Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rf6OSyJ4t9nhLeh1EnaR8ghUlTs.roa
File: rf6OSyJ4t9nhLeh1EnaR8ghUlTs.roa (raw, json)
Hash identifier: AT74UQ+t2ooJf8iFOSLnPm63fx8YSXdOL3XbqyxRtlI=
Subject key identifier: AD:FE:8E:4B:22:78:B7:D9:E1:2D:E8:75:12:76:91:F2:08:54:95:3B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190F47FA72F9CCB596C67A538B9F3806E73
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rf6OSyJ4t9nhLeh1EnaR8ghUlTs.roa
Signing time: Sat 27 Jul 2024 14:02:04 +0000
ROA not before: Sat 27 Jul 2024 14:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.214.0/24 maxlen: 24
89.213.215.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 17:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f4:7f:a7:2f:9c:cb:59:6c:67:a5:38:b9:f3:80:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 27 14:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adfe8e4b2278b7d9e12de875127691f20854953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:0d:87:bd:f2:79:74:0c:a1:dc:7f:ae:13:
56:02:e6:97:ea:bb:be:d8:7f:5f:a4:57:13:81:5b:
16:62:ed:c1:bd:d1:7d:7c:97:80:9a:80:f5:da:4a:
2e:fb:75:ee:1a:40:22:a9:f8:7c:91:91:7d:a1:20:
7e:e9:10:db:4c:93:e3:fb:86:46:51:49:1b:bd:41:
6e:d8:49:f8:bd:85:5b:46:16:cc:22:05:36:21:99:
7f:72:42:a5:e7:4a:ab:d5:f1:b5:6e:ec:7e:1a:f4:
13:58:c9:ec:22:3d:b4:c1:d1:92:b6:c2:a9:3d:bc:
0b:37:15:2a:73:19:70:0c:a6:6d:ee:5e:35:40:99:
bd:c5:38:8e:18:7d:6b:4b:b2:13:ab:e8:40:6b:61:
4e:c3:90:aa:68:45:1a:89:8a:60:de:b8:b6:a1:79:
17:80:6f:44:51:02:78:75:a7:80:00:e2:43:a6:52:
84:39:a0:b4:4d:90:58:64:fc:69:0b:4f:12:5e:96:
2c:5c:ea:f5:ed:97:d4:01:1c:81:8a:05:7f:7f:35:
95:8b:1e:09:1c:4b:dd:6d:d1:02:6f:4b:91:1c:fe:
71:df:1b:f7:55:ee:14:4e:2f:7c:65:d5:c8:e3:9e:
9d:b3:25:32:c5:bb:46:8b:3e:01:bb:df:7b:55:b4:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FE:8E:4B:22:78:B7:D9:E1:2D:E8:75:12:76:91:F2:08:54:95:3B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rf6OSyJ4t9nhLeh1EnaR8ghUlTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.153.243.0/24
89.213.50.0/23
89.213.56.0/22
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.214.0/23
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
40:29:bb:da:82:6b:05:63:c8:32:04:f4:65:0e:29:4b:07:83:
d6:39:e3:70:17:a2:54:6d:22:4b:36:b2:6c:49:8b:7e:fb:3e:
19:af:ec:f8:5d:98:4b:4d:50:41:9e:1a:4e:30:51:a8:c3:30:
3a:38:54:47:2a:91:15:e6:81:3a:09:79:c8:da:d5:e0:34:6a:
45:45:fd:b3:12:db:ee:33:17:88:8b:1d:63:68:d8:15:57:d0:
0b:6d:6f:e5:64:5c:a8:a2:de:94:ae:7b:12:91:6c:02:c4:1e:
af:0d:69:47:92:d8:7c:0e:22:2f:ae:31:5c:83:19:da:c1:4f:
11:e0:5a:e3:32:4b:fe:57:c2:8c:9c:0b:9d:ce:70:3f:98:43:
b0:bf:bb:57:14:49:ea:d1:d2:20:1b:ba:2d:31:f9:88:fa:5c:
e2:77:d6:a5:d7:e5:5c:4c:d8:cd:e0:5e:37:5f:4b:52:24:e9:
1f:b2:bf:94:cd:fd:17:26:ea:4a:f7:6a:42:e3:54:dd:d9:b0:
a4:ee:11:22:f0:d0:03:95:d4:94:ce:4f:3a:f3:13:d7:60:ab:
c5:f7:ee:8f:df:38:31:45:ed:d7:e0:bf:e4:7c:fb:2e:e7:60:
dd:32:c2:ca:46:8d:83:1e:68:7f:27:f8:d1:85:38:5f:39:37:
3f:4b:b2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:55 2025 by rpki-client