Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ul4UJeki61XvpnU7lEqPMCKSoNE.roa
File: ul4UJeki61XvpnU7lEqPMCKSoNE.roa (raw, json)
Hash identifier: jr95RU+YduxtNODi3aVQnUN4PTVS+Jgx1XJTaNEyEP4=
Subject key identifier: BA:5E:14:25:E9:22:EB:55:EF:A6:75:3B:94:4A:8F:30:22:92:A0:D1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01909D265A11401038ABE6BF79EF4628EF1B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ul4UJeki61XvpnU7lEqPMCKSoNE.roa
Signing time: Wed 10 Jul 2024 14:57:34 +0000
ROA not before: Wed 10 Jul 2024 14:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.202.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 16:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:26:5a:11:40:10:38:ab:e6:bf:79:ef:46:28:ef:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 10 14:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba5e1425e922eb55efa6753b944a8f302292a0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:66:30:8f:69:c6:a2:65:e5:b7:f0:67:52:
12:70:72:f1:49:de:d4:a8:08:16:93:4e:99:f2:56:
40:1e:5e:44:ce:9c:2b:66:55:82:b0:2c:aa:cf:1d:
47:ed:e1:21:00:d6:1b:61:0f:f3:86:4e:d1:75:42:
81:0b:14:ff:8a:84:03:05:a7:87:06:eb:44:1f:b9:
d4:a4:c0:50:c3:3a:b0:53:ef:31:43:48:e1:2d:32:
52:b3:39:ff:2b:9d:f8:00:54:94:5b:1a:17:c6:cf:
d3:a3:1a:ac:c0:87:c0:e7:aa:fe:de:d3:9c:55:3b:
05:d8:2f:9e:97:ab:7a:62:fd:d7:1d:0a:91:25:43:
fc:e2:64:9b:fb:31:58:b7:f4:4c:25:62:7c:8c:01:
63:b9:96:f5:c5:1a:48:80:87:f9:45:34:97:e9:ab:
aa:a8:c3:b0:90:3a:30:8e:6b:fe:0e:90:5f:b7:ff:
52:d9:7d:20:d9:54:70:83:8a:f5:a5:6f:6f:ed:a9:
1b:f8:26:9d:cc:9b:5c:c8:37:c6:9a:4e:5f:08:74:
e8:1b:4b:78:a7:78:fa:cf:f7:52:85:88:f3:99:b1:
93:0f:03:c4:55:18:67:35:33:57:5d:db:e3:5e:3e:
58:58:ab:b2:5f:f9:46:f7:fc:44:ae:e6:e1:d4:cd:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5E:14:25:E9:22:EB:55:EF:A6:75:3B:94:4A:8F:30:22:92:A0:D1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ul4UJeki61XvpnU7lEqPMCKSoNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.153.202.0/24
89.213.50.0/23
89.213.56.0/22
89.213.148.0-89.213.159.255
89.213.171.0-89.213.175.255
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
88:a8:1c:b5:73:04:57:30:4b:0a:88:5c:fa:7d:62:45:42:90:
71:aa:77:63:1b:54:ac:cf:20:58:f6:03:b0:eb:b9:ff:3a:1a:
19:6b:56:81:27:f1:68:f1:48:c2:3a:3f:90:d0:99:9c:48:dd:
a3:8c:70:cb:03:cb:ae:a0:1d:34:81:8a:0c:30:bb:a6:80:4a:
51:41:9c:ee:74:66:2f:1a:55:3a:9f:e9:c4:c8:9a:ae:88:04:
63:58:f9:be:64:83:b9:1e:1f:ae:ff:15:94:ed:15:29:63:82:
3e:a0:05:84:3e:b8:a3:5c:48:6c:c5:d0:25:3e:af:b9:b9:43:
1d:2b:35:9e:a2:d5:11:27:59:a6:c6:67:e0:7e:04:bf:44:48:
da:52:c6:81:fa:9e:a2:97:93:6b:1d:6d:d6:88:be:7d:ef:64:
9a:6d:4b:86:7a:88:b3:a8:ee:eb:ec:0f:68:99:fe:e4:41:a4:
56:38:b3:2b:c7:46:7f:db:e9:6a:d3:8a:fe:38:10:00:d4:e5:
20:cd:10:95:54:03:65:46:23:30:b3:89:46:0a:2c:f6:fd:1d:
1e:cd:c7:ae:e9:13:2e:29:b0:c8:a0:6c:f2:18:df:79:94:ed:
73:f7:25:44:ea:23:03:fc:24:c7:30:63:ad:23:2c:74:4e:5a:
8a:6c:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:24:44 2025 by rpki-client