Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tq3k3wVquZ71fzHzc19Z4ank7i4.roa
File: tq3k3wVquZ71fzHzc19Z4ank7i4.roa (raw, json)
Hash identifier: 1YD88TeNr5dJnk5wy7mZKqa81bu8ovWYAWNya7jXgL4=
Subject key identifier: B6:AD:E4:DF:05:6A:B9:9E:F5:7F:31:F3:73:5F:59:E1:A9:E4:EE:2E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019156019690A30C36E180F5DCC642D5CC43
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tq3k3wVquZ71fzHzc19Z4ank7i4.roa
Signing time: Thu 15 Aug 2024 12:27:10 +0000
ROA not before: Thu 15 Aug 2024 12:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.12.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 09:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:01:96:90:a3:0c:36:e1:80:f5:dc:c6:42:d5:cc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 15 12:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6ade4df056ab99ef57f31f3735f59e1a9e4ee2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:80:4f:28:0e:51:3d:66:d4:6e:43:63:f8:
82:99:16:50:80:60:ea:7d:7f:5f:c8:d4:65:13:36:
d4:e7:45:15:06:75:8b:0c:bb:a4:82:f9:55:3f:be:
3e:a7:5b:c2:96:3c:25:63:b3:05:d0:2a:25:b8:e0:
2d:dd:ab:8f:df:e3:10:19:48:e7:54:0c:b6:c3:95:
48:49:8d:28:03:71:ea:7e:28:28:ec:d5:29:d1:ad:
3d:46:7e:ab:aa:a5:85:42:9b:01:e3:46:c2:e0:e3:
ad:ea:3a:24:6f:e4:68:01:24:44:33:02:f2:04:12:
a3:29:3b:ef:a5:cb:33:f8:31:5e:32:8f:e4:26:71:
14:cb:eb:66:c7:55:e8:62:e9:82:f8:f4:bb:cf:ae:
1d:f3:d9:9c:5b:d3:f6:45:18:b1:35:c8:06:92:3f:
7b:2e:c8:10:11:4d:71:ac:be:02:75:51:ef:bb:eb:
3c:73:6b:cc:5c:8f:bf:e8:72:f8:2e:ff:47:46:24:
78:f6:f3:d2:51:b3:ea:34:84:49:1b:db:f4:de:9c:
ec:fb:8c:19:a5:b5:44:bb:78:84:3f:46:44:dd:d6:
0f:43:d2:59:e0:49:10:89:7b:3a:8b:a5:fc:4b:0b:
90:3a:06:bf:49:b0:ad:a6:92:ba:d4:72:b9:ef:ce:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AD:E4:DF:05:6A:B9:9E:F5:7F:31:F3:73:5F:59:E1:A9:E4:EE:2E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tq3k3wVquZ71fzHzc19Z4ank7i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
82.152.176.0/23
82.153.136.0/22
89.213.50.0/23
89.213.56.0/22
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:42:4e:8b:fa:73:42:db:10:58:13:03:f6:ac:67:66:a9:44:
1f:ab:2c:c6:2b:76:cc:bb:bb:60:8c:5b:ed:ca:09:d6:21:0e:
16:b3:6e:ef:03:cb:02:5a:a6:3d:e5:3c:c1:e8:72:76:42:76:
6c:36:ea:ab:7e:0a:0c:bc:a0:0c:c8:db:f2:34:7c:64:0e:06:
08:29:c8:a4:8b:72:3e:f7:4e:00:37:a8:67:d2:1d:21:30:f5:
76:0f:62:ea:05:d0:50:b7:dc:4f:2d:c7:27:ea:f4:ab:11:2d:
90:0f:a8:91:3d:fc:28:6a:c6:9b:3a:9c:b6:91:28:01:ee:c5:
b3:25:8f:7c:70:a0:78:05:0b:42:37:25:60:d1:6c:82:25:1a:
9e:c9:89:cd:53:dc:bf:d7:cd:7a:b2:f4:a2:6f:b1:c2:33:bb:
ab:db:f4:92:b1:22:ec:b0:74:56:1a:64:5c:d6:f0:c3:1b:02:
cc:d0:87:be:4f:3b:37:e0:9b:2c:7f:5a:39:e2:fe:ef:0e:66:
3b:e4:ab:a0:59:38:97:bf:e0:d6:54:e4:bb:83:87:95:d2:81:
92:d6:57:4e:58:ac:6c:93:1f:6a:60:3a:3c:71:78:09:e9:fe:
70:7c:54:56:4c:07:bb:c3:c1:54:a0:c4:92:c4:f8:87:dd:10:
4d:9c:7b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:11:35 2025 by rpki-client