Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tJUd_Qlk0SBItK2PujzYa1ogRc0.roa
File: tJUd_Qlk0SBItK2PujzYa1ogRc0.roa (raw, json)
Hash identifier: 0OJDuU8n7iuI2iMhgMHuRw70vl7MoqWiPl+/vTD+kxI=
Subject key identifier: B4:95:1D:FD:09:64:D1:20:48:B4:AD:8F:BA:3C:D8:6B:5A:20:45:CD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01909142E53E57C72C81866FC7D6D7A910BC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tJUd_Qlk0SBItK2PujzYa1ogRc0.roa
Signing time: Mon 08 Jul 2024 07:33:18 +0000
ROA not before: Mon 08 Jul 2024 07:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.98.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.207.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.134.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 16:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:42:e5:3e:57:c7:2c:81:86:6f:c7:d6:d7:a9:10:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 8 07:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4951dfd0964d12048b4ad8fba3cd86b5a2045cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:cb:6d:47:21:96:ef:8b:bc:ee:e3:05:78:
d2:97:a6:21:33:cf:1a:e3:6d:dc:63:56:c1:fe:3d:
0d:1f:55:b2:12:d0:d9:21:80:b5:f9:46:0d:44:c0:
18:f9:1d:a1:91:c7:64:37:04:46:fc:26:61:0d:7b:
d1:14:80:57:c2:b7:3f:4b:ee:de:36:ee:3d:63:0b:
44:6d:6c:3f:d0:70:48:33:93:8a:16:98:0f:31:22:
5a:27:02:1c:9d:4e:74:ba:9a:15:f5:8b:db:b6:aa:
2a:7c:21:d2:a8:d7:42:23:7d:f7:e9:fc:6f:6f:17:
ad:ea:d5:1e:d9:e9:8f:ac:4a:58:52:80:81:62:8d:
c8:43:24:7d:72:c9:94:11:26:75:f8:ea:23:63:7c:
c7:73:6a:60:c2:0d:13:21:d2:a8:09:5b:21:0e:65:
b6:81:b3:87:95:ab:c8:3c:63:26:80:bd:22:83:99:
fc:7e:1d:1c:4a:0d:61:d8:22:45:79:da:1a:2b:ea:
a6:01:2f:b1:35:5c:29:a1:10:8d:d6:1a:20:6e:92:
d1:15:ef:33:b5:65:44:1b:83:6d:f8:a0:b7:19:2c:
7b:75:43:08:e3:58:e5:1c:f4:a6:b5:11:38:f3:60:
a7:20:56:16:b3:f8:6f:d1:4f:20:b3:6f:bf:e5:3b:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:95:1D:FD:09:64:D1:20:48:B4:AD:8F:BA:3C:D8:6B:5A:20:45:CD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tJUd_Qlk0SBItK2PujzYa1ogRc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.98.0/24
82.152.176.0/23
82.153.136.0/22
82.153.207.0/24
89.213.50.0/23
89.213.56.0/22
89.213.134.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.68.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
85:8d:62:fc:bf:ae:17:a0:34:02:28:4e:ef:6f:61:06:24:74:
a6:61:2a:60:8b:64:6f:e3:4d:1d:86:27:2d:68:97:83:54:50:
72:08:bb:18:7c:fa:b2:e1:f9:1d:29:3c:6f:75:da:4e:07:eb:
a7:37:0f:1e:9c:3d:f6:17:8b:83:e4:92:4f:91:d1:43:94:c7:
3c:5d:38:12:4f:9e:4f:93:56:9d:a1:07:63:bb:e5:46:65:f1:
2f:be:08:d3:ca:36:47:18:ac:e1:3a:2f:2b:e8:0c:f1:d0:62:
a3:9a:bd:ff:ef:1a:79:3f:a8:30:5f:06:f3:12:64:2d:91:98:
f6:fc:8e:2f:ef:6d:2f:b6:c9:93:41:d9:81:bf:53:01:5a:f2:
37:d0:9a:0e:dd:28:b3:51:0c:c6:35:6b:2c:c3:e3:5d:79:d7:
b3:8b:8f:c1:4d:14:24:1c:f3:6b:a1:94:04:85:d5:ad:94:7e:
fa:6f:96:11:19:06:2f:2e:9e:0a:14:47:78:2d:28:d0:55:dd:
ff:6c:41:fd:85:3b:93:42:89:ea:00:8c:25:e8:47:b5:47:64:
02:ee:44:d7:fe:1b:7f:53:7e:1c:b2:b5:cf:ee:c0:3a:11:4d:
00:7a:61:25:d8:7c:11:a8:21:7d:33:cb:5d:42:24:d7:ec:ee:
71:3b:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:28:08 2025 by rpki-client