Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fujQ7-9MSntBTm7MfC3e_QV4tAk.roa
File: fujQ7-9MSntBTm7MfC3e_QV4tAk.roa (raw, json)
Hash identifier: WV/QGCOkpZxUQ/cbVWScOffJbhbzrtf4056l6Nuo8tM=
Subject key identifier: 7E:E8:D0:EF:EF:4C:4A:7B:41:4E:6E:CC:7C:2D:DE:FD:05:78:B4:09
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190C173DE318110F6BE5C68B9D5F16A8BE4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fujQ7-9MSntBTm7MfC3e_QV4tAk.roa
Signing time: Wed 17 Jul 2024 16:08:34 +0000
ROA not before: Wed 17 Jul 2024 16:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.168.83.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.201.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.239.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.216.0/24 maxlen: 24
217.144.154.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 12:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:73:de:31:81:10:f6:be:5c:68:b9:d5:f1:6a:8b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 17 16:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ee8d0efef4c4a7b414e6ecc7c2ddefd0578b409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:18:22:d0:66:3b:b3:0e:2c:46:cf:66:5d:
0d:b7:b0:03:53:c7:dd:05:0e:97:24:77:96:f5:52:
8e:5b:5b:7c:7d:fc:a2:81:33:1d:3f:1f:b1:d0:61:
f8:07:94:5e:1b:9f:b0:4b:25:62:ff:69:b4:ff:ba:
67:fb:c4:45:09:a5:f6:8a:c8:19:50:73:c7:ad:75:
7d:d3:40:69:a8:87:84:45:4f:69:82:33:c6:85:52:
68:32:bd:90:5d:a4:1b:17:aa:93:43:7d:99:57:8d:
80:29:25:5a:b5:b7:46:f7:c4:8f:cd:4b:bc:38:de:
86:2c:2d:d2:fe:7a:9f:61:44:85:cb:55:7a:de:58:
56:fd:5b:9b:77:3a:1a:19:c8:29:ec:31:35:4c:94:
0b:c2:5b:be:b1:42:84:58:28:88:84:f5:96:97:49:
a1:2d:48:43:b0:91:da:15:f5:af:bc:ed:83:e4:29:
96:e0:be:31:f0:e0:35:26:02:52:55:7d:3d:ea:ab:
6c:fa:b4:0a:9f:3c:28:0f:6b:4d:f4:e3:74:1f:c3:
b4:5c:8b:90:a7:bb:bf:81:50:d3:84:66:21:ca:a6:
17:b4:37:e5:ce:2e:ff:d6:18:34:ee:dd:e8:19:d7:
e5:d0:a0:d7:51:8f:4d:6e:63:8b:ba:18:26:ef:cb:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:D0:EF:EF:4C:4A:7B:41:4E:6E:CC:7C:2D:DE:FD:05:78:B4:09
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fujQ7-9MSntBTm7MfC3e_QV4tAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.83.0/24
82.152.176.0/23
82.153.136.0/22
89.213.50.0/23
89.213.56.0/22
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.201.0/24
109.176.204.0/22
109.176.239.0/24
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
213.218.216.0/24
217.144.154.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:66:6d:f7:b6:d5:33:05:94:e8:0e:51:2e:2c:b1:63:f7:80:
52:a4:3c:b5:cc:ce:26:fe:36:2f:6e:54:52:ba:cc:67:ce:83:
2a:d7:da:43:43:64:05:11:ef:aa:4f:ad:e9:63:e0:fa:44:13:
6a:a6:71:88:3d:7e:ea:2c:42:07:9b:d6:a3:0a:fa:34:7f:fb:
92:37:f7:68:a2:64:fd:1a:a4:83:f0:df:93:45:01:88:5b:96:
e0:91:ab:02:ea:92:1f:e6:d6:07:4b:2a:ff:63:88:bf:88:a2:
71:09:ea:07:6c:c0:5c:68:8a:1e:ac:5c:44:0e:84:22:00:43:
7e:61:75:c6:90:5f:cc:e4:8e:cf:e0:a1:e4:12:bd:51:06:26:
cf:c8:30:e1:2c:02:b0:44:dc:bf:c4:31:a9:52:0e:73:06:b5:
fd:5b:37:66:ee:dc:d0:a5:65:e8:fb:37:ef:29:aa:c1:d3:92:
23:31:b9:e3:54:ce:ce:75:2b:39:b5:4c:a5:fb:6a:a8:36:48:
b4:c5:a8:c5:4d:d5:49:e6:ec:1d:bc:3b:f0:05:47:1b:65:19:
b3:11:27:5d:cf:31:51:1c:b0:45:1b:21:d2:e7:6e:54:df:35:
54:36:c9:3e:f2:33:a2:13:d9:5f:fc:3a:2b:e1:67:b9:90:51:
2a:5b:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:08:55 2025 by rpki-client