Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Tud45wi0ThzPONicZlw6Y0CeoYo.roa
File: Tud45wi0ThzPONicZlw6Y0CeoYo.roa (raw, json)
Hash identifier: yhLekkOlaJaGlpRGuwzeiynyLdg0Y4UP35jTUv83p9E=
Subject key identifier: 4E:E7:78:E7:08:B4:4E:1C:CF:38:D8:9C:66:5C:3A:63:40:9E:A1:8A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01904E9A9FF02FFDFAF9BF329963E91F023B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Tud45wi0ThzPONicZlw6Y0CeoYo.roa
Signing time: Tue 25 Jun 2024 08:54:34 +0000
ROA not before: Tue 25 Jun 2024 08:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.134.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 08:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:9a:9f:f0:2f:fd:fa:f9:bf:32:99:63:e9:1f:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 25 08:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ee778e708b44e1ccf38d89c665c3a63409ea18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7b:7e:77:32:9d:3a:82:5a:fe:7c:6f:6d:a2:
5f:20:8a:18:95:2d:2e:47:82:6e:8c:b6:a2:3e:4b:
23:97:83:d3:c1:21:2a:17:2f:84:11:e7:bb:97:2d:
56:94:7e:36:ae:be:63:a0:5b:e6:b9:02:4b:67:4b:
f5:31:ef:aa:54:cd:06:02:67:f3:29:ba:81:93:39:
8f:d7:05:77:3d:66:cc:32:e9:90:0e:10:6a:a8:07:
fb:4d:3f:08:89:0b:d1:ec:29:17:6a:01:80:a6:eb:
bf:b3:c1:46:b4:d4:e7:2e:73:35:3e:5d:60:4d:7e:
62:f7:04:8a:a0:25:d3:47:9a:3a:4a:cc:50:73:4d:
ae:b8:a6:00:b0:31:14:1b:bc:d3:f8:27:9b:ca:92:
7f:b9:07:6d:c2:48:1e:63:ef:76:c0:38:78:ee:4a:
c7:01:ab:9f:a5:2e:c1:63:e9:c6:fa:00:94:db:6a:
d8:f7:86:dd:37:7d:09:4e:2d:d2:f8:21:f9:8a:64:
19:29:48:3c:0e:11:84:10:34:0a:82:86:76:85:44:
52:1f:4f:a1:c4:32:f9:65:9f:06:20:85:23:9b:9b:
62:cd:6d:65:26:cc:e2:7b:21:28:e4:42:83:96:f6:
71:08:31:23:c8:ec:f5:90:59:8d:7f:4e:8f:db:71:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E7:78:E7:08:B4:4E:1C:CF:38:D8:9C:66:5C:3A:63:40:9E:A1:8A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Tud45wi0ThzPONicZlw6Y0CeoYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.176.0/23
82.153.136.0/22
89.213.134.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
98:d8:1d:ea:ef:a9:96:33:0e:f7:7c:f7:0d:56:3e:6f:ad:32:
5a:4a:31:28:69:84:97:ab:2c:65:1b:70:30:18:9b:d9:5c:c1:
d3:34:66:74:01:42:bd:29:ae:63:04:4e:30:f4:0d:b9:ba:dd:
1b:9e:63:50:9b:f0:95:80:8b:ad:fb:b8:9f:17:60:fb:3c:5d:
8c:ce:a7:95:ed:c8:57:b6:df:a4:cc:0c:21:2a:0f:6d:3d:aa:
64:de:f0:74:89:7a:1d:71:77:f5:3d:88:ac:9d:d5:c4:36:fe:
a7:6b:98:0c:0c:57:32:3e:5e:5a:a3:05:a3:94:2a:bc:b1:6a:
62:67:fe:5d:df:bc:52:fe:6b:cb:09:f0:42:d4:7a:d2:05:5f:
39:b5:86:fa:89:05:3b:cb:ae:76:6d:ee:95:c2:27:d0:b2:80:
f3:7b:93:d6:98:2d:bb:32:be:a9:58:4a:da:24:2f:93:7d:8b:
4a:da:85:80:4e:89:32:02:4b:8f:15:50:d8:36:29:ba:c0:8c:
d5:0d:5a:58:fe:ce:54:7c:f8:de:2b:6d:e6:27:c9:ab:02:80:
48:c1:01:b7:02:3f:ef:e3:6c:d4:14:ce:ba:9f:46:82:f2:c4:
e5:05:7e:d3:4c:43:c4:fa:a3:b3:50:d6:b9:bf:a3:06:86:a3:
a0:eb:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:08 2025 by rpki-client