Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tOimDzczXsC1KqwgTJvzFtU-rA8.roa
File: tOimDzczXsC1KqwgTJvzFtU-rA8.roa (raw, json)
Hash identifier: yXul86276+U6b64LKiWyat1yauDDru7MKVRAF8THLkY=
Subject key identifier: B4:E8:A6:0F:37:33:5E:C0:B5:2A:AC:20:4C:9B:F3:16:D5:3E:AC:0F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01911D4EBCCB002D6D8ED4AAC39ED3F36CF1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tOimDzczXsC1KqwgTJvzFtU-rA8.roa
Signing time: Sun 04 Aug 2024 12:13:04 +0000
ROA not before: Sun 04 Aug 2024 12:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.6.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 13:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1d:4e:bc:cb:00:2d:6d:8e:d4:aa:c3:9e:d3:f3:6c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 4 12:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4e8a60f37335ec0b52aac204c9bf316d53eac0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6b:e4:59:13:ca:7c:c4:be:b1:01:db:d2:01:
2f:6e:de:69:e9:16:25:53:f1:b7:5d:33:68:2c:29:
fd:4e:0d:40:be:72:e5:7a:03:19:5c:0d:f2:c0:ad:
22:2b:44:19:5f:8d:60:84:a3:d9:fe:dc:d9:e7:58:
40:39:1c:d9:22:92:ed:d4:dd:ce:e3:a4:89:b0:09:
a8:72:4c:dc:b5:52:f5:ad:3a:18:1d:f6:e2:84:ce:
f8:b0:83:1c:4a:89:2a:90:ae:aa:5e:a3:e8:7c:80:
0e:43:fd:a6:cc:7f:f3:49:43:3f:60:65:0b:bf:9d:
20:8f:98:71:fb:f1:11:6f:89:46:af:9a:c2:12:11:
4f:3c:ac:a7:11:ef:1e:94:5f:06:9b:db:67:ca:74:
4a:2d:1b:df:f4:0c:7b:85:e5:33:09:69:b8:a2:82:
57:52:b4:53:3e:aa:2c:14:34:2c:2b:f0:17:2f:e2:
fd:25:d4:d3:9a:0f:ab:01:ed:b1:58:02:aa:9f:40:
d4:ef:34:32:5c:62:79:3b:3b:94:f9:12:33:90:f7:
4b:51:96:9a:83:9d:4a:c7:e7:a5:cd:5e:af:78:c2:
cf:a3:c3:8e:e6:82:ec:54:8a:30:15:b4:85:7e:c3:
8f:0d:85:1c:dd:25:33:d2:c8:94:ba:c7:16:ee:56:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E8:A6:0F:37:33:5E:C0:B5:2A:AC:20:4C:9B:F3:16:D5:3E:AC:0F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tOimDzczXsC1KqwgTJvzFtU-rA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.6.0/24
89.213.50.0/23
89.213.56.0/22
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
51:f1:b0:a6:92:e3:d8:f7:eb:68:12:da:59:5c:15:93:45:d0:
f8:01:8f:64:cc:df:5d:40:a6:00:f7:8e:32:5c:81:1d:2b:1f:
55:ae:ee:1b:23:76:e2:24:b0:00:fc:0d:48:d6:95:a9:cb:e0:
3d:0c:45:86:56:c6:2f:17:bf:dd:18:60:20:41:65:cd:91:49:
d2:0e:47:5e:67:57:e3:bf:52:fd:9d:d4:b1:cb:33:82:0a:ec:
df:a5:3b:4f:de:f2:5f:c8:89:0d:05:08:54:f5:a1:81:98:1f:
80:11:7f:28:87:c4:5c:b6:5a:83:39:d3:8d:81:bb:dc:f2:ff:
b4:d9:62:af:0a:a2:1e:86:19:13:bb:f3:c9:fc:50:19:d0:36:
9f:af:98:68:b7:34:53:d6:a2:1a:cd:a2:cf:7b:15:7c:d8:96:
20:71:97:e1:42:02:ea:c5:82:8e:cd:c8:2b:83:1d:97:00:a6:
ff:3a:02:24:80:ef:5c:4e:07:b7:f4:b6:cc:f8:9c:bb:48:ef:
82:d0:33:9e:06:27:91:c6:02:27:9f:74:4c:f5:a2:f5:95:e6:
f1:cd:1a:f1:21:ca:c9:47:a3:c9:ec:57:f1:9c:11:94:43:8f:
d6:5e:a7:6d:6a:6d:2d:77:42:b8:d6:ae:44:32:91:9b:83:51:
47:99:b8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:22:03 2025 by rpki-client