Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yt6RHLIIKdFok8URFXAV9pCdqUw.roa
File: yt6RHLIIKdFok8URFXAV9pCdqUw.roa (raw, json)
Hash identifier: iMzEXTOblfBzhqs0ksxJwCj9vHaWC2sgcNjVb5D4jX4=
Subject key identifier: CA:DE:91:1C:B2:08:29:D1:68:93:C5:11:15:70:15:F6:90:9D:A9:4C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194FFEDF28B94347FBE24AAB4BF72E5B537
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yt6RHLIIKdFok8URFXAV9pCdqUw.roa
Signing time: Thu 13 Feb 2025 15:29:31 +0000
ROA not before: Thu 13 Feb 2025 15:29:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 79.99.150.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.127.0/24 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 12:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:ed:f2:8b:94:34:7f:be:24:aa:b4:bf:72:e5:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 13 15:29:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cade911cb20829d16893c511157015f6909da94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:32:b5:2f:81:83:74:b4:83:91:e1:ab:0f:
f1:41:fe:ac:7c:6f:4c:26:ea:58:a4:e9:1f:74:67:
09:0a:38:0f:8d:5f:d2:6c:9c:b0:9e:f2:db:6c:1c:
cb:b8:a5:67:15:da:65:8d:2e:c5:79:0c:f2:26:8c:
a4:7d:ed:03:39:96:32:0d:c1:d5:56:fe:35:d9:ee:
65:19:4d:b4:5b:07:5e:1a:f6:fd:7b:9d:d5:38:f4:
b0:fe:87:38:ac:50:96:a6:79:da:27:e7:4c:4b:7e:
35:4b:5e:38:60:17:60:43:7d:ea:ce:53:2f:57:fb:
67:a1:86:cb:61:95:a9:9c:51:6d:9c:be:18:c7:ad:
39:46:d6:fa:b6:29:9e:cb:b4:0f:5c:23:6f:92:37:
44:a8:bc:17:52:15:b0:1a:cc:09:86:7a:49:8d:cc:
34:59:0b:e0:b8:f4:6e:a2:2e:66:2b:5c:f0:92:23:
44:8e:81:24:c4:8b:0c:5f:0d:b5:b4:bf:9b:44:13:
47:33:97:0d:14:82:33:ca:a5:fc:0b:b6:94:c4:45:
71:04:38:ff:b3:24:4e:4f:0d:67:f2:0c:d6:b1:46:
75:4e:ba:9c:42:4e:55:57:a9:49:24:4c:2f:48:c6:
f2:eb:90:63:77:0b:61:91:ce:df:51:18:26:18:6b:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DE:91:1C:B2:08:29:D1:68:93:C5:11:15:70:15:F6:90:9D:A9:4C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yt6RHLIIKdFok8URFXAV9pCdqUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.150.0/23
82.152.55.0/24
82.153.255.0/24
82.163.0.0/24
82.163.10.0/23
89.213.127.0/24
89.213.226.0/24
109.176.14.0/24
109.176.30.0/24
109.176.208.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
32:09:7f:14:b5:d7:54:aa:41:d0:78:4c:dc:b6:c3:68:34:83:
a2:8b:b0:4f:0a:0a:50:ba:d3:05:6f:64:ff:40:98:42:cb:4a:
f4:ca:f4:39:8a:20:18:73:0a:b5:9e:2e:ec:9d:2b:bd:39:e3:
9c:b2:75:61:62:2e:3a:e5:16:da:e7:02:e9:2d:53:d4:65:64:
49:16:92:df:57:4f:26:ac:41:f4:b0:72:f9:e2:9a:35:0e:94:
13:fb:69:a9:f9:47:75:dc:0b:01:2c:c0:a3:f6:bd:c6:06:45:
d7:14:85:47:01:76:6a:ff:51:38:80:4e:2c:e0:cc:50:2e:2c:
15:7a:59:12:71:17:82:c2:f7:fd:ed:00:06:67:25:4e:d9:e0:
b3:55:8b:fd:4b:54:5b:86:60:27:bd:34:e4:6e:6e:36:12:f9:
b4:09:0e:f2:5b:f3:7d:ce:1b:18:b5:bf:d7:65:64:25:11:0e:
3b:72:2c:2a:70:f8:07:41:fb:d8:b4:94:0a:2f:a1:87:57:c1:
cc:8d:f6:a1:a2:5f:59:2c:62:b3:93:82:08:c0:bb:5c:09:9a:
35:d1:b1:6b:dc:cf:98:13:80:f9:63:69:7c:e8:6a:5e:a0:cf:
42:e9:d3:34:e0:b8:73:97:68:db:2e:8c:c9:e6:b8:43:90:e1:
5c:21:a4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:20 2025 by rpki-client