Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mUM0dhTi1d1y1CJHwo3gUkFE-2I.roa
File: mUM0dhTi1d1y1CJHwo3gUkFE-2I.roa (raw, json)
Hash identifier: b5yvTOWKBXHvhrxhOjkCeRBVpTAayk1fJf3dHMKWAl8=
Subject key identifier: 99:43:34:76:14:E2:D5:DD:72:D4:22:47:C2:8D:E0:52:41:44:FB:62
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193D913F52B450B7E2711183BB8B3B9FDA6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mUM0dhTi1d1y1CJHwo3gUkFE-2I.roa
Signing time: Wed 18 Dec 2024 09:23:04 +0000
ROA not before: Wed 18 Dec 2024 09:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 11:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:13:f5:2b:45:0b:7e:27:11:18:3b:b8:b3:b9:fd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 18 09:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9943347614e2d5dd72d42247c28de0524144fb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:4f:de:c6:3d:9c:86:de:08:ec:84:a4:fa:
57:5e:73:66:4b:30:e2:7e:51:c1:7a:e9:31:68:50:
6d:fa:a8:9a:81:5e:f8:a6:b1:4f:6a:93:f9:a4:ff:
b8:6c:12:c1:df:54:9c:17:3e:29:b6:2c:6a:5b:cb:
db:ad:ec:53:4e:dc:ea:43:93:8b:c7:fd:c0:08:69:
9e:63:50:57:2c:b4:da:d7:60:eb:7c:2e:87:37:97:
11:3c:c5:9d:a1:a0:28:80:95:86:e0:2d:f8:90:1b:
92:5f:bc:2a:ef:5c:67:36:ca:22:5b:40:89:6d:0f:
c4:b2:2e:03:7e:75:58:8c:22:35:92:cf:47:86:07:
93:62:6b:81:0f:13:3f:8e:7a:2d:e2:1c:52:b9:79:
ae:70:6e:68:69:eb:40:ba:64:87:1d:ce:9d:94:6c:
63:11:86:4f:18:53:ce:11:6a:cc:ea:38:4d:6d:a0:
d2:02:f4:81:2a:50:79:9f:12:78:49:a8:b5:e1:37:
ae:1a:a2:a8:90:57:0f:59:12:21:30:ac:17:53:95:
21:07:4d:86:f4:12:8c:03:81:06:e3:9b:73:be:7f:
f4:09:48:bb:80:95:5f:cb:45:87:39:fe:61:bd:07:
27:6d:88:65:37:21:19:83:1e:82:86:1f:c8:06:9d:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:43:34:76:14:E2:D5:DD:72:D4:22:47:C2:8D:E0:52:41:44:FB:62
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mUM0dhTi1d1y1CJHwo3gUkFE-2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.172.0/22
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
10:40:db:a2:a8:e3:7b:0f:cc:71:b3:02:76:b2:fa:d0:9d:d1:
79:71:10:e6:b4:b4:c1:7c:ac:83:a8:ec:5e:a9:ac:b9:48:c0:
86:77:48:4f:84:12:56:96:2a:ad:a4:23:b8:ac:22:1a:84:eb:
7f:65:b6:e0:3b:7b:e3:3d:22:59:c7:07:c5:bb:ee:c8:1a:57:
a5:97:de:24:00:55:7c:88:00:6d:e7:aa:e7:4c:59:a9:1c:d6:
3c:9f:3d:f1:42:3c:c7:c3:81:1d:f7:3a:ae:07:d2:73:b5:20:
f5:47:cc:ea:e6:6b:99:43:4e:22:6e:bb:2d:a0:59:c5:73:37:
68:11:7a:9c:3c:a4:87:64:98:45:ba:b0:d4:5c:a1:22:1b:20:
ad:bc:14:46:fb:08:7b:88:73:6f:5b:07:60:93:6e:50:7d:e7:
da:3c:10:5a:52:79:88:a1:de:80:df:ea:3e:9c:c2:80:5a:39:
07:d7:5e:d0:bf:bc:59:b5:44:b5:5c:a6:60:07:7c:2d:11:f0:
43:e3:72:e1:68:7b:c1:f0:d8:a5:55:1f:19:71:f4:08:0c:06:
32:c1:3e:a5:ac:31:bf:89:14:26:50:16:68:a7:b0:ce:d4:e4:
4d:73:a1:ca:79:1f:0c:d7:32:ca:19:56:0a:4f:7c:f8:72:81:
dc:e0:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:18:13 2025 by rpki-client