Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/me_T2zzPlCr7b0vNNR7RfPrNe10.roa
File: me_T2zzPlCr7b0vNNR7RfPrNe10.roa (raw, json)
Hash identifier: Qp1CyuH1DxyuWV/CORUWyG73U7uYiAQbiGiVfRzADRw=
Subject key identifier: 99:EF:D3:DB:3C:CF:94:2A:FB:6F:4B:CD:35:1E:D1:7C:FA:CD:7B:5D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FE937522EC866247F4E92013288503AD0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/me_T2zzPlCr7b0vNNR7RfPrNe10.roa
Signing time: Wed 05 Jun 2024 16:24:27 +0000
ROA not before: Wed 05 Jun 2024 16:24:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.163.15.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.84.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 10:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e9:37:52:2e:c8:66:24:7f:4e:92:01:32:88:50:3a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 5 16:24:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99efd3db3ccf942afb6f4bcd351ed17cfacd7b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a8:20:5d:ef:9b:f3:74:f7:f9:90:f4:d5:2a:
a3:d6:56:36:ba:63:3a:26:fa:9f:3a:ba:4d:8f:b5:
a1:7d:ea:d3:bb:dc:c4:ac:76:bd:79:f1:62:d3:8e:
b8:b4:53:59:cc:b5:4a:b6:94:c1:e9:00:ac:b3:d0:
7c:40:9a:55:52:4e:7a:7c:48:65:a8:b8:79:75:af:
85:f6:9d:6b:7c:73:4a:c5:0d:27:6e:bc:32:fc:e0:
98:0c:cc:07:ac:ac:a5:a9:6a:3c:b4:4e:29:90:d7:
25:c5:5a:43:ad:dd:fc:40:8b:20:fd:ef:6f:aa:98:
27:2d:4f:f7:1f:0d:f5:1e:61:ce:b7:55:11:b6:76:
ed:6d:e7:9f:9a:8f:27:29:26:f9:5a:d3:5a:7a:03:
ad:f3:15:0c:7b:6a:d3:0c:38:8d:af:1c:ad:9e:8a:
f7:3e:63:83:a0:de:15:ec:6c:6e:b5:3f:ea:e8:e3:
4f:2e:a9:c0:92:0d:0d:15:b5:dd:53:0c:3c:0d:54:
f0:5b:62:83:06:d9:ca:25:b3:81:a8:70:47:e1:3d:
f9:8d:f6:23:2b:55:52:63:ce:d7:e4:28:27:7b:56:
b7:f8:d7:84:bb:a3:07:d5:8f:d9:33:fd:23:b1:f9:
cf:8b:c5:4e:e4:6d:29:70:6e:ad:ce:cb:3f:9c:1d:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:D3:DB:3C:CF:94:2A:FB:6F:4B:CD:35:1E:D1:7C:FA:CD:7B:5D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/me_T2zzPlCr7b0vNNR7RfPrNe10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.163.15.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.84.0/24
212.38.88.0/23
213.218.210.0/23
213.218.238.0/23
Signature Algorithm: sha256WithRSAEncryption
19:ff:d5:3b:ff:f5:7c:b3:14:e3:a6:15:a4:09:eb:47:32:ce:
8f:9a:84:66:9d:b1:1c:54:d9:e6:5b:2b:cc:b6:40:41:cb:2f:
ac:ca:e2:be:85:c0:87:a6:3c:f9:c1:1b:e4:1c:2d:72:61:07:
79:41:2e:35:b4:6c:0e:33:19:3a:81:11:e4:20:c4:0b:b7:4e:
64:a4:3c:ea:c0:85:39:2a:09:3f:61:21:0b:af:9d:54:dd:03:
47:de:1c:15:a9:ab:3f:e8:2f:61:cd:42:33:34:39:66:3e:5c:
2f:a8:e5:3d:7c:22:b7:88:89:b3:a5:90:8e:5e:63:82:b9:d2:
a7:cf:19:99:01:ac:2d:40:df:77:97:52:d0:82:5f:0c:50:2e:
99:54:e1:fc:ab:60:ac:cb:ef:6a:91:f0:c2:0a:9a:af:bf:70:
b0:91:4e:d7:5e:73:b1:0d:22:03:f9:95:d9:d5:41:03:d5:9a:
2a:85:28:6a:68:b0:9a:de:d2:8a:7e:3e:a3:c3:a0:a7:ec:cb:
27:a4:32:34:c3:7b:34:5f:6c:73:1a:e6:e8:6e:26:c0:e9:1b:
68:5d:cb:2c:9d:40:79:72:4b:c6:e4:29:98:02:3c:04:e8:40:
9a:36:9e:b8:9d:67:fc:17:0e:2d:ee:52:ef:1d:ce:2d:fb:1e:
ef:22:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:19:41 2025 by rpki-client