Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k57ZPCMQzaoe3_Q8CSFcCPWAF0A.roa
File: k57ZPCMQzaoe3_Q8CSFcCPWAF0A.roa (raw, json)
Hash identifier: Kr9BhV+cf/UPw1WiFWwtpL2ioS9kdF36aWVhIas/5pg=
Subject key identifier: 93:9E:D9:3C:23:10:CD:AA:1E:DF:F4:3C:09:21:5C:08:F5:80:17:40
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019113FB0A9E75BBF6957200AEDAB360B069
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k57ZPCMQzaoe3_Q8CSFcCPWAF0A.roa
Signing time: Fri 02 Aug 2024 16:45:04 +0000
ROA not before: Fri 02 Aug 2024 16:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 82.152.52.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
89.213.248.0/24 maxlen: 24
89.213.249.0/24 maxlen: 24
109.176.25.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.210.40.0/23 maxlen: 24
213.210.48.0/23 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 16:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:fb:0a:9e:75:bb:f6:95:72:00:ae:da:b3:60:b0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 2 16:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=939ed93c2310cdaa1edff43c09215c08f5801740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:9f:41:11:f5:a8:92:6c:46:7e:2d:43:a3:
3f:17:1c:1a:ef:ba:ef:34:78:4d:b2:2b:a0:41:8a:
c6:9d:2b:dc:d9:2e:f7:75:71:bd:7e:69:ab:b1:0c:
48:b1:fb:4e:7b:14:e7:46:ad:4c:ea:97:39:be:99:
7b:7b:df:5b:43:8b:0b:64:d9:5f:b9:33:db:78:95:
88:c6:dd:2e:39:ee:1c:9d:3b:60:2c:fd:35:4c:5f:
41:6e:8a:ae:fb:cb:45:f2:f7:b1:28:88:b5:ee:6a:
5d:6d:eb:d5:35:39:12:24:17:5f:53:ea:a2:ea:5c:
95:5e:7a:2c:62:33:12:49:3b:2e:61:8c:6e:8f:c7:
c7:e7:d5:c6:b1:07:e6:d8:31:78:b1:43:b2:d1:e4:
ba:b7:c7:56:f2:1d:b9:fa:34:39:cc:87:6c:07:f2:
32:46:4d:cc:7c:0a:77:4e:05:c6:3a:28:c1:49:68:
d1:8c:d2:e9:e8:4e:4f:62:51:85:56:82:0b:c2:af:
cf:23:37:93:0e:76:9e:b5:56:9b:52:f2:01:f4:d3:
9b:d6:4d:bc:24:b6:0e:65:ef:54:09:ed:9f:72:2f:
18:27:db:c3:23:c4:5d:31:d4:3a:1a:1f:4f:14:0e:
44:2e:92:29:d1:b1:cc:db:af:5a:9f:12:71:1a:2e:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9E:D9:3C:23:10:CD:AA:1E:DF:F4:3C:09:21:5C:08:F5:80:17:40
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k57ZPCMQzaoe3_Q8CSFcCPWAF0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.52.0/23
82.152.55.0/24
89.213.248.0/23
109.176.25.0/24
213.130.150.0/24
213.210.40.0/23
213.210.48.0/23
213.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:59:59:23:81:92:f0:87:6c:93:d0:21:87:c8:d5:e9:20:10:
10:16:5a:1b:7d:b4:69:ca:40:d1:5f:dd:66:71:2e:10:59:cb:
80:da:cd:24:53:e2:20:3c:4c:2a:70:12:d3:f7:45:63:4a:7a:
cd:dd:d6:34:7f:af:46:4e:84:8c:46:83:73:17:91:34:e8:e0:
7c:9f:00:b3:06:b6:80:8d:4f:ac:cc:2b:9c:01:1a:90:69:f8:
71:d9:c1:f4:5e:c0:a0:05:72:dc:01:df:d1:32:34:b4:52:4e:
81:bf:c5:d1:7d:31:cf:f0:38:1f:78:32:f1:5f:d2:a1:01:9d:
b8:f4:e1:4d:8e:f2:4e:4f:d0:24:83:ff:e6:bb:80:80:08:ba:
b2:e7:fb:d3:46:0c:4f:9c:b0:c3:b7:fd:6e:a1:88:0e:0f:db:
b4:f3:2a:0a:b0:9d:bd:b3:e1:e8:5b:5d:93:9d:e0:b8:96:6b:
88:f5:6f:16:6f:64:e0:0b:0d:7f:f4:ed:5b:d3:9f:e2:72:d7:
5b:a9:07:17:69:e9:0b:82:ac:e8:db:c6:cc:c9:47:dd:15:c8:
d7:5c:40:78:27:08:e8:4b:cc:00:a7:73:86:5d:1d:ed:f2:07:
dc:cc:0a:0a:8f:79:53:8e:05:95:61:bf:ab:94:6a:01:70:a3:
a0:b5:46:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:56 2025 by rpki-client