Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pJG7Uhu_WcFk_tvZ0CrlEqYLujw.roa
File: pJG7Uhu_WcFk_tvZ0CrlEqYLujw.roa (raw, json)
Hash identifier: gaE8JxHKoj9qMC4GUGerjdqvvynE12aGySclf4fRSlI=
Subject key identifier: A4:91:BB:52:1B:BF:59:C1:64:FE:DB:D9:D0:2A:E5:12:A6:0B:BA:3C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019199C8DAAD8CBA6A892D5C3EE37F1D0E06
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pJG7Uhu_WcFk_tvZ0CrlEqYLujw.roa
Signing time: Wed 28 Aug 2024 16:19:22 +0000
ROA not before: Wed 28 Aug 2024 16:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 81.168.123.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
82.153.10.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.46.0/23 maxlen: 24
89.213.63.0/24 maxlen: 24
109.176.28.0/24 maxlen: 24
109.176.212.0/23 maxlen: 24
109.176.214.0/23 maxlen: 24
213.130.157.0/24 maxlen: 24
213.130.158.0/24 maxlen: 24
213.130.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 13:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:c8:da:ad:8c:ba:6a:89:2d:5c:3e:e3:7f:1d:0e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 28 16:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a491bb521bbf59c164fedbd9d02ae512a60bba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:8b:51:db:a1:79:bd:1b:9a:8a:c5:8c:90:
97:27:ec:4e:12:9a:81:76:6a:8c:e2:35:40:ec:22:
5c:31:c0:7e:13:3e:2d:db:1b:61:c3:44:26:8b:5f:
a4:83:99:06:96:47:ff:ba:90:f5:95:d1:27:db:60:
fd:99:c9:fc:af:a5:28:84:28:dd:49:ec:a8:a7:6c:
4b:9d:bf:59:b8:e4:56:aa:88:5b:b0:56:ed:c3:61:
75:c4:8e:3b:91:11:dd:f4:af:55:78:d8:d8:d8:1e:
d1:5b:1f:26:b5:ac:01:da:e1:ed:ab:b1:5b:56:dd:
0f:ab:69:c0:69:d0:81:73:7b:9a:0f:cd:19:65:e1:
bc:25:01:63:72:3a:07:43:82:de:ac:d7:75:b6:fe:
75:41:68:76:fc:a6:bb:cb:0d:9c:e2:94:93:39:4a:
62:50:ec:8a:9b:6c:db:db:ce:a4:16:1b:6b:c8:1e:
05:7c:b9:e2:ba:0c:ff:ac:70:4e:36:9a:ed:fd:1d:
be:34:45:7b:e7:87:52:88:31:00:7e:9d:d2:cf:1d:
e3:02:8c:08:bc:d8:f9:53:56:78:77:08:a6:5d:18:
e2:9f:3c:4b:4f:01:2d:c4:2a:44:01:6e:4d:d6:b8:
72:74:e0:c5:bf:6a:37:fd:93:5c:f8:c7:35:b2:0d:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:91:BB:52:1B:BF:59:C1:64:FE:DB:D9:D0:2A:E5:12:A6:0B:BA:3C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pJG7Uhu_WcFk_tvZ0CrlEqYLujw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.123.0/24
82.152.178.0/24
82.153.10.0/24
82.153.243.0/24
89.213.46.0/23
89.213.63.0/24
109.176.28.0/24
109.176.212.0/22
213.130.157.0-213.130.159.255
Signature Algorithm: sha256WithRSAEncryption
51:62:09:83:b2:3b:23:5f:8b:64:b6:f4:09:2e:77:5a:c5:54:
e4:c5:34:b7:15:96:b8:c6:8a:fa:79:82:ba:e2:28:48:07:a9:
8c:49:35:bf:a4:33:df:40:0b:28:52:70:2f:14:40:2f:ee:d0:
41:95:b5:f2:93:25:a3:08:60:ae:7c:3e:8f:73:f6:f5:f6:a8:
71:3d:79:69:82:e1:f1:21:ba:de:64:22:b4:94:bd:e3:d0:18:
c9:ab:c7:4b:3b:59:71:aa:82:6d:42:c3:73:f4:bb:89:33:e8:
df:f7:19:82:41:e8:d3:d4:35:ab:5a:aa:3a:4f:8e:36:1b:9c:
35:e8:53:b4:28:43:6f:cf:6c:a8:32:23:91:15:42:20:60:47:
b9:0a:a0:33:d5:e5:36:5f:7b:52:48:99:7b:fe:fd:52:19:51:
ac:0c:86:14:1c:35:a6:87:29:24:2e:e7:cd:72:5f:07:28:c8:
65:60:19:1c:fb:71:62:60:ed:95:e1:90:c4:a6:7b:1f:7e:e6:
8c:dc:22:2d:47:65:25:39:f3:b0:d9:b4:af:ec:cb:b1:2f:3e:
2b:1a:16:4b:c3:09:cb:38:78:17:92:e4:c7:e1:47:69:c9:83:
83:45:07:77:2d:86:ce:6d:72:78:4c:80:01:a2:e5:c8:d1:4f:
a6:cb:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:21:41 2025 by rpki-client