Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/SdOrlbajyIx4bkK5oA6pFsUsbGo.roa
File: SdOrlbajyIx4bkK5oA6pFsUsbGo.roa (raw, json)
Hash identifier: 3nq4SArJ6ttd05a6zsE9/kB7czbWDs9iQZRxdY34Pqs=
Subject key identifier: 49:D3:AB:95:B6:A3:C8:8C:78:6E:42:B9:A0:0E:A9:16:C5:2C:6C:6A
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 019003006075E0F8230BCE8450F1E1509FD5
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/SdOrlbajyIx4bkK5oA6pFsUsbGo.roa
Signing time: Mon 10 Jun 2024 16:34:34 +0000
ROA not before: Mon 10 Jun 2024 16:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8262
IP address blocks: 82.119.64.0/19 maxlen: 19
82.119.68.0/24 maxlen: 24
82.119.69.0/24 maxlen: 24
82.119.80.0/21 maxlen: 21
82.119.83.0/24 maxlen: 24
82.119.84.0/24 maxlen: 24
82.119.92.0/24 maxlen: 24
82.119.94.0/24 maxlen: 24
85.14.0.0/18 maxlen: 18
85.14.0.0/23 maxlen: 23
85.14.12.0/24 maxlen: 24
85.14.13.0/24 maxlen: 24
85.14.24.0/24 maxlen: 24
85.14.36.0/24 maxlen: 24
85.14.44.0/24 maxlen: 24
85.14.47.0/24 maxlen: 24
85.14.49.0/24 maxlen: 24
89.252.192.0/18 maxlen: 18
89.252.192.0/22 maxlen: 22
89.252.199.0/24 maxlen: 24
89.252.200.0/21 maxlen: 21
89.252.208.0/20 maxlen: 20
89.252.223.0/24 maxlen: 24
89.252.224.0/19 maxlen: 19
89.252.241.0/24 maxlen: 24
89.252.246.0/24 maxlen: 24
176.67.233.0/24 maxlen: 24
176.67.234.0/24 maxlen: 24
185.92.132.0/22 maxlen: 22
194.12.224.0/19 maxlen: 19
194.12.231.0/24 maxlen: 24
194.12.234.0/24 maxlen: 24
194.12.249.0/24 maxlen: 24
194.12.254.0/24 maxlen: 24
2001:1ae0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 26 Sep 2024 13:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:03:00:60:75:e0:f8:23:0b:ce:84:50:f1:e1:50:9f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jun 10 16:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49d3ab95b6a3c88c786e42b9a00ea916c52c6c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:ae:a4:3c:9e:0d:39:76:3c:65:28:81:98:
5c:d6:36:e0:16:58:4d:7c:25:36:dd:a5:e2:3e:51:
75:03:59:5f:63:c4:ff:47:f6:8b:8c:d9:75:50:bd:
73:75:63:d2:b4:c5:39:4f:74:e3:b8:5a:82:b8:6a:
fe:b7:b5:d9:8f:f6:82:9b:fd:cc:66:e3:f1:81:fa:
48:19:8c:41:c4:9e:3d:4a:4f:2e:e0:1a:35:ba:ad:
33:d1:93:4b:12:a3:bd:e5:a2:83:85:66:4c:20:05:
ba:48:c4:de:db:80:4b:4e:5a:9a:4b:28:14:2f:ab:
d8:16:67:34:99:89:9d:d5:db:a5:78:34:16:be:fc:
07:2f:82:e5:27:8e:34:4c:3b:c6:7d:d9:53:22:36:
7c:fe:3b:c4:90:f3:42:62:40:3e:05:0d:bf:d0:20:
a5:24:9e:a9:12:23:a9:c7:a3:62:01:33:c3:ba:4d:
b3:30:dc:67:f2:59:e3:83:df:a1:4f:32:7a:b3:07:
b3:af:40:be:c7:4a:c7:94:64:e3:86:6d:20:51:80:
a0:f7:d5:d9:af:38:2d:a5:fa:a8:8d:5e:4d:ff:ec:
43:d6:c6:82:8d:38:08:46:56:ca:13:ae:b3:2c:f9:
7c:6d:c5:cb:fc:01:3c:f0:de:2c:d8:f1:48:0f:84:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:AB:95:B6:A3:C8:8C:78:6E:42:B9:A0:0E:A9:16:C5:2C:6C:6A
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/SdOrlbajyIx4bkK5oA6pFsUsbGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.64.0/19
85.14.0.0/18
89.252.192.0/18
176.67.233.0-176.67.234.255
185.92.132.0/22
194.12.224.0/19
IPv6:
2001:1ae0::/32
Signature Algorithm: sha256WithRSAEncryption
d5:6e:a9:bd:3e:34:2d:7c:b5:be:c4:0e:dd:ed:34:06:5d:b7:
fc:63:b5:16:c7:bd:12:a2:2f:69:b3:f7:26:ea:28:4b:31:1b:
e3:08:1f:e3:5c:74:8a:0a:e2:35:f0:6c:a7:ee:dd:20:4c:7d:
18:12:41:6c:d2:69:9e:0f:78:cc:52:81:8d:db:90:92:9e:ec:
59:33:02:42:1f:c4:b8:70:4a:ed:45:0e:a3:d7:92:a7:53:10:
28:d1:1c:ae:6f:7b:6b:07:78:66:c3:76:3f:d5:f6:e6:dc:2e:
e6:dc:cb:a0:ff:c7:97:70:8c:95:d2:4c:c4:6b:fd:77:8b:5b:
15:e2:76:57:12:bf:6c:e1:ad:65:08:02:9d:d8:52:ae:24:32:
ad:92:44:4b:97:4f:5a:69:12:87:61:48:96:52:81:d0:5d:00:
91:8a:c1:7e:35:46:8a:5c:65:6a:bb:86:d3:c6:70:4f:9b:7f:
23:7b:87:88:f8:b2:f4:6b:52:a7:72:4e:a3:bf:76:fd:d8:ae:
f9:ba:91:72:d2:cc:67:af:7e:bd:d0:fc:ab:76:ef:96:a3:90:
5f:95:38:85:b9:af:bf:68:19:b9:8b:f3:eb:f9:11:b9:d8:31:
ef:87:3a:5f:7b:07:29:dd:20:c7:4d:fd:d8:2c:22:bd:e5:30:
6a:1a:bb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:30 2025 by rpki-client