Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/743jyOcjw6Eq_8Yk_3BRASe5U0w.roa
File: 743jyOcjw6Eq_8Yk_3BRASe5U0w.roa (raw, json)
Hash identifier: N17qDw6iVtZi7R9ua6Pru70cV8YNz8y1coGE2RJTY5Q=
Subject key identifier: EF:8D:E3:C8:E7:23:C3:A1:2A:FF:C6:24:FF:70:51:01:27:B9:53:4C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190D550C79417D98800FF5AFA249BFF25DF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/743jyOcjw6Eq_8Yk_3BRASe5U0w.roa
Signing time: Sun 21 Jul 2024 12:42:39 +0000
ROA not before: Sun 21 Jul 2024 12:42:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.239.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 12:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d5:50:c7:94:17:d9:88:00:ff:5a:fa:24:9b:ff:25:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 21 12:42:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef8de3c8e723c3a12affc624ff70510127b9534c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:7a:06:ee:d3:6f:4a:d9:ea:c3:d8:b8:3c:
ca:8e:c6:07:a5:ec:f1:e9:61:f9:2b:ea:ca:3b:33:
4d:0b:e9:d3:f6:e4:ad:33:a5:39:7d:0a:59:ce:11:
76:94:2b:ea:d1:e9:3a:c4:37:f0:d5:51:e2:94:fe:
ef:e7:20:9e:7b:83:2d:42:6f:0e:8f:37:80:ca:24:
c6:bc:7b:e4:47:77:ee:98:7f:bc:db:31:79:cf:41:
cd:ad:18:50:36:a1:dc:c2:ed:e1:f5:d5:30:e1:e8:
25:e2:b3:aa:c7:77:00:6c:9b:0f:ee:f1:7f:dc:b6:
85:5f:f7:6d:28:49:ee:44:4b:6a:7d:2e:c4:91:eb:
b4:cc:b1:ec:84:e3:f2:42:9c:34:4b:7a:06:0d:06:
d7:48:f7:ab:50:65:cb:b1:53:33:0b:38:b5:3f:c7:
65:db:0d:7b:fc:e2:0b:26:a0:2d:c3:d7:74:73:07:
54:c1:54:6a:51:f7:51:f8:d4:3e:93:a7:a7:45:39:
26:4a:78:0e:46:bc:28:c5:f9:07:59:06:5f:76:cd:
17:4a:20:db:c3:7c:17:48:dd:83:d8:94:ec:b4:85:
7b:5b:f0:43:8e:af:5a:c8:e8:4b:e6:fb:81:8b:20:
f8:02:81:b6:8d:22:e1:dd:f3:5e:0d:04:18:5a:a9:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8D:E3:C8:E7:23:C3:A1:2A:FF:C6:24:FF:70:51:01:27:B9:53:4C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/743jyOcjw6Eq_8Yk_3BRASe5U0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.50.0/23
89.213.56.0/22
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.204.0/22
109.176.239.0/24
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
213.218.224.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:90:cd:ac:6d:0c:71:b0:b8:9e:65:ff:02:ac:fd:55:d1:f3:
58:b8:9c:3c:4b:fe:79:32:a6:da:c6:c5:c6:35:aa:c3:44:89:
1c:5a:a8:12:2a:f2:bc:ad:8d:71:f8:59:8b:5d:4d:b6:0d:9a:
e2:7a:d6:b7:3e:b1:90:78:f5:02:8d:32:57:9f:d6:8f:1d:87:
c0:b3:89:84:51:e6:83:11:b3:eb:db:86:d3:aa:8f:88:d7:1e:
ae:8a:2e:6d:d9:30:3f:f4:15:05:2c:15:2a:b9:8d:c2:0f:01:
80:a7:6e:2a:aa:e2:b7:5b:a5:6f:3b:6e:4d:1a:5b:22:a5:ab:
62:6c:ab:80:9d:79:82:56:68:9b:86:76:55:f6:ea:50:80:69:
e3:1d:16:aa:c3:fe:81:58:ae:e5:6f:e6:a0:d3:d9:f6:93:24:
7b:9e:26:4c:32:ed:b6:42:10:fc:77:f4:dd:34:d0:bb:a7:48:
e0:88:f2:0c:1a:57:74:e8:07:2d:9f:58:ea:7a:d8:7a:03:3f:
18:74:1a:f6:74:c0:2e:12:7a:cc:c0:27:45:31:91:a1:03:0f:
d2:b9:ac:9a:cc:cb:39:8a:e6:bd:f1:50:ee:d3:a6:d4:a2:b8:
49:ab:f1:b8:fe:dc:be:97:61:a2:2f:15:dd:46:48:d9:ae:2a:
f1:92:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:26:49 2025 by rpki-client