Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/leL6aWX_vojN16_oZJAYaCnITuI.roa
File: leL6aWX_vojN16_oZJAYaCnITuI.roa (raw, json)
Hash identifier: md6CVEE0M3auLQet7e1Layjpbvhc0qsfPdtF8YpWdRw=
Subject key identifier: 95:E2:FA:69:65:FF:BE:88:CD:D7:AF:E8:64:90:18:68:29:C8:4E:E2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193F3C132F48442EFF4EEA4E1EEE04AECA4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/leL6aWX_vojN16_oZJAYaCnITuI.roa
Signing time: Mon 23 Dec 2024 13:42:25 +0000
ROA not before: Mon 23 Dec 2024 13:42:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 09:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:c1:32:f4:84:42:ef:f4:ee:a4:e1:ee:e0:4a:ec:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 23 13:42:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95e2fa6965ffbe88cdd7afe86490186829c84ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:97:4e:a2:aa:67:7a:d9:fc:59:9a:bb:b5:
d8:8b:9d:e7:f2:57:5b:13:1d:30:81:96:54:16:8e:
ec:8b:88:a8:2c:01:a6:fb:3f:c8:17:6b:91:3c:54:
73:cc:ee:07:b4:6e:48:c9:38:ef:b7:fd:57:a8:24:
8d:af:e8:ae:88:97:c9:96:87:e0:15:26:46:d6:23:
a2:91:d6:6c:0b:61:06:61:d8:0c:ba:9f:ec:6c:63:
41:75:cc:9c:17:a3:24:7f:c0:df:b5:b1:27:31:e8:
26:12:94:bf:fa:6c:0d:40:c2:f6:ca:cf:4e:1a:82:
e5:99:ef:ce:16:be:c7:b4:34:36:d0:7e:39:ed:26:
19:5c:d6:a2:87:6a:c2:f1:c2:66:cf:31:32:57:ab:
57:08:0d:cf:a0:d9:13:e8:bd:c9:be:13:2d:8f:66:
e8:36:31:69:8f:c8:59:2d:cf:b5:5d:9c:45:88:90:
1d:92:78:b4:60:d6:65:74:33:4e:ff:6b:02:26:c7:
19:12:90:89:07:e7:ad:cb:0e:19:38:fd:8d:23:0c:
5f:42:a7:77:ce:9e:1b:94:7c:24:1d:14:7f:6a:8b:
38:69:f9:b4:8c:91:48:90:06:ae:0a:54:ef:cb:67:
58:f5:17:4f:17:78:c2:9a:ea:36:da:2f:7e:8a:f1:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:FA:69:65:FF:BE:88:CD:D7:AF:E8:64:90:18:68:29:C8:4E:E2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/leL6aWX_vojN16_oZJAYaCnITuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.172.0/22
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
95:b7:32:f7:15:74:78:ac:60:ad:43:b3:20:b3:56:98:0f:6f:
bc:b9:2b:1d:a7:90:65:7b:f3:d0:99:e4:81:2f:ef:15:bb:6f:
67:6f:4a:88:e1:70:b8:82:a2:fe:10:f2:a2:4e:8e:1c:3f:68:
21:74:40:0e:8a:41:e8:92:de:00:90:3f:e6:9b:22:dc:48:b4:
94:ef:6f:45:70:95:08:64:ba:f2:b4:d7:a4:7c:c2:7c:c8:c8:
a8:aa:a4:e6:98:e2:d5:65:fb:ca:da:1f:b6:86:99:5d:05:2b:
8c:2f:c1:2d:da:61:e0:91:bc:f4:a0:50:1d:31:98:40:83:41:
07:9e:bd:03:27:ee:9e:86:72:c8:62:87:c0:8d:f5:c3:51:ce:
78:4a:ea:e1:ea:68:88:76:a9:69:11:71:a3:13:77:ff:5b:37:
3e:20:ab:16:04:56:97:09:06:dd:67:d2:fb:72:1c:eb:88:4b:
40:ac:37:d0:6f:5b:c1:d9:c8:a1:ac:b6:a4:72:8f:57:12:ce:
38:b8:93:d1:2b:1e:66:20:6f:18:8b:4e:7f:4b:e6:34:2f:02:
5c:f0:f8:e3:14:32:b6:f8:65:86:e7:9f:e5:b7:32:25:ef:1c:
28:38:d5:94:89:15:8b:69:83:44:85:48:ce:43:44:f4:42:47:
66:f0:ed:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:36 2025 by rpki-client