Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vXcNNMgD9jE6vN82Nd1CUVOm9ro.roa
File: vXcNNMgD9jE6vN82Nd1CUVOm9ro.roa (raw, json)
Hash identifier: CPQ1JAGxAn5H4r7yhRFVAHpPCDE98K+TSBtO4z1n/tM=
Subject key identifier: BD:77:0D:34:C8:03:F6:31:3A:BC:DF:36:35:DD:42:51:53:A6:F6:BA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191469C1706D650D495EA90DC65A77F2FC8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vXcNNMgD9jE6vN82Nd1CUVOm9ro.roa
Signing time: Mon 12 Aug 2024 12:42:00 +0000
ROA not before: Mon 12 Aug 2024 12:42:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.160.0/21 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 08:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:9c:17:06:d6:50:d4:95:ea:90:dc:65:a7:7f:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 12 12:42:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd770d34c803f6313abcdf3635dd425153a6f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:ea:a8:a8:99:b8:ef:67:7a:15:ef:a1:cf:
13:75:eb:81:6c:e7:f9:12:d7:89:1a:00:5e:cd:a6:
60:2b:3b:f2:21:03:c8:cc:ca:fb:1c:92:2f:c1:64:
82:23:a0:50:2a:9e:f2:19:6e:7f:09:f8:cc:08:60:
fd:48:05:13:ea:8e:a0:e4:c7:47:91:e8:02:bf:6f:
e4:44:2f:1d:21:25:b7:c1:08:b0:5b:66:38:c9:2d:
88:88:85:23:5a:9b:4c:21:0d:bc:c3:52:8c:b7:c7:
2c:68:ab:5e:36:9a:f9:dd:0a:f4:d6:e6:dd:37:99:
d3:61:79:8a:05:10:c7:53:94:4f:e4:44:3c:63:18:
e0:f1:c4:32:7e:87:f7:01:e4:4d:46:df:3a:eb:79:
28:3a:6e:47:b7:59:c3:9a:33:d0:6e:ba:06:8b:1a:
34:d3:60:e7:39:71:9e:4f:85:f8:e3:40:ec:16:d4:
cd:10:f2:aa:3b:15:24:c4:c3:e1:44:23:f0:b2:c6:
7a:4c:6c:25:9f:b0:a7:8b:de:c5:54:37:18:ce:26:
c0:49:f5:3e:8e:af:09:ab:21:69:a3:7d:e9:9c:4d:
72:6e:25:dc:67:e9:af:fb:16:1c:ea:02:6a:79:dc:
4a:ef:07:62:03:45:ff:cb:e9:f2:4b:c2:73:20:c1:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:77:0D:34:C8:03:F6:31:3A:BC:DF:36:35:DD:42:51:53:A6:F6:BA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vXcNNMgD9jE6vN82Nd1CUVOm9ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.160.0/21
82.152.176.0/23
82.153.136.0/22
89.213.50.0/23
89.213.56.0/22
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
00:a9:69:b4:03:ff:dc:66:f4:db:66:39:30:2b:c7:be:7f:e7:
27:82:f5:bd:bf:88:43:a6:6f:96:1d:4c:d0:f8:a3:3c:ab:d2:
ef:1d:14:2d:0b:ca:bc:9c:dd:18:b4:7a:6c:0c:af:ee:56:8e:
a8:0c:46:ad:bb:04:7b:34:04:51:1f:2c:00:fb:3e:1c:1a:c1:
26:c9:5e:4b:eb:03:63:ea:55:20:72:ab:ff:da:c0:b6:99:94:
bf:c8:6b:2b:f4:54:85:6e:e3:43:48:1f:40:a0:ab:58:36:b1:
b2:c4:f8:7b:55:41:0e:86:47:77:7e:2d:69:57:6d:2d:05:d4:
28:af:a7:3c:0a:5f:fb:fd:46:e0:b2:c0:4e:fc:97:75:ad:2b:
29:b0:80:eb:56:49:9d:05:95:82:19:d9:f9:2c:d5:7a:14:ae:
07:1b:4e:24:b9:74:bb:80:cc:b7:72:9e:38:bf:25:a4:56:a1:
8d:06:68:08:6a:16:60:f4:39:99:31:28:99:83:4c:16:92:74:
b5:dd:8a:66:34:c4:7c:49:29:7d:09:a6:d4:67:1b:52:b3:7a:
3c:90:17:ea:5d:37:04:0b:f6:8e:16:2d:b6:d5:8d:23:c3:fa:
d2:ad:45:94:d3:95:f2:05:c7:06:13:39:31:f6:9f:0a:b3:eb:
7a:ae:d6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:24:59 2025 by rpki-client