Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wn9tZWZ-7j8ff5-cs-0OCI4MC9c.roa
File: wn9tZWZ-7j8ff5-cs-0OCI4MC9c.roa (raw, json)
Hash identifier: WhqjVvXXVOB7uADq6X8B4MmAsVXpMcfGv5gSzXiIc2A=
Subject key identifier: C2:7F:6D:65:66:7E:EE:3F:1F:7F:9F:9C:B3:ED:0E:08:8E:0C:0B:D7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F5DEFA337A34F4B4200D9F2FEB8AEA9D9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wn9tZWZ-7j8ff5-cs-0OCI4MC9c.roa
Signing time: Thu 09 May 2024 15:18:56 +0000
ROA not before: Thu 09 May 2024 15:18:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 81.168.126.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.127.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jun 2024 10:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:ef:a3:37:a3:4f:4b:42:00:d9:f2:fe:b8:ae:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 9 15:18:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c27f6d65667eee3f1f7f9f9cb3ed0e088e0c0bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:be:1f:cc:2a:50:24:73:53:5c:72:a3:2c:
7c:7d:d1:68:7f:18:0f:90:b0:a2:96:75:a3:84:8a:
b1:0f:c7:a6:dd:30:91:90:4c:0f:06:d7:28:92:9e:
a6:2d:c6:9b:24:8d:52:5f:74:31:2d:9e:67:15:3a:
0a:4f:91:ad:72:43:c4:20:43:50:ea:10:0a:15:71:
80:a0:a0:c9:c8:83:81:49:78:56:3e:65:da:e4:cc:
df:6e:85:f3:b3:8d:93:f4:bd:1e:9e:e9:da:fb:f7:
f9:6b:fb:4a:05:f7:62:5e:22:d0:fd:4c:c3:9b:b4:
26:13:db:e1:38:b5:9b:81:6b:6f:c8:12:2b:53:6c:
70:34:d2:fa:4b:0a:bb:be:c6:f5:3b:65:b9:87:12:
e3:83:34:2a:0c:d8:71:ca:ae:63:41:6c:38:6f:0c:
fc:13:1a:85:bd:b6:28:fb:28:43:9d:aa:42:97:19:
be:ea:06:b6:f7:ef:78:70:79:55:7e:b0:d2:f7:ee:
59:99:4b:f7:5c:3e:20:21:1c:6e:45:12:25:31:c0:
04:7f:00:76:36:db:18:47:cf:75:a2:78:fa:90:c5:
af:6f:79:a1:c8:0c:ba:07:2b:db:5c:3b:a5:db:78:
9c:1f:2c:c7:8c:1a:b2:d4:9a:0d:87:0a:6c:24:54:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:6D:65:66:7E:EE:3F:1F:7F:9F:9C:B3:ED:0E:08:8E:0C:0B:D7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wn9tZWZ-7j8ff5-cs-0OCI4MC9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.153.255.0/24
82.163.10.0/23
89.213.127.0/24
109.176.14.0/24
109.176.30.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:83:c0:3e:b0:3a:ec:b6:c0:37:03:48:15:40:cc:69:b7:34:
9f:f6:f7:fb:92:ed:62:27:c5:db:ff:16:6e:72:47:00:41:73:
89:ff:13:f7:0f:26:f9:8c:ce:41:ff:0a:1e:00:2b:04:b6:65:
2c:3a:c6:0e:50:4a:07:13:da:b6:b3:5a:80:b6:1b:c6:73:da:
60:cc:48:db:77:36:15:2c:8e:5c:77:ad:af:c7:0e:65:b9:29:
8d:78:c9:d9:4e:6e:bc:4a:96:2f:80:de:6f:00:7e:fc:0b:c3:
7c:ad:97:87:59:dc:3d:9f:71:a0:93:06:a5:38:b7:7c:ce:43:
a9:17:e7:71:52:05:5e:3a:2f:66:64:03:87:3a:0e:ee:b1:9c:
98:ab:17:5e:bb:23:ad:18:95:f0:4f:6a:68:bd:56:7d:52:5b:
cd:f1:dd:22:86:7b:85:21:91:75:23:e5:ba:be:0c:b6:7d:93:
ad:66:b5:07:1c:35:e3:36:ea:ea:ac:b8:bf:14:af:3b:c9:8c:
c8:67:4b:ef:fb:5b:09:11:aa:01:e2:38:33:94:f7:3a:39:98:
b3:e0:f4:c9:1a:2e:55:4a:68:9a:dc:42:a0:b8:d1:1b:fd:ea:
e1:c2:1a:0b:af:bc:a4:f2:72:8c:04:17:0a:5c:e7:f8:06:2a:
fd:3e:3b:c0
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY9d76M3o09LQgDZ8v64rqnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNTA5MTUxODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjdmNmQ2NTY2N2VlZTNmMWY3ZjlmOWNiM2VkMGUwODhlMGMwYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiC+H8wqUCRzU1xyoyx8fdFofxgP
kLCilnWjhIqxD8em3TCRkEwPBtcokp6mLcabJI1SX3QxLZ5nFToKT5GtckPEIENQ
6hAKFXGAoKDJyIOBSXhWPmXa5MzfboXzs42T9L0enuna+/f5a/tKBfdiXiLQ/UzD
m7QmE9vhOLWbgWtvyBIrU2xwNNL6Swq7vsb1O2W5hxLjgzQqDNhxyq5jQWw4bwz8
ExqFvbYo+yhDnapClxm+6ga29+94cHlVfrDS9+5ZmUv3XD4gIRxuRRIlMcAEfwB2
NtsYR891onj6kMWvb3mhyAy6ByvbXDul23icHyzHjBqy1JoNhwpsJFRFGwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFMJ/bWVmfu4/H3+fnLPtDgiODAvXMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvd245dFpXWi03ajhmZjUtY3MtME9DSTRNQzljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAUah+AwQA
Upn/AwQBUqMKAwQAWdV/AwQAbbAOAwQAbbAeAwQA1dr4MA0GCSqGSIb3DQEBCwUA
A4IBAQCkg8A+sDrstsA3A0gVQMxptzSf9vf7ku1iJ8Xb/xZuckcAQXOJ/xP3Dyb5
jM5B/woeACsEtmUsOsYOUEoHE9q2s1qAthvGc9pgzEjbdzYVLI5cd62vxw5luSmN
eMnZTm68SpYvgN5vAH78C8N8rZeHWdw9n3GgkwalOLd8zkOpF+dxUgVeOi9mZAOH
Og7usZyYqxdeuyOtGJXwT2povVZ9UlvN8d0ihnuFIZF1I+W6vgy2fZOtZrUHHDXj
NurqrLi/FK87yYzIZ0vv+1sJEaoB4jgzlPc6OZiz4PTJGi5VSmia3EKguNEb/erh
whoLr7yk8nKMBBcKXOf4Bir9PjvA
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:27:41 2025 by rpki-client