Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wrslj3W-MmQw3doitnG_PB5tO1w.roa
File: wrslj3W-MmQw3doitnG_PB5tO1w.roa (raw, json)
Hash identifier: U19Jp3I6cIJNcPACC6UANvQPCoJlLvvFMWT9+5Jejss=
Subject key identifier: C2:BB:25:8F:75:BE:32:64:30:DD:DA:22:B6:71:BF:3C:1E:6D:3B:5C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018DF4A71B553CB9642C94784FA70A396C4E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wrslj3W-MmQw3doitnG_PB5tO1w.roa
Signing time: Thu 29 Feb 2024 11:36:48 +0000
ROA not before: Thu 29 Feb 2024 11:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.153.64.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:a7:1b:55:3c:b9:64:2c:94:78:4f:a7:0a:39:6c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 29 11:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2bb258f75be326430ddda22b671bf3c1e6d3b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:32:d4:07:3a:98:f6:fe:f1:56:01:36:98:
b0:08:32:15:69:8b:5a:fe:24:18:80:de:d9:0f:53:
67:2d:8e:31:10:eb:ed:a5:55:70:45:e6:43:70:33:
02:e5:f6:ad:d5:76:ee:2c:8e:af:af:bc:ea:b9:b0:
ee:4a:b3:30:fa:93:e7:35:56:82:91:7b:f8:66:81:
5e:6d:55:9b:ac:93:ce:8a:a3:8d:31:5a:57:5e:7b:
1e:a8:2b:db:5a:23:61:92:9b:2a:ec:b3:02:e0:d9:
87:b1:50:cc:2f:48:af:56:ae:94:96:b5:a9:bc:eb:
b1:2a:d2:90:e3:65:89:79:63:95:6b:43:fb:19:04:
2b:55:b0:99:9a:1f:f5:8e:95:5b:75:f1:37:97:cd:
6b:1f:65:43:25:aa:1c:d0:64:ef:4a:af:40:90:a7:
28:1f:0f:e5:66:54:aa:dd:31:08:cb:48:46:4b:85:
3f:09:be:6f:fd:b4:40:b5:71:c9:02:04:eb:73:40:
55:a4:f5:3e:ad:fe:2b:47:ca:2a:07:ad:c3:a6:a1:
ad:08:8c:45:71:d0:a9:36:c9:69:84:06:9e:a0:ed:
52:15:69:e3:39:aa:5c:18:ae:a1:3b:12:c0:9d:c8:
d7:d3:03:fc:6e:d7:07:14:a4:74:0b:b6:01:52:14:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BB:25:8F:75:BE:32:64:30:DD:DA:22:B6:71:BF:3C:1E:6D:3B:5C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wrslj3W-MmQw3doitnG_PB5tO1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.64.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
89.213.191.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c8:9c:e3:90:91:03:b6:4f:24:51:ff:91:be:9f:06:8f:1f:
77:15:2f:db:d0:3d:fa:d0:5a:08:f8:7b:3b:9e:1b:20:3b:6d:
9d:62:fc:60:e0:ab:69:7c:a3:57:bd:0c:48:aa:42:39:62:cd:
63:a5:3e:84:a8:6a:51:b1:fd:a0:26:53:bd:25:6f:50:14:91:
52:93:8a:e6:32:92:55:22:f3:56:1d:50:97:bf:67:28:4c:9f:
37:fa:0e:e7:ed:6f:60:dc:ce:dc:94:22:63:ce:ae:19:69:3a:
25:6b:62:4e:d7:29:67:25:74:cc:3f:fc:d0:bb:5a:32:f8:87:
cb:68:40:8c:83:49:4b:f0:69:54:5c:11:dc:f2:cf:64:bf:d1:
1f:cf:fc:a9:93:20:e7:cb:06:a3:9d:45:6f:94:ee:7a:db:c9:
cc:5b:c0:e6:ba:26:2e:1d:48:8d:a0:e3:3a:b6:22:39:a7:d2:
9c:62:80:61:e0:5e:cd:89:f4:0d:fc:17:b8:9a:ff:86:05:70:
1d:1f:5a:8a:69:2f:7b:6a:a5:c2:db:52:1e:0b:ed:2f:16:24:
30:4d:8d:cb:29:3e:6d:b5:cc:e1:90:af:71:c6:24:c9:ac:1b:
b2:67:72:4f:af:61:ce:c2:76:95:0f:57:46:a0:d5:42:be:c6:
a1:e0:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:07:26 2025 by rpki-client