Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rCqP4E42wB0S1FhNh2yxgiuWVQs.roa
File: rCqP4E42wB0S1FhNh2yxgiuWVQs.roa (raw, json)
Hash identifier: RUIVphOb+j7+nr5CPqQ2QInkqdNcsyGRBqjd+u1z2B0=
Subject key identifier: AC:2A:8F:E0:4E:36:C0:1D:12:D4:58:4D:87:6C:B1:82:2B:96:55:0B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A9411FED2487B273DFDDA6F091D6B2C4D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rCqP4E42wB0S1FhNh2yxgiuWVQs.roa
Signing time: Thu 14 Sep 2023 14:22:01 +0000
ROA not before: Thu 14 Sep 2023 14:22:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.138.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 07:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:11:fe:d2:48:7b:27:3d:fd:da:6f:09:1d:6b:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 14 14:22:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac2a8fe04e36c01d12d4584d876cb1822b96550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:ab:dd:be:ff:57:ab:f5:6a:01:c5:a4:e9:
52:49:24:2b:eb:2a:90:30:c2:af:2f:5c:e4:bd:b7:
a8:9a:65:24:eb:ba:2c:e2:5f:06:66:4e:54:a9:78:
26:22:1a:ec:b2:29:15:20:84:09:83:6d:66:f8:3d:
9d:f2:bb:37:3e:45:c6:12:50:46:af:a4:32:a2:cd:
23:23:f0:1a:49:4f:af:0a:d6:14:be:4f:aa:01:be:
ea:4c:94:ea:aa:67:e0:ce:9f:39:74:06:13:e1:93:
95:c9:e2:40:4c:47:01:e9:6c:3d:f6:6a:8b:47:07:
0f:b9:f1:7f:45:cf:a0:f2:53:02:4e:f9:ab:bb:49:
52:51:c6:39:80:42:4c:b9:33:4d:08:e6:90:a4:eb:
23:3f:9a:db:b7:fd:44:d6:ad:d1:04:6d:fd:56:34:
a2:4a:50:4b:6f:ca:25:6a:58:e1:d6:97:93:48:29:
2b:a1:fc:03:26:63:d1:27:21:be:2c:a2:8b:5a:25:
c6:e0:4a:04:06:22:3e:29:79:91:bd:69:9e:5d:7e:
8a:9a:d1:46:c3:b8:64:ed:ae:54:ee:74:db:7b:00:
9d:db:d4:b5:0b:26:23:d4:c6:1b:5e:14:29:8c:41:
17:7e:b2:cc:5f:04:cf:d1:10:4b:16:b6:bd:7b:67:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:8F:E0:4E:36:C0:1D:12:D4:58:4D:87:6C:B1:82:2B:96:55:0B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rCqP4E42wB0S1FhNh2yxgiuWVQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.250.0/24
89.213.133.0-89.213.138.255
89.213.141.0/24
89.213.145.0-89.213.146.255
89.213.160.0/24
89.213.162.0-89.213.164.255
89.213.168.0/24
89.213.170.0/24
89.213.172.0-89.213.174.255
89.213.184.0/23
89.213.188.0/23
109.176.208.0/23
109.176.211.0/24
109.176.216.0/21
109.176.245.0/24
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0-213.152.62.255
Signature Algorithm: sha256WithRSAEncryption
2e:72:89:3d:37:01:21:fd:89:e6:3d:c9:9a:41:f5:e2:0a:8b:
7c:d3:f8:5d:06:dd:0a:29:9f:d0:e1:7e:8b:fe:7b:83:3e:11:
e3:39:fe:17:ad:86:00:b7:4b:61:bf:05:21:3b:35:d0:1f:45:
2a:b8:5b:b3:06:3b:4e:13:37:fc:d6:25:ff:21:27:74:14:ef:
6d:cd:20:2d:44:f2:35:0d:50:f8:e8:5a:cb:14:11:21:de:2a:
15:51:05:bc:d3:b8:69:09:57:e7:0f:f9:49:92:5d:2e:96:f2:
7e:1f:93:42:ea:50:ed:b7:79:5c:49:93:70:4c:b1:6b:dd:20:
75:e3:9c:69:7b:db:b6:ba:55:31:ba:f3:96:56:6f:e3:d3:a4:
94:12:5a:10:4b:0d:4f:86:61:4e:6f:82:7f:e0:06:4d:f2:d3:
0a:63:d2:13:30:ea:3c:d5:81:11:41:39:95:13:44:53:ff:6f:
97:da:6c:a4:98:e0:a0:c0:c4:91:7b:f1:c1:49:7a:9e:d1:3b:
7c:0a:dc:7e:af:93:a5:56:97:81:9c:e6:f2:bb:be:4c:97:cc:
e6:1e:53:9e:bf:ed:fb:31:0d:70:f1:be:83:58:aa:67:f7:95:
15:c5:ae:28:6d:3e:2c:24:c7:07:ea:1e:3d:58:c2:a0:3b:5f:
ce:38:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org