Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iWCm6GUafU-DLg9BIGKAoPGLTdo.roa
File: iWCm6GUafU-DLg9BIGKAoPGLTdo.roa (raw, json)
Hash identifier: 20MWUGyS9VI8gIgHBJO72wAXlzOyCJ711mkfXmHIILw=
Subject key identifier: 89:60:A6:E8:65:1A:7D:4F:83:2E:0F:41:20:62:80:A0:F1:8B:4D:DA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01906373E9DA46C8BA959B55F9CFAFCA9486
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iWCm6GUafU-DLg9BIGKAoPGLTdo.roa
Signing time: Sat 29 Jun 2024 10:04:19 +0000
ROA not before: Sat 29 Jun 2024 10:04:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 81.168.126.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.127.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 12:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:73:e9:da:46:c8:ba:95:9b:55:f9:cf:af:ca:94:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 10:04:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8960a6e8651a7d4f832e0f41206280a0f18b4dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:01:9a:79:fd:40:fa:f5:33:68:6d:37:07:
2a:22:f2:fd:ca:0e:0f:71:a8:81:57:a0:99:e7:93:
3a:58:ca:9d:2b:aa:3e:3d:fa:05:ae:5e:52:a9:be:
0d:c6:68:bf:9f:eb:c7:ee:98:6c:28:2e:26:cc:d2:
29:f1:80:ef:11:4c:59:8c:2e:8a:c5:d8:39:f3:ce:
7a:87:76:98:a0:ce:0b:05:74:e7:a1:a1:bf:ff:70:
e3:fd:c0:7f:fe:87:7b:bb:e8:7c:ce:ac:4e:76:ce:
f9:de:9f:14:96:b7:3a:b1:47:fa:2d:f4:ae:70:a8:
9d:0b:4b:54:e1:83:8e:57:02:51:ef:27:dc:c8:f4:
a6:84:c1:27:05:f1:81:1e:c3:dd:fc:e2:7d:96:28:
ae:9a:08:f4:ac:d3:a9:00:76:ec:de:b5:59:4f:66:
cc:23:db:9e:80:99:e5:d2:41:09:4d:af:7a:0b:66:
a8:a8:94:bc:16:f1:8c:25:e3:95:d6:27:e6:c9:32:
50:b3:d1:4a:7a:01:3b:19:4e:ad:cf:27:50:32:ae:
8e:37:81:98:27:6a:11:af:72:5c:b6:0c:92:94:b3:
8d:6a:ef:ea:80:8b:47:c5:09:32:1c:04:dc:cb:23:
4a:10:0f:81:58:8f:6d:0f:3c:7f:44:60:20:ef:cf:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:A6:E8:65:1A:7D:4F:83:2E:0F:41:20:62:80:A0:F1:8B:4D:DA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iWCm6GUafU-DLg9BIGKAoPGLTdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.153.255.0/24
82.163.10.0/23
89.213.127.0/24
109.176.14.0/24
109.176.30.0/24
213.218.210.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b4:ee:9e:e5:32:9e:26:4f:20:22:5b:bb:1b:05:cd:50:5f:
e8:a2:fe:14:95:b0:46:95:3c:7a:a4:a8:ca:3d:4a:cc:d4:72:
e5:82:81:9f:99:b2:ec:22:f8:2f:d9:44:4f:18:45:95:9a:41:
cf:6f:25:6d:f5:1e:36:ec:94:78:8f:24:eb:be:20:5f:92:6b:
f1:5c:80:1f:b8:71:0e:11:d6:ac:2b:0b:bc:14:14:ae:84:ab:
5d:30:07:64:78:78:49:ef:53:90:cf:67:58:8b:16:79:e2:3c:
a8:d7:1c:3c:11:d6:b5:2c:6c:eb:8c:76:d8:97:21:0d:0d:62:
d6:cc:58:da:c0:8d:a7:42:ec:9d:27:43:c5:bb:2c:97:3c:ba:
76:94:8f:07:08:19:2b:48:9f:f8:1d:8d:dc:fd:23:ba:fb:08:
c3:c8:fc:f4:67:ce:4a:c8:16:d1:47:2e:64:64:61:55:d9:db:
9b:0d:e8:be:de:13:0a:62:03:9d:d1:33:87:33:58:38:28:a7:
7e:51:1e:ed:b6:0b:7c:3d:cd:15:cd:eb:76:a7:da:7b:81:1d:
ab:a8:0e:1c:ac:e0:2a:90:7c:3d:c8:d6:f6:d1:d8:c1:9b:ab:
65:75:46:68:34:19:7f:fa:bb:f9:2d:62:e1:10:56:12:07:ef:
9c:36:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:16 2025 by rpki-client