Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gF1jKgZ7uwE7ma35HaU30pHsvvo.roa
File: gF1jKgZ7uwE7ma35HaU30pHsvvo.roa (raw, json)
Hash identifier: cWblni8tBiru/0GI04Sfg390dyqeWUfjjQ8b+IUsxS0=
Subject key identifier: 80:5D:63:2A:06:7B:BB:01:3B:99:AD:F9:1D:A5:37:D2:91:EC:BE:FA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019317703E80CA15D4A0AFBAD6CC739FB9EF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gF1jKgZ7uwE7ma35HaU30pHsvvo.roa
Signing time: Sun 10 Nov 2024 18:57:32 +0000
ROA not before: Sun 10 Nov 2024 18:57:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 08:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:17:70:3e:80:ca:15:d4:a0:af:ba:d6:cc:73:9f:b9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 10 18:57:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=805d632a067bbb013b99adf91da537d291ecbefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:70:d8:8e:a3:ad:55:2b:a1:d5:72:56:96:
fb:17:05:f1:31:a3:db:05:6b:5f:44:f2:9f:08:48:
d0:ac:ff:92:31:66:00:7d:83:01:52:80:e6:6f:af:
d1:01:8d:f4:1b:b3:81:47:16:67:f7:21:fe:4a:5e:
09:77:27:5d:92:12:68:f9:c3:03:28:33:dc:c6:b8:
cb:70:d1:15:b0:6a:bf:80:1d:2f:e8:e6:2e:2c:b8:
cb:fc:c8:b5:67:4b:6f:1e:be:20:e8:a4:03:b9:f2:
8f:d4:9f:cf:62:68:60:20:a7:46:db:cf:a0:e8:de:
f5:ce:2d:7a:47:f9:4e:09:fb:57:3c:fc:95:ec:3f:
40:2e:34:b9:c6:2c:db:dc:0a:12:ac:d8:e3:d5:d2:
b2:e2:cc:8d:c5:e3:ad:38:1d:20:1e:ce:27:32:97:
fb:a0:15:18:db:94:81:58:e7:8e:8e:40:78:30:e8:
6d:d8:42:ff:6c:9e:4f:45:0a:df:9c:ba:5a:47:34:
ce:f5:4c:ba:46:67:29:d1:d6:67:4e:5e:13:9f:f4:
ed:fa:f2:45:e4:a4:28:bd:d2:09:27:24:67:03:17:
ae:5d:ba:69:11:da:31:04:07:93:ea:34:a5:43:d4:
ed:03:5e:25:0f:56:5c:08:d9:6a:10:89:18:3e:00:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:63:2A:06:7B:BB:01:3B:99:AD:F9:1D:A5:37:D2:91:EC:BE:FA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gF1jKgZ7uwE7ma35HaU30pHsvvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:a3:7f:b1:88:c0:68:ac:c5:59:61:25:c0:f8:c4:bf:79:2c:
24:c8:2b:75:0f:15:57:c5:56:b5:df:f1:cf:a8:b7:7e:6b:17:
85:85:73:31:66:24:76:77:1b:2d:f2:64:f3:ec:f9:99:4b:c4:
30:ac:b8:23:3a:c4:eb:69:3c:a4:7a:28:23:ca:00:bf:dd:1b:
22:a2:e6:fb:a3:05:b6:07:51:29:a8:6f:35:6b:df:f2:85:59:
51:65:0c:17:5c:b6:b9:1a:2c:fd:1c:99:f8:bf:50:2a:cb:5e:
27:2b:59:78:c1:f3:4f:93:a0:46:4b:b5:59:7a:cb:00:0b:17:
f9:91:e4:e8:7f:ab:a5:90:05:94:8f:5c:44:0b:9a:7f:9c:30:
50:44:a3:7f:bc:29:dc:86:e9:18:90:a2:90:fd:4a:8a:f4:a1:
94:d9:88:36:e5:d0:0c:7c:44:9a:49:b9:7d:55:49:0d:26:82:
0b:fc:72:f0:30:fa:e3:92:2a:45:24:d0:20:69:99:58:9e:80:
b9:dc:1c:78:54:d3:bf:fa:6d:62:e7:c3:ca:55:57:6f:56:40:
9e:d6:71:c8:a8:bc:2c:fd:1e:ad:ed:5e:04:ea:a3:93:e1:85:
52:33:77:f9:84:1c:04:1f:5b:13:c4:1a:3e:58:d3:1c:5d:ef:
4f:62:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:17:44 2025 by rpki-client