Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ovd8im1l6ywyyDWwXcm3ViYDxLo.roa
File: ovd8im1l6ywyyDWwXcm3ViYDxLo.roa (raw, json)
Hash identifier: mcMCtPB8lQ836lb/E10XkHCXULd+2cbiIA+ol6dOK4E=
Subject key identifier: A2:F7:7C:8A:6D:65:EB:2C:32:C8:35:B0:5D:C9:B7:56:26:03:C4:BA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F53324F043E38FB4B043253BDB5CE73E8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ovd8im1l6ywyyDWwXcm3ViYDxLo.roa
Signing time: Tue 07 May 2024 13:15:56 +0000
ROA not before: Tue 07 May 2024 13:15:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 82.153.51.0/24 maxlen: 24
82.153.148.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.113.0/24 maxlen: 24
89.213.114.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
213.130.153.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:32:4f:04:3e:38:fb:4b:04:32:53:bd:b5:ce:73:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 7 13:15:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2f77c8a6d65eb2c32c835b05dc9b7562603c4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:87:09:a0:1c:a4:9c:79:88:d3:92:a7:aa:
62:ed:3a:a0:86:d1:59:b2:64:1a:ed:d9:1c:50:5a:
d1:d3:d4:a5:2e:92:21:0a:78:a9:d3:89:0d:49:b7:
19:67:6c:0e:bd:01:5b:07:6a:7f:94:d1:59:3b:71:
5c:08:39:53:40:b6:31:5e:f4:66:75:8a:d4:ca:e3:
e4:04:2f:18:eb:b0:cd:70:bb:c1:ea:1f:61:e5:cf:
76:fe:8d:2f:52:4c:cd:10:cb:81:63:6b:fd:9c:a1:
dd:cd:2e:18:fe:8e:99:a0:e1:74:f7:68:b1:32:81:
c7:2b:58:7e:bc:26:24:17:ae:7a:e8:c8:36:12:d6:
b8:68:b3:d0:31:b5:db:c5:35:49:47:ee:87:37:63:
31:ba:b4:d0:39:83:92:7e:4b:20:83:7c:db:27:70:
e4:3f:68:d0:4d:0f:01:a3:96:ea:52:57:a7:84:ef:
fd:fb:59:83:54:f8:17:7f:f3:f3:6f:5b:4c:34:4f:
ac:6a:25:76:25:35:4f:c7:aa:f3:43:e9:25:a8:ab:
c2:7d:ba:bb:f3:a2:a4:2e:e9:6d:fc:04:0f:a6:59:
6a:ca:3e:78:11:b9:af:4a:dd:20:86:2c:ae:18:6f:
df:91:2b:c4:fc:97:77:fc:2b:82:d6:50:98:19:60:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F7:7C:8A:6D:65:EB:2C:32:C8:35:B0:5D:C9:B7:56:26:03:C4:BA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ovd8im1l6ywyyDWwXcm3ViYDxLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.51.0/24
82.153.148.0/24
89.213.107.0/24
89.213.112.0-89.213.114.255
89.213.116.0/24
89.213.121.0/24
89.213.157.0/24
89.213.227.0/24
213.130.137.0/24
213.130.152.0-213.130.154.255
Signature Algorithm: sha256WithRSAEncryption
a2:c3:21:d9:1b:8a:91:1c:b5:31:e3:7e:26:25:7a:a5:86:81:
c4:1d:c0:cb:b1:f9:d1:92:ab:3c:35:b7:44:01:97:3b:94:62:
24:4a:e6:1a:f9:10:10:46:b9:8d:00:ee:58:8a:81:0e:83:52:
fb:21:7f:1c:0a:99:03:ff:3c:6f:d6:78:4c:6e:3b:d9:c6:4c:
9d:4f:20:97:58:40:a2:e0:4f:86:de:fc:44:cb:39:56:7f:f7:
4a:d0:e3:77:a6:c1:c0:79:87:f9:12:ea:9a:a3:54:a4:3d:d8:
a5:40:55:7e:c7:b3:43:f7:99:f7:9d:66:71:5e:28:de:cb:6c:
d0:af:3e:bb:a6:78:62:25:61:63:e5:7a:46:f5:b4:0d:b8:f2:
6b:d1:6c:e3:cf:66:dc:35:1f:48:09:33:e8:4a:40:14:be:b2:
b7:00:79:ed:da:7d:77:4c:00:ff:b2:8b:18:25:f4:ef:28:ac:
ff:b2:45:1e:a6:2d:38:54:67:a6:09:b7:04:9e:5b:3e:41:14:
81:dd:c5:2c:01:ba:a4:fb:d9:e8:31:49:39:82:3d:57:d7:1e:
dd:6d:f7:ba:1a:d3:97:1e:7b:26:1a:4e:1b:de:42:90:7f:fb:
7b:66:cc:1a:ce:05:32:31:dc:18:fc:e0:d9:d0:7d:4b:47:2a:
44:f9:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:27:20 2025 by rpki-client