Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cG2X_tJRhi6qX0PJK3h2lH-gpUk.roa
File: cG2X_tJRhi6qX0PJK3h2lH-gpUk.roa (raw, json)
Hash identifier: KbRgi/hfjAPmDyogzseNhJaQ6Ww5vMdOrA2wkh5K/pk=
Subject key identifier: 70:6D:97:FE:D2:51:86:2E:AA:5F:43:C9:2B:78:76:94:7F:A0:A5:49
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E51071FAA2F3DBBFFC0DAFA975549A53A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cG2X_tJRhi6qX0PJK3h2lH-gpUk.roa
Signing time: Mon 18 Mar 2024 10:06:45 +0000
ROA not before: Mon 18 Mar 2024 10:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.168.126.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.150.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.180.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 14:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:07:1f:aa:2f:3d:bb:ff:c0:da:fa:97:55:49:a5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 18 10:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=706d97fed251862eaa5f43c92b7876947fa0a549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:63:8f:5b:e7:8f:40:41:4f:b4:6d:3f:f0:
18:67:60:92:98:73:2b:c7:cc:2e:dd:2d:b4:20:3e:
a1:93:fe:52:c0:33:74:be:19:c5:1d:ae:71:19:b1:
2d:57:21:ad:ab:bd:bd:77:13:8c:ba:67:fa:a2:d8:
c6:0d:71:61:5e:5e:81:ab:2e:fa:d9:be:be:6e:65:
2c:a6:55:42:b3:30:f9:44:85:07:e2:e9:0a:bf:dc:
9d:b6:5c:59:6b:86:3d:35:0c:18:90:15:06:c7:78:
ae:a2:6d:78:1d:21:ef:20:81:a6:c9:87:fd:b5:91:
63:6e:ae:65:11:b8:63:90:a0:08:93:84:e9:e9:c1:
c8:fe:30:42:a4:71:6d:76:a3:40:fa:da:4d:4b:40:
0d:b0:f7:2d:b9:da:50:b9:9b:db:26:72:a0:b9:da:
ea:c2:f1:d0:b2:a6:9d:2e:cc:8b:13:a1:fb:07:ce:
3c:92:f8:0d:ff:b6:e8:f4:60:0c:04:2e:2c:9b:66:
02:90:7c:3e:7c:1d:f8:fd:d5:87:2e:f3:28:3c:1b:
de:6f:c0:d7:95:69:9d:98:e4:4f:66:bc:92:f2:48:
53:bd:fc:11:b3:4b:fd:8f:2e:22:41:73:ba:c7:17:
3d:da:83:18:e7:91:d9:5b:c6:49:c8:5f:a4:e0:45:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:97:FE:D2:51:86:2E:AA:5F:43:C9:2B:78:76:94:7F:A0:A5:49
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cG2X_tJRhi6qX0PJK3h2lH-gpUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.152.176.0/23
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
109.176.245.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
50:73:3e:e9:46:55:ad:fb:cf:41:43:b9:7c:5b:64:2d:25:01:
5d:e6:55:61:ce:d5:b9:31:3b:5c:45:1a:e2:b0:bf:3d:eb:c0:
c1:93:04:fd:4d:d7:04:85:11:73:15:b0:21:81:15:44:04:c0:
d6:bc:6b:db:28:bc:bc:8a:94:99:e2:6b:90:a2:8f:73:00:bb:
93:6d:5b:c4:1a:da:ce:a1:64:05:8c:3d:c7:17:b5:7e:22:bb:
b1:45:84:49:70:a1:23:02:59:3d:3a:47:a8:b1:95:1b:89:1c:
14:1a:3d:2e:10:5f:6a:8d:7e:b4:88:09:55:ea:4f:95:41:18:
64:cd:bb:3b:18:13:17:93:4c:6d:f9:98:4c:30:7f:e4:89:9a:
e3:f4:3d:62:58:9a:17:b6:1e:10:a7:74:48:52:e1:04:e5:e9:
1e:6e:0a:18:d4:0e:07:fe:6d:aa:e0:7f:07:72:16:ee:e7:3b:
c8:ea:d8:dc:bb:3f:9b:00:85:9b:04:98:13:5f:d7:cd:1f:71:
cb:c2:0f:06:53:d0:b5:39:d6:57:1f:35:ec:ec:00:22:aa:3d:
76:5e:81:d4:cd:87:0d:ee:89:90:6e:2d:8f:e1:24:a0:b9:e4:
32:10:da:a7:4b:94:9d:4c:3c:a5:62:bd:0f:cd:08:25:03:d5:
07:8f:1b:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:34:20 2025 by rpki-client