Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k82ZJCNh-WU_NZNI_jUIZ9pKtLY.roa
File: k82ZJCNh-WU_NZNI_jUIZ9pKtLY.roa (raw, json)
Hash identifier: s36ThFUTzkqnra7/QEjnF38IOnaGrvvMbgxlkv76ogg=
Subject key identifier: 93:CD:99:24:23:61:F9:65:3F:35:93:48:FE:35:08:67:DA:4A:B4:B6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191ADD28E5183E10E7244CF722C79C2571E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k82ZJCNh-WU_NZNI_jUIZ9pKtLY.roa
Signing time: Sun 01 Sep 2024 13:42:22 +0000
ROA not before: Sun 01 Sep 2024 13:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 80.240.88.0/21 maxlen: 24
81.168.122.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
82.163.24.0/21 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.108.0/23 maxlen: 24
89.213.110.0/24 maxlen: 24
89.213.122.0/24 maxlen: 24
89.213.126.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.194.0/23 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.228.0/24 maxlen: 24
89.213.240.0/23 maxlen: 24
89.213.250.0/24 maxlen: 24
109.176.230.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 17:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ad:d2:8e:51:83:e1:0e:72:44:cf:72:2c:79:c2:57:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 1 13:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93cd99242361f9653f359348fe350867da4ab4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:d6:35:cb:6b:46:62:95:41:df:ae:61:07:
8c:fd:86:43:22:d7:0c:2d:d6:13:26:62:d9:bc:93:
9f:18:02:69:80:0a:93:b6:75:80:0f:f6:73:18:ab:
fc:5e:79:bc:ab:bd:c3:2f:ad:ec:d0:4e:4d:40:8b:
f9:4c:84:1f:3a:b3:c2:2b:cd:8f:48:3f:29:75:7b:
1a:6b:5a:68:67:37:5a:37:c8:58:79:fa:c3:d4:b5:
76:35:f7:8c:74:a2:7e:03:d2:8a:25:52:56:e0:a3:
2e:5e:7c:c3:30:8a:78:6c:f6:e7:37:dc:e1:3c:d6:
f6:27:80:15:82:9f:17:8e:43:9b:e3:7b:00:78:91:
ef:05:66:63:a6:9d:d3:a5:23:17:8a:e7:2a:bd:f6:
9e:ce:19:d8:0c:44:8d:aa:51:67:b2:ba:90:dc:8c:
d9:38:b3:6a:7c:43:d8:1f:67:7e:a0:7a:d7:0a:84:
ff:a5:f5:9f:24:47:4e:d9:2f:b2:32:bc:f2:63:98:
0b:86:9a:e9:45:e8:38:4a:e8:ff:15:d1:11:91:b0:
bb:87:70:5b:2b:73:07:03:80:d6:33:5c:47:fb:11:
7b:98:9d:99:18:77:8a:fb:b1:ec:6a:54:9c:06:2e:
43:66:ea:d9:4a:3b:da:9d:ae:04:80:7d:e8:ee:ca:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CD:99:24:23:61:F9:65:3F:35:93:48:FE:35:08:67:DA:4A:B4:B6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k82ZJCNh-WU_NZNI_jUIZ9pKtLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
81.168.122.0/24
82.152.131.0/24
82.152.174.0/23
82.153.208.0/22
82.163.19.0/24
82.163.24.0/21
89.213.58.0/24
89.213.60.0/23
89.213.108.0-89.213.110.255
89.213.122.0/24
89.213.126.0/24
89.213.143.0/24
89.213.147.0/24
89.213.181.0/24
89.213.194.0/23
89.213.198.0-89.213.205.255
89.213.228.0/24
89.213.240.0/23
89.213.250.0/24
109.176.230.0/24
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c8:89:a8:bb:bb:e3:8c:51:c1:55:f4:87:0a:7b:47:34:3b:
51:6c:18:b1:0b:2e:4d:ab:ab:5c:76:63:c0:7f:16:ec:59:c8:
13:9a:f6:0f:8f:db:b0:e5:4b:8b:d3:01:74:41:1c:97:18:3a:
62:97:e6:4d:7d:0c:b2:f5:0f:cb:4e:f7:55:bf:80:ec:18:4c:
44:2b:3a:ba:76:bc:45:c8:59:7b:46:d1:7b:98:c3:da:04:fa:
a4:86:1a:e3:cc:6b:38:7e:15:d5:d3:a5:a1:df:15:37:00:7f:
50:29:cc:b2:75:a0:3c:31:a4:98:50:f9:7b:6d:77:a9:64:dc:
60:46:b1:0b:fa:d9:e5:e8:5a:67:54:2a:7a:d7:b6:ac:3d:4b:
f8:f8:ab:f6:c3:dd:a7:8e:97:cb:08:cf:aa:15:1c:5b:32:77:
7a:bc:d4:6e:2c:5d:cf:01:c3:58:e3:f5:2f:3e:d1:75:12:f5:
43:be:0a:f5:18:60:69:97:29:cd:fc:51:ae:9e:f4:74:21:34:
1c:db:e9:a4:55:df:d0:b1:01:e3:38:5b:7d:4e:ba:d0:31:4a:
78:3e:0a:71:95:e1:f2:55:b9:23:aa:88:45:bf:d8:ce:fc:80:
0b:61:cc:5e:98:c1:18:6f:eb:7d:f3:3e:51:34:62:d4:70:d8:
28:e3:6e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:43 2025 by rpki-client