Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/q31C54RcTPjsic8T9oHhyuM8J4Q.roa
File: q31C54RcTPjsic8T9oHhyuM8J4Q.roa (raw, json)
Hash identifier: aAPkFKhs4Bpn+6cGyBlgBqLrqHYPX9olZ0QXVE8e1X4=
Subject key identifier: AB:7D:42:E7:84:5C:4C:F8:EC:89:CF:13:F6:81:E1:CA:E3:3C:27:84
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191E1D9208F569005269F0FD24610984DDC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/q31C54RcTPjsic8T9oHhyuM8J4Q.roa
Signing time: Wed 11 Sep 2024 16:09:48 +0000
ROA not before: Wed 11 Sep 2024 16:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.152.178.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 10:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:d9:20:8f:56:90:05:26:9f:0f:d2:46:10:98:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 11 16:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab7d42e7845c4cf8ec89cf13f681e1cae33c2784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:2c:3d:14:5f:bd:5b:06:57:a7:5c:a3:48:
8e:48:a2:87:f5:df:a9:c4:e3:52:f6:a3:bc:0a:2c:
5f:2f:2b:38:e1:4d:3a:6c:fa:75:0a:55:31:3c:2d:
2a:fc:66:02:f1:1d:29:66:43:f6:5d:55:eb:e7:f3:
6f:87:59:47:72:b1:5f:15:f6:81:29:aa:63:a9:eb:
50:63:91:ff:d1:f5:91:93:08:13:1e:7d:a8:c8:09:
5b:e5:14:55:80:c7:e4:08:dd:44:31:de:0b:c9:1e:
ea:a3:59:b9:c8:b8:48:35:a7:5d:4c:59:c8:ca:40:
96:40:99:f9:1a:a8:5a:a7:65:6b:e4:86:ac:db:08:
7e:2f:7f:5c:dc:bf:52:9c:a3:22:bd:18:ac:d2:d6:
cf:28:99:2e:cc:11:d1:35:d2:56:02:e7:2e:4c:d4:
a3:c6:c9:4a:39:e8:a8:d2:16:9b:08:8a:3e:3d:e8:
06:bf:6d:96:90:3b:9f:38:fb:88:bd:d0:d8:af:40:
4e:56:4e:d7:0c:f3:fc:b8:12:f3:14:32:a2:0e:c8:
60:e6:27:65:55:92:28:bf:76:dc:68:69:31:37:eb:
0a:d1:64:2c:58:92:3a:56:16:ce:16:a0:e3:f9:5a:
d9:b2:64:b3:af:b6:28:13:10:72:c0:c2:d8:a3:67:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:42:E7:84:5C:4C:F8:EC:89:CF:13:F6:81:E1:CA:E3:3C:27:84
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/q31C54RcTPjsic8T9oHhyuM8J4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0-82.152.178.255
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:27:c3:3b:a6:30:16:a6:6b:63:a7:c0:c2:95:93:8b:6c:1d:
24:de:be:97:fe:d2:7b:83:87:72:ea:44:12:1e:a7:9c:ee:7f:
47:2a:0a:b5:d0:e6:c3:fa:11:e9:5d:6f:d6:39:60:35:7f:ed:
10:97:e6:eb:ef:08:d6:8d:34:11:e5:fa:19:3d:88:3d:dd:bc:
68:7e:7e:31:aa:29:a2:2d:fd:49:4f:c0:0d:61:0e:15:b6:ee:
87:f9:96:1a:0a:df:37:9b:7a:7f:ee:47:48:a3:06:0a:b7:a9:
58:40:d0:24:17:fd:8c:53:e0:d5:a8:1c:53:af:fa:01:24:e7:
41:d0:d7:a0:a6:2c:fe:c4:a2:a6:1f:61:4b:9e:0f:d8:5a:70:
a8:41:7c:b3:ff:0b:8d:a4:80:e0:44:d1:43:b4:ae:e3:be:92:
89:9f:7e:65:8c:85:42:bb:78:c4:f0:fa:5b:6d:a8:8d:de:2f:
31:7a:ef:47:36:89:90:4d:0d:35:e6:bf:ac:36:61:4c:3f:c5:
ab:1e:a4:77:e9:58:2f:e0:24:45:27:4b:e9:03:26:c3:8c:40:
e5:2a:7c:f7:94:91:13:d5:f9:6b:8e:04:a1:8e:37:cd:7e:bf:
cd:19:aa:78:41:14:94:e0:16:68:e8:8c:65:7b:a1:b3:c9:93:
3a:90:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:08:03 2025 by rpki-client