Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lNHhFsB1RLc-ntozLu3H06l0XCU.roa
File: lNHhFsB1RLc-ntozLu3H06l0XCU.roa (raw, json)
Hash identifier: IGQKEoPrhlcv7pxnAZcipkvBm3cw4TCppGXANeBvj5k=
Subject key identifier: 94:D1:E1:16:C0:75:44:B7:3E:9E:DA:33:2E:ED:C7:D3:A9:74:5C:25
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019026BFFD1F87FDB13D79E5E025A3082993
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lNHhFsB1RLc-ntozLu3H06l0XCU.roa
Signing time: Mon 17 Jun 2024 15:10:34 +0000
ROA not before: Mon 17 Jun 2024 15:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.35.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 15:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:bf:fd:1f:87:fd:b1:3d:79:e5:e0:25:a3:08:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 17 15:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94d1e116c07544b73e9eda332eedc7d3a9745c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:f8:55:5f:9a:66:02:f6:ae:8d:44:f1:e3:
46:72:25:ed:d1:a6:e1:9b:c1:6c:af:79:c7:ce:6d:
c6:dd:66:4c:d4:ad:bf:32:f5:c4:1f:f2:9f:a7:64:
e0:f1:93:5d:4d:54:21:62:70:00:92:17:3b:18:98:
5c:2b:2c:40:6a:0e:f9:8a:a6:ff:c0:d7:8a:9b:62:
b9:7f:30:2f:c5:41:ac:dc:8c:32:91:c4:7b:27:f9:
f1:26:e1:0f:61:10:94:86:05:ec:0f:cd:ad:84:aa:
05:98:0a:c4:6b:f3:c7:9a:be:05:cc:c2:47:4d:27:
05:c9:a7:0d:e1:a0:e6:08:d2:0b:8f:79:94:e2:f2:
30:f3:ec:b6:cf:7a:8b:f5:f7:99:ad:89:45:ad:8a:
75:18:c2:7b:fd:34:50:c4:8f:29:ca:ea:4c:92:78:
d9:19:67:b2:d6:5b:df:73:2b:83:b2:92:2b:0d:65:
e4:f0:0a:b0:9b:6d:a5:c4:50:c6:64:2e:81:fa:a5:
14:59:9e:94:ee:df:72:db:8f:ba:e1:44:90:9b:eb:
6a:af:ec:fb:26:89:91:fa:cc:06:af:b8:47:b0:0d:
d4:8c:b0:23:28:a2:1b:5a:31:c9:48:a9:33:94:d3:
0c:12:e5:c5:fb:9a:df:48:08:7d:ee:11:3d:a4:74:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:E1:16:C0:75:44:B7:3E:9E:DA:33:2E:ED:C7:D3:A9:74:5C:25
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lNHhFsB1RLc-ntozLu3H06l0XCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.176.0/23
82.153.35.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.202.0/24
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
17:21:ca:6f:6b:86:a7:4b:06:f0:9c:dc:b3:09:1a:82:4c:f2:
7a:13:7e:f9:c5:81:25:38:73:bb:e6:b8:75:22:5b:ee:5c:c2:
f6:33:e7:ac:ec:82:6a:0d:a3:8d:b6:6f:34:92:66:4b:62:bc:
d4:b7:b6:4c:ad:2e:2f:de:d5:7d:78:13:84:22:60:1e:45:09:
9b:3a:60:24:84:89:2f:5a:e0:50:f6:c5:ba:12:ed:41:16:18:
c8:8b:06:b0:34:c4:02:02:11:6b:a4:e4:e9:12:c8:b8:c1:bb:
d3:08:c9:8e:4e:64:10:e9:65:0d:0f:35:42:1e:fc:7f:85:53:
0c:1f:88:ff:67:7e:b9:1d:82:81:da:e2:99:92:0d:d5:93:f8:
91:bb:1b:1b:8e:48:cc:1f:30:e3:20:93:f5:a3:bd:60:e7:d9:
78:23:e6:c1:99:20:97:6a:86:db:2b:3f:c3:cc:87:65:02:32:
e0:02:31:9a:8c:72:49:44:2b:ec:57:09:4b:0b:93:4a:61:46:
5e:90:45:66:9a:fe:f2:8a:04:2c:7f:bc:27:5b:a7:36:3a:86:
11:06:53:03:7e:e1:47:ab:67:10:2c:cd:5d:39:dd:ae:20:d7:
0b:48:e5:a2:bf:06:fd:86:81:3e:88:cb:b7:1b:7a:65:8f:e8:
55:3a:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:23 2025 by rpki-client