Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n9n3JjuJqihRU293gcjWWwzNqUY.roa
File: n9n3JjuJqihRU293gcjWWwzNqUY.roa (raw, json)
Hash identifier: K9ARy2TyaFTXaD8TCCw4u3rwTwLCY0fYlDpNC69rZyc=
Subject key identifier: 9F:D9:F7:26:3B:89:AA:28:51:53:6F:77:81:C8:D6:5B:0C:CD:A9:46
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FC971C670221869A9FF3B228ED8D4ABB9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n9n3JjuJqihRU293gcjWWwzNqUY.roa
Signing time: Thu 30 May 2024 12:20:27 +0000
ROA not before: Thu 30 May 2024 12:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.163.22.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 15:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:71:c6:70:22:18:69:a9:ff:3b:22:8e:d8:d4:ab:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 30 12:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fd9f7263b89aa2851536f7781c8d65b0ccda946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:48:db:e0:52:59:d6:24:a5:d5:0e:0c:2a:
f5:01:27:e6:ac:2c:40:9c:8d:e5:5a:d1:43:4a:46:
fd:9d:df:df:7f:ee:df:8e:82:09:76:3d:63:f6:f3:
3e:65:76:eb:82:3f:da:85:6d:18:60:0c:c9:ed:ff:
62:2c:65:14:12:4e:a0:80:80:8d:65:36:5a:1e:60:
78:d1:59:d4:72:cf:6f:ec:e6:b0:ed:d5:13:fa:59:
d3:e7:f7:e4:02:fe:33:4e:00:6b:6d:cd:fd:51:a1:
0e:91:67:52:c0:2e:a8:79:14:0b:c5:0f:13:3a:c0:
9b:39:d1:12:d5:47:77:68:9c:db:ca:c4:31:fb:52:
79:32:75:e0:9b:1d:db:b3:c4:57:e6:61:22:97:94:
0c:9a:12:97:b0:69:74:a8:8d:d7:c1:d6:26:2a:4e:
35:e6:fc:6e:dc:92:52:6d:b7:6c:93:a2:64:b0:ad:
95:a2:eb:62:fd:ca:2f:8c:a3:79:21:10:6d:9a:ff:
43:e5:e8:12:30:bd:28:d3:ab:d9:3c:12:17:ce:a7:
83:ee:39:28:50:d4:c1:a7:ec:ba:8f:26:35:69:5f:
0b:08:40:f3:76:52:b2:67:fc:37:be:57:36:a3:76:
d1:20:50:3d:12:5f:00:5f:49:2a:53:95:c9:e7:38:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:F7:26:3B:89:AA:28:51:53:6F:77:81:C8:D6:5B:0C:CD:A9:46
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n9n3JjuJqihRU293gcjWWwzNqUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.163.22.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
217.145.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:87:e8:2c:89:17:4e:ee:72:44:bd:df:ca:5a:ad:32:21:07:
a7:32:0d:ac:40:44:d2:79:80:68:fd:38:33:18:a9:04:05:3e:
1c:de:fd:ef:4c:bd:88:f1:fe:6b:87:74:41:44:c2:07:c8:f8:
19:e8:38:cf:18:b5:a1:bf:a8:0f:d9:d7:34:6b:da:bf:4a:9c:
e4:9b:75:09:45:0b:19:40:35:ce:8e:72:59:3e:90:f1:c6:3a:
1f:9b:3d:38:a6:4f:2b:f3:d7:e9:9b:50:97:61:19:9c:7f:34:
2f:a8:85:37:63:7f:6f:d9:89:5c:f5:ac:93:3e:3a:a1:b4:56:
5f:69:85:eb:d3:ff:6d:95:5f:24:c0:f5:41:2a:f2:c6:8d:5e:
27:ec:6c:e7:79:14:16:17:43:35:31:28:6c:39:34:76:e2:45:
84:5f:0f:53:ba:d5:97:b9:10:93:43:21:c3:b0:ae:9b:56:9d:
81:a9:b7:7c:1b:b8:2e:ec:b2:5b:23:e9:44:15:0b:59:f6:49:
81:c8:83:24:dc:77:78:0c:93:fc:66:f2:8a:72:3f:61:50:d2:
cf:c3:da:8e:dd:79:8a:e5:9b:d0:f7:98:52:b6:95:fb:47:e0:
7a:c5:9f:3b:3d:15:b8:a2:06:48:08:62:eb:ca:d2:ac:a4:3e:
2f:86:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:29:40 2025 by rpki-client