Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HcVP1P-ymEPIRv2YptzpnV5S2Q4.roa
File: HcVP1P-ymEPIRv2YptzpnV5S2Q4.roa (raw, json)
Hash identifier: tBVcwDMx40uptv0BdaAUZPFzo+hk5MVrSKbqw0kmMHQ=
Subject key identifier: 1D:C5:4F:D4:FF:B2:98:43:C8:46:FD:98:A6:DC:E9:9D:5E:52:D9:0E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019173F552C88D0581B6D4086F5D5934BE78
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HcVP1P-ymEPIRv2YptzpnV5S2Q4.roa
Signing time: Wed 21 Aug 2024 08:02:22 +0000
ROA not before: Wed 21 Aug 2024 08:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 81.168.126.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.127.0/24 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.210.39.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 11:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:f5:52:c8:8d:05:81:b6:d4:08:6f:5d:59:34:be:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 21 08:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dc54fd4ffb29843c846fd98a6dce99d5e52d90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:5c:c1:4b:4a:05:b5:a2:f3:61:f6:cc:12:
5c:d8:22:9d:89:86:14:11:9f:5f:16:12:6a:b9:ec:
b2:ee:02:98:90:c1:bb:4c:a2:d8:b0:f3:cd:61:ab:
73:a0:98:02:eb:e9:e6:32:9f:67:8c:aa:8c:ae:e1:
8c:41:50:de:41:7b:49:77:11:c7:af:5c:12:77:bf:
3d:46:91:e2:6e:78:20:42:48:09:aa:f0:62:05:d7:
37:16:c7:2a:04:67:7a:99:1c:92:3f:08:e8:cf:bb:
6d:f1:d8:66:5a:10:08:35:ec:88:2c:85:d6:ac:c9:
c1:22:de:e2:cc:01:15:1b:64:2a:20:16:10:f7:bc:
a7:5b:b6:b3:bb:a8:95:f6:29:cc:bf:fb:47:7c:5b:
1b:27:15:9c:52:7e:54:de:ce:8a:7e:80:d6:ad:d1:
ad:1c:08:93:ce:12:bb:3d:09:d2:2a:bc:86:8b:2d:
35:e7:ce:c4:dd:cc:99:1d:4b:1e:f4:33:d7:42:08:
29:e5:54:ec:35:8b:0e:34:e0:d2:7d:39:ca:cb:9a:
73:bc:2d:8d:8a:82:67:23:92:bb:79:20:e5:47:23:
65:29:24:18:01:2c:5a:d0:28:be:ea:9c:98:33:e1:
3f:f3:e1:92:27:c6:a1:62:e3:5f:09:d5:49:13:83:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C5:4F:D4:FF:B2:98:43:C8:46:FD:98:A6:DC:E9:9D:5E:52:D9:0E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HcVP1P-ymEPIRv2YptzpnV5S2Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.152.98.0/24
82.153.220.0/24
82.153.255.0/24
82.163.10.0/23
89.213.105.0/24
89.213.127.0/24
89.213.226.0/24
109.176.14.0/24
109.176.30.0/24
109.176.208.0/24
213.210.39.0/24
213.218.210.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a7:bc:1b:3c:1b:42:3e:06:6c:a1:3f:f8:13:45:59:01:4e:
4c:87:cf:85:92:18:79:cb:26:79:cd:80:b8:0a:24:b1:46:34:
e6:47:dd:47:cd:f4:31:86:23:ea:7b:45:e8:b3:79:01:06:22:
21:56:ca:7f:a5:e7:9c:70:20:ba:11:24:eb:98:1d:3e:84:81:
64:fb:17:6d:8b:88:bd:9d:a4:c9:eb:14:ae:9b:5f:a9:84:8a:
35:8d:56:65:30:3c:46:07:df:d3:8d:12:d2:63:27:9e:81:71:
4a:88:4b:bc:1f:20:ea:db:2b:8d:9d:51:12:21:b1:c2:a5:46:
38:6f:f1:4c:de:83:03:03:87:07:91:6b:56:76:48:c9:a1:8e:
d0:11:a0:51:e1:05:17:9b:3a:2c:fc:cd:5e:9d:fb:cc:9d:07:
10:30:56:91:55:a6:f2:f7:26:1e:42:86:f9:4c:58:ff:1e:a7:
9c:70:bf:a1:9f:db:55:d5:0e:42:e2:5e:65:d2:25:2b:a1:a1:
e2:b5:3c:6c:6d:98:bf:7e:74:e7:2e:08:45:e0:73:f1:f5:6d:
d6:bc:56:39:d3:8c:fc:62:62:b2:65:a9:5c:1d:d9:10:34:87:
32:79:44:9d:78:dd:00:39:f3:e1:6b:e1:62:72:c8:4b:8c:0d:
6b:28:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:48 2025 by rpki-client