Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n1xOzGftSdkwHcwP2zX-SW9Nh9I.roa
File: n1xOzGftSdkwHcwP2zX-SW9Nh9I.roa (raw, json)
Hash identifier: jCK9x4RW4n3lPFHY+s0ysTgRYX/+8Cx+7fLtp1WjaXs=
Subject key identifier: 9F:5C:4E:CC:67:ED:49:D9:30:1D:CC:0F:DB:35:FE:49:6F:4D:87:D2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01913786C5A4626C3FA1B1785B569F80FC3B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n1xOzGftSdkwHcwP2zX-SW9Nh9I.roa
Signing time: Fri 09 Aug 2024 14:24:24 +0000
ROA not before: Fri 09 Aug 2024 14:24:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.205.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.96.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 12:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:37:86:c5:a4:62:6c:3f:a1:b1:78:5b:56:9f:80:fc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 9 14:24:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f5c4ecc67ed49d9301dcc0fdb35fe496f4d87d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:ee:95:68:b9:6d:b2:e9:45:67:7f:63:c2:
10:96:65:e5:42:34:d2:e4:e6:f5:3c:d4:e1:2e:8a:
a9:13:93:3a:b3:ff:df:b0:51:f9:bd:63:d0:15:6e:
c3:93:7d:5f:e3:00:d1:a3:4b:63:b7:fc:57:a8:a3:
7a:e3:92:2d:6d:da:b5:b8:9e:77:5e:25:bf:f2:90:
af:a4:eb:e9:c4:58:5a:3c:95:07:b4:85:1b:eb:c2:
20:82:18:b6:d9:8a:dd:10:8e:30:d2:9d:9a:6c:00:
fe:a2:ba:f2:54:16:9b:30:0a:e7:c1:0f:24:d7:e0:
4a:6e:ae:ce:3a:b0:c7:b6:21:f4:23:11:30:42:5d:
33:84:5f:5d:b4:31:09:13:c7:1f:7d:ed:cf:6e:28:
96:12:c6:0b:16:bb:ca:1e:bd:18:16:4a:83:08:ea:
13:7d:f8:7b:77:48:a5:f4:18:65:72:5b:3c:ab:79:
67:61:dc:82:67:1d:8b:81:fe:37:7e:06:b8:4b:0f:
2a:cf:7d:ab:e8:de:40:4d:6c:c5:86:d6:a5:82:f8:
37:c5:5c:3c:19:8d:4b:e7:6c:5f:db:0c:41:9e:28:
02:61:d0:02:62:78:8f:2c:fc:cb:e6:82:0a:e5:24:
74:02:2a:2e:47:4c:60:13:fc:29:4e:3c:f6:f6:b8:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:4E:CC:67:ED:49:D9:30:1D:CC:0F:DB:35:FE:49:6F:4D:87:D2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n1xOzGftSdkwHcwP2zX-SW9Nh9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.153.205.0/24
89.213.50.0/23
89.213.56.0/22
89.213.96.0/24
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
15:02:ab:50:8f:30:c5:24:81:8d:b9:0e:f9:04:ca:7b:8f:cb:
19:c9:12:ef:35:b0:72:5d:33:80:9a:f2:d1:38:fc:aa:46:1e:
3a:44:83:51:5a:46:0f:25:a3:61:d0:d8:14:2e:70:02:58:65:
17:87:04:e1:a4:bc:96:82:6a:a6:77:a6:d8:2d:98:92:fa:d9:
59:86:cc:08:27:8a:dd:ac:42:3c:c2:49:f2:5f:13:cf:eb:c2:
bf:b2:ec:60:b0:1a:6a:26:6c:d5:ee:48:f0:57:16:9e:8b:50:
b4:e6:85:bc:0f:eb:35:2d:b8:82:33:29:89:f6:73:ce:1f:77:
59:4e:b1:f5:9c:c4:74:19:5a:42:8b:8f:8f:9c:d7:7c:c3:71:
9b:15:01:90:20:0f:b4:93:6c:d5:85:6f:69:5f:cd:7c:d2:65:
06:9a:7d:58:14:d8:44:37:16:a5:50:58:ba:42:99:77:19:ee:
81:4a:8e:03:e9:2b:59:47:1f:02:04:e3:cd:81:37:68:f8:dc:
32:11:23:d0:4f:b4:04:6a:8d:6a:fe:82:92:69:2b:57:a5:73:
4c:c9:1d:75:39:c0:d0:de:c9:ef:d2:f2:40:12:7a:32:8a:32:
00:f3:77:92:22:a9:f6:d6:e5:50:cc:c8:b6:d0:fc:5f:f5:61:
bb:40:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:34 2025 by rpki-client