Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m6dQsd4aUx476U3f6klj4U35hYA.roa
File: m6dQsd4aUx476U3f6klj4U35hYA.roa (raw, json)
Hash identifier: gRZtNw6nZmQ97ejlGj81rtd8QseLNrl8eZLnhy9HiAo=
Subject key identifier: 9B:A7:50:B1:DE:1A:53:1E:3B:E9:4D:DF:EA:49:63:E1:4D:F9:85:80
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190175D638E40D89E78186BA7C96E66C5FF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m6dQsd4aUx476U3f6klj4U35hYA.roa
Signing time: Fri 14 Jun 2024 15:28:34 +0000
ROA not before: Fri 14 Jun 2024 15:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.142.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.34.0/24 maxlen: 24
82.153.35.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.201.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 14:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:5d:63:8e:40:d8:9e:78:18:6b:a7:c9:6e:66:c5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 14 15:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ba750b1de1a531e3be94ddfea4963e14df98580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ca:45:ba:dc:c4:e2:f4:c8:0a:e9:1c:36:fe:
34:b0:26:ca:1f:44:b2:8b:a4:66:77:d8:c2:49:42:
0b:61:68:1b:8c:6f:b7:b4:b9:1d:b5:d4:7a:c0:3d:
13:fb:6c:45:15:52:e2:73:ba:d1:e3:08:61:ac:8f:
3d:c5:df:fe:51:a8:e8:be:fa:37:55:d7:14:68:57:
7a:7b:6d:c1:bd:95:98:13:31:4b:0e:00:7f:c9:ce:
10:cc:1a:3a:58:b5:53:42:36:8c:4f:62:cc:e1:37:
b9:2b:7e:f0:2b:83:aa:ea:2e:bf:25:fd:a2:c0:5d:
f6:f9:76:ee:16:d7:5d:3f:8f:08:eb:93:d6:89:46:
c8:ec:75:81:0d:bf:de:c5:66:03:f7:00:95:3a:82:
75:b7:0b:77:46:77:8a:92:5d:00:c8:a4:e0:54:49:
6c:69:2e:77:28:9c:15:46:c7:ac:53:75:f9:00:4b:
da:8d:3d:34:6d:39:0c:b0:28:24:30:e9:d6:f8:29:
73:ad:6e:d1:c0:5e:01:f8:44:4d:a1:e1:3c:43:f8:
c0:0d:22:bd:72:f5:c3:d8:e7:a7:d6:40:ae:e2:8b:
b8:d9:fe:c4:6f:6c:51:ff:26:91:cc:3e:19:0f:4f:
2c:1b:c4:a6:1b:cd:48:a3:bc:44:3e:23:05:3d:f6:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A7:50:B1:DE:1A:53:1E:3B:E9:4D:DF:EA:49:63:E1:4D:F9:85:80
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m6dQsd4aUx476U3f6klj4U35hYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.142.0/24
82.152.176.0/23
82.153.34.0/23
82.153.136.0/22
82.153.201.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.202.0/24
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:fd:33:8c:0d:03:ce:da:c1:de:1c:14:c9:2a:a0:76:e4:78:
5d:80:70:0f:47:5f:c4:0e:2c:87:1d:00:33:f0:cf:1b:f9:b0:
d3:46:b5:c4:c0:38:42:7e:23:a5:49:d8:c9:7f:b3:e4:8c:b5:
4e:f9:01:e2:20:71:a3:70:fc:91:10:33:35:05:0b:f0:56:92:
df:63:02:80:3f:6a:78:79:7d:95:8c:45:52:d3:30:df:c6:1a:
31:5e:a0:21:f5:ae:0a:0d:b8:98:84:3e:8a:59:a9:c3:c3:fa:
80:08:44:35:ff:3e:3c:82:29:76:fc:15:83:27:12:58:ef:9f:
cc:34:95:4f:58:a7:7f:12:3a:07:eb:45:ca:16:97:48:cb:66:
c4:31:61:65:7a:1a:f7:35:1c:8a:c0:61:62:f4:10:61:3c:38:
06:59:cd:53:05:45:07:92:54:06:ba:f6:3c:6e:85:91:5b:a8:
f4:43:d1:bd:68:ac:78:52:ba:e0:e4:cf:69:c1:95:68:be:18:
31:02:f4:c8:6a:74:f2:ee:70:10:9f:bf:f2:05:e3:50:61:af:
26:f5:af:24:69:57:9e:9c:0c:50:33:6c:fa:5e:ba:d1:b6:f7:
1e:7e:24:36:34:da:61:32:c9:9b:1f:5b:7f:22:1c:66:85:fe:
c3:c7:dc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:21:09 2025 by rpki-client