Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vyD45537dm7K02oEW0Ml-meOVbU.roa
File: vyD45537dm7K02oEW0Ml-meOVbU.roa (raw, json)
Hash identifier: xINuB0XW1oEQ4U+4q7OXKABTDJDxxYC7iKC+r9KDark=
Subject key identifier: BF:20:F8:E7:9D:FB:76:6E:CA:D3:6A:04:5B:43:25:FA:67:8E:55:B5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019164D58FEC6239FFD34828E3523C39280F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vyD45537dm7K02oEW0Ml-meOVbU.roa
Signing time: Sun 18 Aug 2024 09:33:23 +0000
ROA not before: Sun 18 Aug 2024 09:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.76.0/23 maxlen: 24
82.152.79.0/24 maxlen: 24
82.152.86.0/23 maxlen: 24
82.152.88.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.38.0/24 maxlen: 24
82.153.56.0/24 maxlen: 24
82.153.61.0/24 maxlen: 24
82.153.83.0/24 maxlen: 24
82.153.84.0/24 maxlen: 24
82.153.152.0/24 maxlen: 24
82.153.186.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.239.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
89.213.232.0/23 maxlen: 24
89.213.234.0/23 maxlen: 24
89.213.236.0/23 maxlen: 24
109.176.32.0/21 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.56.0/21 maxlen: 24
109.176.235.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.210.58.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 13:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:d5:8f:ec:62:39:ff:d3:48:28:e3:52:3c:39:28:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 18 09:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf20f8e79dfb766ecad36a045b4325fa678e55b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:21:13:50:68:f9:b5:b0:ef:29:dd:ef:36:
d6:b2:8e:71:ab:17:03:99:ce:d7:93:ed:55:44:85:
d0:c3:e9:10:e7:11:40:74:c4:81:d2:5e:b1:9d:5c:
ff:ee:b9:84:b7:06:39:e4:df:7b:30:c7:40:d9:c7:
f9:c6:ab:b3:0a:df:9e:41:50:c4:6f:02:15:48:c2:
39:6a:de:0f:fe:45:df:01:3e:12:36:5a:60:a0:91:
8d:bb:84:fa:c2:ca:ae:bf:f4:87:4f:d6:aa:ad:10:
cb:a4:0c:5c:71:0e:97:c2:f3:88:35:80:0f:bc:ac:
ee:64:5c:e0:6c:42:bf:82:66:88:50:bb:ea:8c:de:
c8:0b:0d:53:04:b1:e6:2b:06:d9:df:d3:f2:8f:5c:
15:7c:0e:5d:61:33:57:cf:5a:2e:c6:d1:41:bb:15:
85:30:63:40:59:e7:fa:ba:d6:b6:c5:83:2f:5f:f2:
b5:17:c8:03:1e:24:5d:2b:17:5d:ba:11:2c:63:77:
9d:33:6a:54:1b:88:ac:91:49:ff:c0:00:e1:6c:f8:
75:67:88:f4:a8:66:c9:e6:e2:82:56:67:11:89:6b:
9b:54:c9:a5:70:96:ee:e8:10:93:a6:af:cb:ef:4d:
2d:6b:96:1c:18:39:92:6c:d8:e5:4f:cd:db:4e:d3:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:F8:E7:9D:FB:76:6E:CA:D3:6A:04:5B:43:25:FA:67:8E:55:B5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vyD45537dm7K02oEW0Ml-meOVbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0-82.152.77.255
82.152.79.0/24
82.152.86.0-82.152.88.255
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.38.0/24
82.153.56.0/24
82.153.61.0/24
82.153.83.0-82.153.84.255
82.153.152.0/24
82.153.186.0/24
82.153.201.0/24
82.153.239.0/24
89.213.43.0/24
89.213.98.0/24
89.213.161.0/24
89.213.232.0-89.213.237.255
109.176.32.0/19
109.176.235.0/24
213.130.130.0/24
213.130.149.0/24
213.210.58.0/24
213.218.214.0/24
213.218.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fb:af:34:ea:2e:6f:7a:22:5f:5b:0b:7d:a9:8a:98:a8:89:
56:6f:2c:00:1a:9c:ec:49:a1:7b:2f:03:1a:4b:25:95:21:8f:
fc:42:49:34:08:40:0d:2b:f4:c9:8d:54:94:44:f0:0a:85:16:
bb:ac:63:fe:65:60:bd:8c:77:c5:30:49:81:ec:85:f8:89:6c:
d5:2b:95:db:e3:aa:5b:bf:0b:99:c4:3b:2e:35:3a:dc:80:0b:
45:bb:70:90:12:84:88:ae:6c:6c:98:1f:2f:c3:0f:5f:02:b7:
a0:c4:4d:0b:f1:22:7b:13:79:4e:4a:23:99:01:0f:52:fb:17:
b5:f0:0c:46:c8:58:64:cc:57:cc:97:08:6c:8a:78:67:23:eb:
ca:85:25:c2:14:a6:05:77:3e:2e:6e:a7:a7:f6:ff:e7:a4:13:
c1:33:fb:cd:e7:56:65:74:f9:3a:f9:b6:be:2f:99:fb:cd:9b:
3e:b0:08:29:99:4a:65:7b:25:ac:8b:83:bb:0d:f3:46:52:ba:
8e:21:7a:9a:28:0e:21:fd:55:36:8c:95:01:17:5a:10:bd:59:
0d:9a:e6:5c:d9:b5:f6:7b:22:7b:50:12:47:12:47:3f:ed:b4:
e9:41:70:af:c3:69:a0:19:f8:14:90:cd:b6:b4:71:d8:53:e9:
b5:be:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:20:37 2025 by rpki-client