Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bySs-hDbGCV-im1TrBSKmukmfaE.roa
File: bySs-hDbGCV-im1TrBSKmukmfaE.roa (raw, json)
Hash identifier: cKCc94i6CFB5qRtMI6neHuwXInoBXmNa9u845cXPuR8=
Subject key identifier: 6F:24:AC:FA:10:DB:18:25:7E:8A:6D:53:AC:14:8A:9A:E9:26:7D:A1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D3AEB8BED77F3A10E9B6111F70EAB1115
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bySs-hDbGCV-im1TrBSKmukmfaE.roa
Signing time: Wed 24 Jan 2024 10:02:11 +0000
ROA not before: Wed 24 Jan 2024 10:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.168.119.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 13:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:eb:8b:ed:77:f3:a1:0e:9b:61:11:f7:0e:ab:11:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 24 10:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f24acfa10db18257e8a6d53ac148a9ae9267da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:23:36:c9:45:d9:e0:40:89:b5:f0:de:2c:28:
f4:56:e5:b0:c3:02:cb:4c:79:79:5c:ce:52:ed:38:
38:47:1e:4e:79:83:0c:32:ee:fd:2e:de:77:6d:ad:
bb:2c:c3:51:9e:90:b7:66:1a:f5:c3:6c:88:f6:35:
eb:36:4a:bb:9c:34:c3:a8:1b:1e:ae:a2:19:53:dd:
60:46:3e:ca:44:4d:44:e7:be:a0:9f:99:84:21:d4:
15:33:24:af:bc:26:6d:94:41:e8:19:13:de:d6:d4:
4f:55:3a:78:e1:eb:85:d5:4c:81:68:3e:6f:62:7b:
72:64:7b:e6:2a:46:38:5d:e6:7a:9a:f3:1d:4d:ec:
d0:f4:53:d0:fd:7d:39:46:52:00:ef:8d:58:8c:34:
9e:20:b8:04:35:b0:b8:b5:d0:59:bf:c2:bb:e0:4d:
15:ad:91:30:b7:e1:64:70:81:29:ee:24:1f:22:18:
67:1e:a4:48:43:29:cc:96:ef:49:60:23:c3:e9:29:
59:f2:ed:79:f6:cf:ac:11:4c:f1:0e:13:7b:32:db:
1e:13:84:18:bd:3d:88:8c:24:36:75:d4:04:cb:33:
4c:83:ea:2a:3d:db:e7:c9:0a:0c:cb:fc:5f:52:ab:
10:62:dc:be:51:a1:6c:5c:74:50:bc:28:56:f4:4b:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:24:AC:FA:10:DB:18:25:7E:8A:6D:53:AC:14:8A:9A:E9:26:7D:A1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bySs-hDbGCV-im1TrBSKmukmfaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.1.0/24
82.153.50.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:fd:57:06:70:58:ee:65:76:55:10:df:00:48:8d:11:95:15:
9e:6c:8a:3c:c0:4f:d8:35:f9:12:5d:84:4b:74:46:73:41:66:
67:cb:b6:a0:a1:cc:cd:e7:d7:b8:04:06:5f:2f:83:29:d2:5e:
ee:f1:86:87:b0:67:4c:02:c8:18:a8:5b:98:83:c2:f6:5c:d4:
84:ca:e5:60:b2:bf:e0:ef:61:45:85:aa:32:58:73:9f:9b:cc:
08:c1:59:76:f7:5f:30:74:90:02:08:14:71:58:53:46:48:f5:
d2:13:bb:62:6e:fa:c5:fb:6a:06:79:d5:7b:d9:19:c0:3c:ed:
1a:fd:ab:a2:2c:92:4c:b1:62:43:2e:d3:23:9b:b5:60:4f:d6:
7c:54:27:b2:de:5d:d3:9d:f9:ae:4e:ff:1d:41:9a:e4:21:42:
5d:10:4b:8c:e6:11:8a:4e:74:f6:ed:58:f1:1a:96:78:03:ad:
f3:5f:ae:ea:a8:37:54:9a:83:89:63:21:07:69:20:fb:4a:ce:
ac:12:d9:f6:6d:0a:f8:6e:92:c0:a9:fe:31:1f:12:b7:44:4b:
fa:df:f3:d1:45:09:ce:3e:61:b3:4c:6d:7a:52:2e:39:be:0a:
a5:23:e5:78:4d:a7:36:c0:1a:5e:d7:6e:6e:4f:21:f6:01:f0:
24:c0:5c:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:14:26 2025 by rpki-client