Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wFjTYilguvRDl4ZmzjiBtM738xk.roa
File: wFjTYilguvRDl4ZmzjiBtM738xk.roa (raw, json)
Hash identifier: dJSIMWiAO+GlEUGAphZbBvBfasaLaJPAmtlGMFckJzM=
Subject key identifier: C0:58:D3:62:29:60:BA:F4:43:97:86:66:CE:38:81:B4:CE:F7:F3:19
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FC460B41E369702232C3C15BB63362801
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wFjTYilguvRDl4ZmzjiBtM738xk.roa
Signing time: Wed 29 May 2024 12:43:42 +0000
ROA not before: Wed 29 May 2024 12:43:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.163.22.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.19.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.62.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 11:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:60:b4:1e:36:97:02:23:2c:3c:15:bb:63:36:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 29 12:43:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c058d3622960baf443978666ce3881b4cef7f319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:a1:af:c0:78:86:74:45:c5:71:09:ce:9f:
3f:07:d6:fc:c2:08:af:69:28:4c:34:af:b9:93:bd:
82:2a:ed:20:d1:48:69:77:53:90:0f:e1:03:f7:98:
8d:a1:19:f7:94:01:f2:77:7f:c1:4d:d1:25:74:80:
59:1d:8b:a9:19:bf:17:66:ed:63:db:99:cc:f9:71:
b7:73:ef:58:ba:5b:df:5d:e2:68:ca:11:af:fd:a1:
98:8b:5c:84:4a:04:f8:d3:6a:4f:53:25:c9:cc:29:
0e:51:f9:0f:56:10:38:f8:58:e9:9a:87:bf:c8:6a:
19:31:09:a1:be:98:c8:3a:be:3b:62:a3:3e:70:48:
5f:9b:54:01:e5:6a:f8:2e:d1:73:fe:fc:f7:dc:9c:
9b:a3:d2:a7:40:f7:07:0c:c8:89:d5:56:68:fb:4b:
fe:e8:e5:94:72:e7:12:6f:1e:86:a5:1c:81:04:32:
02:e7:a4:86:fa:94:87:00:97:e0:ca:fc:b2:b5:8a:
b3:d1:a7:d6:55:ba:13:94:cc:ea:bc:0e:30:92:ca:
75:51:95:ef:9c:76:72:50:74:ed:cc:79:dc:9f:e2:
6e:67:fe:50:ee:25:ea:14:e1:41:cb:86:1e:dd:eb:
6e:c4:31:14:67:fd:c8:db:e6:47:f0:ed:62:80:2a:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:D3:62:29:60:BA:F4:43:97:86:66:CE:38:81:B4:CE:F7:F3:19
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wFjTYilguvRDl4ZmzjiBtM738xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.163.22.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.210.62.0/24
213.218.210.0/23
217.145.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:93:16:37:43:70:9a:d8:a9:27:ad:37:3e:1c:ab:0e:bf:f8:
b0:6a:38:5a:ff:56:95:5f:d7:0f:73:2c:d2:1a:df:6d:87:c5:
f1:cc:0a:08:57:61:d0:89:72:d2:e7:f1:23:bd:5f:48:ba:bd:
34:5a:0f:2c:de:90:96:3c:1e:d5:8b:e1:a6:be:df:1a:90:de:
18:1b:1d:18:7b:7d:3a:8d:34:fd:b3:b1:fa:53:9a:99:21:37:
d2:82:96:1f:d9:79:87:ff:a3:63:96:d5:1b:5e:59:4b:4f:38:
0a:82:a1:51:8f:40:01:30:a7:64:70:8d:96:e8:58:74:29:4c:
3a:99:31:1b:87:e9:d4:bd:34:0c:13:bc:6b:d2:53:d0:26:89:
0a:7f:23:02:71:9b:bc:3b:3a:46:1b:f8:8f:59:04:9d:32:23:
6f:41:12:22:f8:96:80:77:39:c2:3d:57:c4:db:b7:b2:63:02:
32:11:0d:53:9d:05:79:c3:9e:32:af:20:1a:5b:c4:ff:46:0a:
84:ac:8b:b7:1c:eb:08:fe:a8:55:c4:64:01:a2:cf:ac:e3:78:
2d:ef:7e:95:93:3b:85:3a:11:57:38:05:a9:66:e7:7a:d9:ea:
5a:c3:b0:65:d5:e4:bb:66:a2:f2:09:c1:96:98:eb:cb:19:f5:
81:9d:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:10:59 2025 by rpki-client