBC8536BBE7AFA011D10
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aCjWRbSxg8D0BGpIubYAXX1fxRw.roa
Signing time: Wed 05 Feb 2025 16:47:06 +0000
ROA not before: Wed 05 Feb 2025 16:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.0.0/22 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.196.0/24 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.140.0/22 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 12:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:02:1a:c4:ce:a3:db:c8:53:6b:be:7a:fa:01:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 5 16:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6828d645b4b183c0f4046a48b9b6005d7d5fc51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:0d:7a:e9:ca:f0:d2:b3:22:d4:18:bb:41:
dd:05:b9:f6:d8:87:9e:4b:79:8e:17:94:e9:35:8b:
eb:65:1a:15:24:17:c2:0e:60:85:22:ca:c9:a0:1c:
0b:b2:89:72:0e:40:ee:67:4a:4f:bc:fd:71:56:f5:
b0:be:39:4d:55:92:60:80:41:24:33:13:dc:8b:ed:
3a:ca:ad:4d:98:ea:8b:dd:81:3d:e7:4b:4e:2d:4e:
72:3a:c5:4d:d1:ab:ab:8b:7d:ed:67:1b:f2:03:77:
95:37:12:c5:a5:ee:37:95:25:01:ae:97:99:77:88:
77:c1:8f:f5:d7:38:96:ef:49:64:6f:49:e4:12:07:
db:af:60:52:14:07:ec:8c:9f:eb:16:22:39:72:b4:
cd:f9:47:23:7e:67:b2:ed:ac:c2:85:e4:03:48:68:
46:3e:7a:3b:15:cd:cd:92:a4:fd:9c:6a:f5:f8:d9:
03:f8:92:78:c5:df:84:ed:d0:65:e5:2d:00:7f:38:
ae:2b:60:d4:9a:c0:a1:db:75:b0:5e:a1:b3:59:de:
1f:dc:0b:a8:e5:21:c9:b6:8d:4e:b4:73:e7:f3:79:
41:2d:e6:96:d6:2c:e1:c6:37:c3:d6:fb:1f:2b:0a:
fa:19:08:e0:6e:a2:f1:a7:82:ea:d0:d5:20:77:36:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:28:D6:45:B4:B1:83:C0:F4:04:6A:48:B9:B6:00:5D:7D:5F:C5:1C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aCjWRbSxg8D0BGpIubYAXX1fxRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.50.0/24
82.153.69.0/24
82.153.79.0/24
82.153.136.0/22
82.153.243.0/24
89.213.0.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.140.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
42:34:d3:d6:80:e5:77:79:28:3c:ec:ab:54:d2:07:9b:09:bc:
e5:f6:39:19:54:8a:10:f3:fe:b4:d5:83:ae:79:47:0b:ea:e7:
e5:40:98:c4:0f:b2:09:18:66:88:e0:b2:34:e1:e7:4b:79:0d:
8a:ee:31:88:19:20:9b:18:69:0e:db:a5:4c:c9:8c:6c:6e:fe:
0f:7f:a4:e0:34:95:17:e8:db:bd:03:e3:fc:fc:a1:e7:80:a6:
44:75:33:8e:aa:28:88:2e:73:35:8b:c2:13:aa:d2:7b:4b:00:
15:21:1d:78:18:9a:09:bb:1d:88:08:23:0a:d4:06:a2:f5:ea:
f2:e6:1c:9f:b9:cf:8c:62:b4:bf:9f:99:9b:83:7a:c8:46:98:
7c:0d:00:71:5a:3d:68:ea:ac:42:91:95:8b:3a:22:06:f0:3e:
ed:30:95:e9:d5:4c:2d:e5:af:2d:bc:ad:72:cb:fc:fd:8c:73:
f1:61:a8:0c:c7:a5:f7:45:44:62:87:e1:0d:dc:87:db:1a:b4:
04:4a:50:90:c3:1c:24:87:f5:31:a0:7c:61:51:dc:3d:3e:89:
97:a5:4f:a9:8a:d4:9d:a5:3f:83:ba:67:47:85:90:69:57:e6:
d8:11:a2:1c:5a:47:a5:22:74:82:67:81:21:e5:3e:22:09:f1:
92:c3:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:02 2025 by rpki-client