Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hG6bwf7sQNkkdwfMQifJefdKGQE.roa
File: hG6bwf7sQNkkdwfMQifJefdKGQE.roa (raw, json)
Hash identifier: /ZT9buuA8erikIRGsdIjtV2RyEBnlGLq7PJUB8vmGvs=
Subject key identifier: 84:6E:9B:C1:FE:EC:40:D9:24:77:07:CC:42:27:C9:79:F7:4A:19:01
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01930D030503FFFB13F57A4BEA6340C16193
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hG6bwf7sQNkkdwfMQifJefdKGQE.roa
Signing time: Fri 08 Nov 2024 18:22:01 +0000
ROA not before: Fri 08 Nov 2024 18:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 18:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0d:03:05:03:ff:fb:13:f5:7a:4b:ea:63:40:c1:61:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 8 18:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=846e9bc1feec40d9247707cc4227c979f74a1901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:5c:09:bc:08:25:c0:67:52:b2:b2:77:d2:
04:09:3a:de:ce:45:bb:3e:95:3c:d9:ac:ac:36:7d:
92:80:83:8e:58:2e:28:47:4e:04:70:5c:4a:e7:3b:
e4:09:97:8f:d4:a1:40:04:bf:44:e2:c3:2a:ad:ed:
d3:7c:1f:6d:f5:a8:02:55:35:2c:66:d0:79:fb:b9:
72:a9:f2:fe:db:8d:f7:d5:3d:30:a8:cc:2f:83:84:
9f:6d:ee:17:31:2e:88:4e:c8:71:a0:ac:d9:04:ee:
29:39:77:6f:5d:4b:e4:d1:45:fc:58:76:dc:ef:1a:
52:b5:18:8e:24:aa:d2:7a:7f:4c:6a:fb:72:5f:53:
0c:13:15:0c:f0:94:d6:84:e8:45:ac:f9:51:1a:40:
ed:10:87:02:3d:03:66:1e:4e:b4:8a:b9:b0:4e:d0:
68:3c:94:8e:81:57:5c:e4:73:54:32:1d:4e:a3:d5:
b4:8a:54:dc:15:0f:08:1b:10:13:ee:39:d9:ed:63:
29:b0:11:14:c7:e8:39:a3:63:db:4a:ed:3b:eb:54:
b1:22:9e:19:bb:c0:5f:96:dd:cb:87:e3:c7:b3:f7:
6b:8d:23:4b:64:da:e3:7d:a5:fa:1c:f0:97:b1:39:
73:5d:a6:9e:a3:ee:86:0e:ec:fb:2a:f9:b0:bb:bb:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6E:9B:C1:FE:EC:40:D9:24:77:07:CC:42:27:C9:79:F7:4A:19:01
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hG6bwf7sQNkkdwfMQifJefdKGQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.210.52.0/22
213.218.211.0/24
213.218.239.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
38:8a:db:20:84:89:e6:20:17:34:d7:58:47:45:a1:cf:56:f9:
fa:a1:58:88:4b:78:be:56:6b:a1:74:4e:dc:c7:fb:ae:30:e7:
69:90:78:ef:42:1c:5c:30:df:5b:b5:11:ea:49:2f:24:f7:88:
d7:d3:7e:09:06:8c:ce:7e:65:93:01:2c:8e:31:4e:55:eb:16:
99:d4:51:c9:f4:e5:8b:ae:ff:a3:2b:f2:1e:2c:45:aa:bf:49:
ec:cf:2b:d4:04:27:d9:f2:52:ee:6b:e9:5e:4f:5e:5d:1d:27:
a1:cd:0d:8c:33:2a:e4:75:8a:0c:5c:93:f7:d2:f8:00:3d:a8:
cd:b8:b1:63:9b:7a:6c:26:3f:e9:75:df:51:cb:45:d2:e3:7b:
2c:0a:70:e1:f6:26:5f:a3:ef:d3:3c:d1:a6:5d:53:b2:bb:29:
24:66:2c:cd:69:74:7e:4b:48:fc:a0:36:cb:9c:bf:fa:5e:47:
71:69:01:85:c2:7c:9d:46:a4:4f:be:41:f6:53:04:83:8c:44:
e0:14:09:8c:85:20:7f:54:7b:e3:56:ab:7b:88:a9:89:dc:b4:
b4:94:ba:e5:26:75:1c:6d:ec:81:17:2b:94:74:b9:1c:d4:e7:
99:56:d6:8f:f5:77:dd:8c:6e:43:01:67:b0:71:9e:9d:3a:4d:
2f:b6:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:42 2025 by rpki-client