Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dDw7MnxxZuXyMKCgtVlZXujXOvA.roa
File: dDw7MnxxZuXyMKCgtVlZXujXOvA.roa (raw, json)
Hash identifier: TTNtvQrWQFFTAqz1PtQEmKGhtc0Bnnq7IA31ehNlv1E=
Subject key identifier: 74:3C:3B:32:7C:71:66:E5:F2:30:A0:A0:B5:59:59:5E:E8:D7:3A:F0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191DC23F3C2DFBEB431E5C1692AD5D99965
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dDw7MnxxZuXyMKCgtVlZXujXOvA.roa
Signing time: Tue 10 Sep 2024 13:33:49 +0000
ROA not before: Tue 10 Sep 2024 13:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216022
IP address blocks: 82.152.249.0/24 maxlen: 24
217.145.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 17:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:23:f3:c2:df:be:b4:31:e5:c1:69:2a:d5:d9:99:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 10 13:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=743c3b327c7166e5f230a0a0b559595ee8d73af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:dc:eb:e0:b6:fe:01:31:7b:af:66:06:21:
c4:eb:35:6e:7c:17:46:83:f8:d5:49:46:d3:be:99:
d1:fe:cf:40:9c:6f:c3:96:53:fb:73:6c:a0:d8:9a:
4f:9c:14:2c:70:72:1a:42:ae:86:39:6e:2a:ba:09:
db:10:57:17:88:65:da:b1:c6:86:e4:4e:15:ee:3e:
5f:c7:92:d4:75:6c:98:71:af:62:b7:fc:c6:b1:7b:
68:f0:66:47:5c:c5:f9:91:6f:b9:fd:6b:37:10:74:
89:b4:bc:01:0e:72:54:b1:63:a4:cc:c4:ff:30:da:
19:f7:e9:76:3e:75:45:cf:bd:da:be:c9:a0:b6:67:
75:1d:a2:ee:d7:7a:af:fa:27:93:5e:ac:df:25:58:
f3:82:c7:94:b7:23:f8:54:d9:63:17:fa:b2:6f:60:
ef:0f:41:04:d9:fd:ff:4d:fe:3e:b9:f0:ad:d0:89:
0b:b8:0b:6f:71:5a:23:31:4b:2b:42:b0:7d:b2:a9:
e9:12:18:a9:46:f9:16:d2:32:59:30:48:6d:da:3e:
aa:45:aa:b5:54:ce:04:c5:f3:b9:74:fd:cc:15:b4:
23:98:81:f4:57:de:e4:7b:6e:c1:69:8b:21:5d:7f:
23:f5:af:12:30:6d:c5:30:2e:e9:c8:5b:bd:79:c9:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:3B:32:7C:71:66:E5:F2:30:A0:A0:B5:59:59:5E:E8:D7:3A:F0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dDw7MnxxZuXyMKCgtVlZXujXOvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.249.0/24
217.145.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3d:17:34:d0:81:8f:1e:bc:7d:52:cc:d9:94:1b:82:cb:93:
70:a5:57:da:6d:6e:6b:26:cf:17:f5:40:ad:f6:01:b8:c3:03:
2a:ec:1a:36:32:7c:88:48:a0:c1:75:50:b2:7d:14:74:62:65:
8b:8b:66:d9:6f:6f:47:b5:be:4b:c9:a1:02:c9:3d:44:81:07:
6c:d0:e2:3f:36:21:0c:36:10:5f:24:e5:6e:31:64:6c:0d:5e:
87:8f:18:ca:ac:bd:75:cb:3e:17:79:64:25:81:d9:c4:c9:3d:
e9:b6:7a:54:68:9d:9e:0f:2f:3f:0c:87:9b:31:73:dd:77:f6:
cc:9f:9b:1f:7d:1e:7c:cd:b2:5a:64:29:1c:cc:91:c2:7e:6e:
5f:da:93:22:b8:74:14:9f:9f:e9:85:f7:43:33:37:be:e4:4c:
30:9e:9b:15:94:f5:df:db:07:c8:c3:c1:96:4f:67:2d:00:24:
ef:c9:ae:36:23:aa:ff:b3:25:b5:e1:29:57:95:0c:5d:11:cb:
fb:2f:b0:65:c5:61:bf:5e:69:40:66:9d:06:0d:50:f6:75:cd:
69:4d:1d:84:7e:95:84:3f:d8:41:23:df:56:ab:64:45:da:27:
37:c1:7b:c0:de:f0:1c:00:81:79:e4:77:f8:cb:26:e4:7f:a1:
42:04:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:54 2025 by rpki-client