Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wKhP_HRIVzCbfZ0QN17g5kEocMk.roa
File: wKhP_HRIVzCbfZ0QN17g5kEocMk.roa (raw, json)
Hash identifier: XozQf5wxqhzQmUum9TigAs8ZjMyq2/YwyIXSyl5rsb0=
Subject key identifier: C0:A8:4F:FC:74:48:57:30:9B:7D:9D:10:37:5E:E0:E6:41:28:70:C9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F5471D593D7B9FBCDC9ED39A58CBB3D8C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wKhP_HRIVzCbfZ0QN17g5kEocMk.roa
Signing time: Tue 07 May 2024 19:04:57 +0000
ROA not before: Tue 07 May 2024 19:04:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.54.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.153.35.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
109.176.201.0/24 maxlen: 24
109.176.202.0/24 maxlen: 24
212.38.84.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
213.130.156.0/24 maxlen: 24
213.210.58.0/24 maxlen: 24
213.210.59.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
217.144.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 08:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:71:d5:93:d7:b9:fb:cd:c9:ed:39:a5:8c:bb:3d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 7 19:04:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0a84ffc744857309b7d9d10375ee0e6412870c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:7d:f8:08:1f:86:91:57:d6:08:02:2a:cb:
18:9a:32:a8:09:74:b7:83:9c:9b:3b:f3:78:bd:87:
7e:c2:ab:6e:0e:40:83:39:93:b1:da:26:f2:1e:80:
be:c3:b1:58:24:c0:39:e2:47:7e:10:4f:91:37:2d:
d3:f4:8e:80:d8:9f:49:23:f7:f8:79:dc:d4:4d:38:
88:f6:4e:6c:02:c5:2b:57:ce:0c:b0:11:d6:c0:4d:
1f:0e:c6:33:f9:10:d1:8f:39:6e:ad:d0:64:58:92:
56:9b:64:46:d3:5e:1c:ac:c3:03:57:d3:eb:0a:ce:
2a:5f:07:72:b5:a0:e0:b9:0b:d8:b6:30:35:f2:51:
be:62:e2:10:d3:8b:4d:be:b4:38:8a:d8:b2:99:b8:
ae:56:ce:ac:88:c5:3b:24:a4:4e:01:bc:22:2f:b9:
cf:d9:00:ac:2f:5b:c2:63:f4:a2:78:2c:e6:13:35:
8d:63:d1:dd:cf:a1:2e:8c:7c:5a:a9:13:83:35:49:
77:3a:21:a5:07:40:8d:38:af:35:84:1a:a5:9c:f6:
39:1f:f5:27:43:06:88:50:37:cf:0d:24:13:f9:85:
2b:c2:f8:9e:ed:0b:ba:04:99:95:1c:9f:30:34:7d:
4f:3f:9a:0b:8f:63:fb:25:e3:59:49:bf:ac:ac:3b:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A8:4F:FC:74:48:57:30:9B:7D:9D:10:37:5E:E0:E6:41:28:70:C9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wKhP_HRIVzCbfZ0QN17g5kEocMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.54.0/24
82.152.98.0/24
82.153.35.0/24
82.163.15.0/24
89.213.98.0/24
109.176.201.0-109.176.202.255
212.38.84.0/24
213.130.130.0/24
213.130.149.0-213.130.151.255
213.130.156.0/24
213.210.58.0/23
213.218.227.0/24
213.218.231.0/24
217.144.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:86:9b:d2:11:ee:55:4c:ef:ee:b7:f8:87:e1:0b:0e:83:a3:
3a:80:8f:45:5f:66:54:e8:b0:d6:db:c2:03:18:e2:33:4c:c6:
d9:f0:13:68:c4:bd:93:03:52:b4:19:4a:d7:1d:09:fc:0d:09:
18:a7:a7:26:12:c0:a3:2c:2c:97:eb:61:09:8e:e5:c5:f3:cb:
52:6e:8b:5a:cb:05:99:66:f4:4d:44:e2:e3:e1:12:fe:ed:7a:
cf:54:17:05:d1:56:de:62:6d:ea:86:9a:e4:b6:8a:86:db:79:
07:d7:e1:cb:2e:be:88:87:23:5d:ba:e6:08:13:fb:f0:70:87:
9f:3f:48:88:19:56:f3:d2:b5:2d:d0:48:24:54:f4:3a:54:e6:
c2:fe:b1:93:90:a0:09:f8:40:79:4c:f2:11:f7:4b:17:e6:12:
20:bd:2d:be:b6:12:b9:10:9c:3d:16:94:98:e9:e2:50:27:21:
6e:20:69:d8:3b:71:bc:84:a1:b4:94:51:b4:2d:a3:72:31:e6:
a8:25:94:35:8e:1d:68:4f:fd:61:6a:b8:66:be:6e:77:b9:ef:
89:02:8c:0b:20:3e:88:6a:bb:16:8d:c2:7b:89:3d:86:24:ec:
c2:92:75:bc:81:be:15:e0:7c:59:d6:99:f4:08:8f:b7:ae:f7:
cc:77:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:19:42 2025 by rpki-client