Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ksxpv1VBMBDZf2hJ0GdqPX4ROxU.roa
File: ksxpv1VBMBDZf2hJ0GdqPX4ROxU.roa (raw, json)
Hash identifier: rxb1XG0B2ibD7IxfVgvCJ+Vn93kYQboF9DaIbpgMn6c=
Subject key identifier: 92:CC:69:BF:55:41:30:10:D9:7F:68:49:D0:67:6A:3D:7E:11:3B:15
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190081383078DE5A1772AF1C7D905A8B890
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ksxpv1VBMBDZf2hJ0GdqPX4ROxU.roa
Signing time: Tue 11 Jun 2024 16:13:34 +0000
ROA not before: Tue 11 Jun 2024 16:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.12.0/24 maxlen: 24
82.152.105.0/24 maxlen: 24
82.152.140.0/24 maxlen: 24
82.152.142.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.34.0/24 maxlen: 24
82.153.35.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.159.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 15:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:08:13:83:07:8d:e5:a1:77:2a:f1:c7:d9:05:a8:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 11 16:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92cc69bf55413010d97f6849d0676a3d7e113b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:d9:6b:2b:25:52:5d:cb:77:af:b5:28:15:
62:8f:82:19:fb:6c:30:6d:2c:90:d1:31:bc:8a:0d:
cd:2a:db:9c:a6:d9:d5:5f:c0:d4:86:8e:e7:f5:1a:
ba:53:a1:2c:16:ce:0a:74:d5:8f:a3:06:ed:a8:39:
ad:a8:d7:0e:46:5b:02:1b:38:e9:22:4b:df:6c:39:
68:66:81:16:44:45:c6:d4:8b:b8:f8:0d:2e:30:f0:
85:97:12:a5:cc:ba:74:56:a2:29:08:4b:67:ba:2f:
4f:27:8d:16:80:39:f2:25:b9:3e:6a:58:31:ba:64:
45:39:fe:17:b8:e3:14:27:6e:b2:0e:3c:b0:3c:83:
59:34:85:85:44:78:35:c4:71:6a:87:c9:2b:f9:f2:
64:32:bd:95:95:e2:62:68:f7:70:3c:ba:71:7f:6c:
23:14:09:45:6d:92:17:b8:c0:e6:1b:24:87:c8:7a:
1e:cb:95:76:27:4a:6a:04:7f:b2:f1:6e:6f:82:6c:
54:22:20:ee:76:af:e2:e8:9e:42:57:fa:c9:41:00:
4e:ba:6b:51:cc:bd:ab:e3:6b:de:dc:8c:89:84:c6:
86:67:f3:38:64:7d:79:70:1c:0c:74:1e:f9:75:5a:
09:3c:9b:2e:26:f1:c4:53:94:1a:4a:3c:88:77:d1:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CC:69:BF:55:41:30:10:D9:7F:68:49:D0:67:6A:3D:7E:11:3B:15
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ksxpv1VBMBDZf2hJ0GdqPX4ROxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.12.0/24
82.152.105.0/24
82.152.140.0/24
82.152.142.0/24
82.152.176.0/23
82.153.34.0/23
82.153.136.0/22
82.153.159.0/24
82.153.201.0/24
82.163.15.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.202.0/24
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:86:da:fe:ec:0f:9b:8d:36:8f:d7:77:5e:d4:17:3c:56:a5:
71:41:75:39:06:fb:0d:f8:c7:24:41:8e:a9:a1:e3:4d:5f:1c:
df:5b:4b:46:16:d1:9f:6f:5a:8d:f1:bd:7a:c5:d9:2e:5c:fa:
aa:06:b0:fc:c8:d8:72:ec:76:df:fd:d8:e7:84:c9:0e:8a:64:
09:42:5d:7d:97:eb:82:24:42:8c:85:93:e3:32:1c:11:ed:2e:
39:bb:09:6d:e1:88:6d:a5:ea:34:6f:e0:e9:85:c3:53:60:16:
4f:25:51:e8:24:0d:6b:15:af:83:fe:8a:17:79:9b:ec:d5:96:
7d:e6:82:9f:01:2b:14:bc:3e:37:5a:2a:66:f4:ad:af:b3:ca:
26:86:a1:74:65:cd:08:b0:be:ee:d6:53:8f:fe:7d:0c:cc:8c:
b5:b1:8a:5e:46:76:c9:d4:a3:2a:0e:bb:0a:73:b8:c8:ee:8b:
28:9b:20:7d:6a:15:c0:9c:f1:8a:14:a2:f5:9c:25:83:36:e3:
c4:c2:49:95:9e:11:60:a1:3a:4f:2e:ef:6d:12:d4:a8:d1:44:
43:8a:2b:2d:1d:a1:08:42:b5:79:38:29:c8:61:ed:10:65:ae:
16:78:fc:50:1f:12:aa:3b:79:1c:04:ae:7a:18:58:4e:4a:e2:
33:30:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:10:50 2025 by rpki-client