Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zdN5gaVK-pnuCFv6fA1DQ_mq1AQ.roa
File: zdN5gaVK-pnuCFv6fA1DQ_mq1AQ.roa (raw, json)
Hash identifier: oN2Zp5bEFGQJjESAxWlNc1W+j3pfzs22/M3K+w86RSA=
Subject key identifier: CD:D3:79:81:A5:4A:FA:99:EE:08:5B:FA:7C:0D:43:43:F9:AA:D4:04
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01920A77B0EC014F00D4772B287C12CEDBA7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zdN5gaVK-pnuCFv6fA1DQ_mq1AQ.roa
Signing time: Thu 19 Sep 2024 13:27:49 +0000
ROA not before: Thu 19 Sep 2024 13:27:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.76.0/23 maxlen: 24
82.152.79.0/24 maxlen: 24
82.152.86.0/23 maxlen: 24
82.152.88.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.38.0/24 maxlen: 24
82.153.56.0/24 maxlen: 24
82.153.61.0/24 maxlen: 24
82.153.83.0/24 maxlen: 24
82.153.84.0/24 maxlen: 24
82.153.152.0/24 maxlen: 24
82.153.186.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.239.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
89.213.232.0/23 maxlen: 24
89.213.234.0/23 maxlen: 24
89.213.236.0/23 maxlen: 24
109.176.32.0/21 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.56.0/21 maxlen: 24
109.176.201.0/24 maxlen: 24
109.176.235.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 18:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:77:b0:ec:01:4f:00:d4:77:2b:28:7c:12:ce:db:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 19 13:27:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdd37981a54afa99ee085bfa7c0d4343f9aad404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:32:6c:ac:f0:d3:44:f2:16:30:51:3b:a0:
c1:e9:c6:71:8d:c5:43:8a:3c:c5:56:7d:88:cd:62:
7c:45:df:f6:3b:1b:89:57:b0:0f:73:a6:3c:86:b9:
d9:2b:3c:3e:14:f7:a9:b8:2d:35:34:ac:b5:fa:ec:
ab:70:fc:9d:0c:81:e7:de:9a:44:1c:23:ea:b2:2b:
0c:57:fa:7c:86:9f:00:72:5e:26:59:cf:ce:b8:72:
59:10:8e:12:47:1d:44:f1:e7:a4:79:a3:4d:af:84:
b9:62:ef:f9:27:39:15:82:06:07:5a:cc:19:bd:3e:
46:c2:d1:32:99:1c:65:dc:9c:9a:37:ee:74:00:09:
05:d2:90:05:7a:f8:c7:55:3d:38:e3:09:a9:48:28:
e6:fe:9e:bf:1f:c6:4e:f2:21:8d:c6:b8:45:de:d5:
97:e9:70:9c:9d:0c:6c:da:f0:68:47:78:f5:bd:9d:
5b:0c:4c:d1:b8:61:99:3d:17:e1:80:72:03:f7:a1:
f6:b3:44:9b:e6:68:39:e7:4d:3c:fe:d2:b6:e6:24:
22:be:da:d6:5c:5a:7f:1e:3d:76:a7:73:f1:11:36:
85:70:d7:62:20:ec:bd:be:46:18:0c:3c:8a:bd:82:
1f:7b:0b:0d:45:6d:6a:0f:9f:4a:5e:b9:1d:7d:14:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:79:81:A5:4A:FA:99:EE:08:5B:FA:7C:0D:43:43:F9:AA:D4:04
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zdN5gaVK-pnuCFv6fA1DQ_mq1AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0-82.152.77.255
82.152.79.0/24
82.152.86.0-82.152.88.255
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.38.0/24
82.153.56.0/24
82.153.61.0/24
82.153.83.0-82.153.84.255
82.153.152.0/24
82.153.186.0/24
82.153.201.0/24
82.153.239.0/24
82.163.0.0/24
89.213.43.0/24
89.213.98.0/24
89.213.161.0/24
89.213.232.0-89.213.237.255
109.176.32.0/19
109.176.201.0/24
109.176.235.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
213.218.231.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f0:c6:8c:33:6a:90:d5:eb:b3:2d:cd:8a:bf:bd:20:44:41:
5a:74:69:64:17:4e:6b:6b:c0:ab:a0:39:ca:8b:ee:d6:73:59:
c2:97:43:69:40:69:7e:3f:6b:7a:09:ad:e4:c6:3e:dc:29:aa:
1d:29:e9:25:8e:eb:26:75:6b:4b:ec:07:84:73:94:28:db:8d:
9b:dc:b8:99:6f:00:3b:7c:c0:ad:80:c4:32:e8:b0:a3:b5:d6:
6b:1b:32:cc:40:d0:42:36:ee:1d:f9:5c:89:7f:d9:9e:da:81:
5b:aa:83:d7:ea:3e:1e:17:63:19:af:5b:21:b7:60:10:0e:cd:
2c:17:d3:ff:de:bb:58:cf:31:d7:a9:f7:b1:84:6f:95:e1:be:
2f:64:f5:82:f4:62:6b:bc:08:92:9d:d2:c0:a3:f4:3e:eb:4b:
a0:c6:3d:0f:8c:55:c0:97:5e:3a:dd:5c:70:21:dd:bd:e1:98:
fb:fd:b9:9d:8b:3d:b5:63:85:3f:68:3c:c8:43:f2:29:45:1f:
78:c1:ac:be:94:99:fa:19:bb:dc:bb:3b:c4:c4:a7:0a:d7:59:
cf:28:a5:ad:8d:4b:2a:cc:01:80:4e:3f:5f:24:d8:c3:1f:bf:
ad:0c:70:2c:3e:e2:d6:4b:76:ab:e2:d0:10:8a:c2:ac:19:4a:
f5:4c:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:23 2025 by rpki-client