Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nMKydio4Mqz8_97gJBiS9De6-VM.roa
File: nMKydio4Mqz8_97gJBiS9De6-VM.roa (raw, json)
Hash identifier: wGL2kxXiuMceA/9fmrCjGrRQw2QBsZGGsbBcRg2SKWY=
Subject key identifier: 9C:C2:B2:76:2A:38:32:AC:FC:FF:DE:E0:24:18:92:F4:37:BA:F9:53
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192B366E2A064AF806BE7ED69A1EA5035BF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nMKydio4Mqz8_97gJBiS9De6-VM.roa
Signing time: Tue 22 Oct 2024 08:45:17 +0000
ROA not before: Tue 22 Oct 2024 08:45:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 07:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:66:e2:a0:64:af:80:6b:e7:ed:69:a1:ea:50:35:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 22 08:45:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cc2b2762a3832acfcffdee0241892f437baf953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:46:65:a9:ad:50:bc:91:ef:7e:cb:56:57:
ae:e8:a9:bb:a4:49:7b:4a:88:9a:63:cf:b7:84:47:
26:26:04:3c:f7:07:b5:af:da:28:d9:58:a9:89:50:
66:5e:05:6c:e0:8f:0d:0b:69:82:76:6b:a8:b9:1f:
3c:02:4c:c8:7a:77:b2:b7:b4:b1:c7:31:63:d2:a4:
81:23:8a:6c:c9:6f:11:b2:20:32:7e:d6:d6:dc:c4:
0a:b6:04:82:73:24:ff:0b:fc:e2:c8:7a:41:2b:52:
28:fd:10:6b:54:af:69:cc:a0:4a:24:37:1a:c8:09:
3c:4e:b0:80:bf:aa:06:82:8e:c3:f5:a1:89:25:f5:
f6:95:b1:2c:d2:03:84:32:97:ea:fd:af:b8:96:d0:
45:21:d7:6f:9c:9a:10:1d:5e:f3:13:f5:38:84:9c:
b0:a8:07:96:4b:4e:d1:93:57:a1:90:2b:29:de:36:
1f:17:3d:c4:17:37:2c:9d:f6:1f:41:3b:b0:0a:80:
2b:f8:aa:e7:61:ce:e2:be:03:58:f0:d4:13:c3:6b:
3d:c7:96:ef:f3:64:ec:60:77:f4:3e:41:3a:86:00:
07:e5:78:01:1b:83:e0:ef:c9:b3:2c:0d:e6:f3:4b:
09:dd:43:62:cc:dc:70:f4:84:13:50:07:69:8f:51:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:B2:76:2A:38:32:AC:FC:FF:DE:E0:24:18:92:F4:37:BA:F9:53
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nMKydio4Mqz8_97gJBiS9De6-VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:72:78:7a:c3:ad:27:cb:5d:b6:2c:20:27:c1:85:63:51:4f:
78:23:6f:3a:a7:84:4d:4e:0c:b3:65:26:e4:a6:ff:71:f7:e3:
66:c9:35:6f:74:21:35:71:93:9c:11:39:67:77:d6:40:7b:0d:
d0:53:fb:55:1a:76:0d:d2:3e:cd:f6:a0:9e:b3:fe:cf:cc:cc:
ef:40:4e:70:67:ad:0f:cd:38:4c:94:e7:c1:88:f7:9b:6a:70:
4e:e6:e9:6e:1a:28:29:54:33:14:b8:cf:4f:81:51:52:5d:81:
e0:66:d6:2d:b5:23:12:a6:7d:eb:ad:c2:8c:c0:42:be:03:b1:
88:ac:7f:a5:bf:b7:37:a1:a0:dc:ae:2e:6c:e6:1f:22:d8:b9:
2b:4a:b1:85:06:9f:c3:b8:05:6e:ba:3c:e3:a6:2c:e5:d4:1b:
81:01:9a:e2:77:b1:77:06:75:24:04:3c:6b:7f:c4:27:d8:13:
9e:67:90:93:c1:38:68:d1:c8:b9:a6:33:96:1b:d9:a8:92:88:
04:e1:77:85:7b:5a:b9:14:8d:a0:e4:db:8e:81:1a:5a:d9:d3:
c9:3c:f7:f6:ad:a1:c5:df:24:45:de:5f:00:74:25:d6:b6:84:
cd:fd:7c:46:68:4b:61:55:73:87:26:d4:7b:dc:82:1e:c5:df:
5a:a8:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:04 2025 by rpki-client