Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dhgT2weIVfMC48PEsGi_11OT26Q.roa
File: dhgT2weIVfMC48PEsGi_11OT26Q.roa (raw, json)
Hash identifier: T9y5k5tVjXlKKZA7uvjB+zZTe6pJ41mSLLm9+Hb12HI=
Subject key identifier: 76:18:13:DB:07:88:55:F3:02:E3:C3:C4:B0:68:BF:D7:53:93:DB:A4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01902C124BCF90AEFC6011F0315CE7C2463A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dhgT2weIVfMC48PEsGi_11OT26Q.roa
Signing time: Tue 18 Jun 2024 15:58:34 +0000
ROA not before: Tue 18 Jun 2024 15:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.7.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.35.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 12:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:12:4b:cf:90:ae:fc:60:11:f0:31:5c:e7:c2:46:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 18 15:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=761813db078855f302e3c3c4b068bfd75393dba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:98:8f:fc:2f:4a:d4:cd:0d:ac:ab:83:3e:
fd:9b:4f:4b:cd:80:49:19:aa:7c:34:45:e1:d8:7e:
66:bf:9c:77:3e:29:eb:46:5b:c6:0d:a1:3e:8b:6d:
5f:c4:29:8b:39:72:1f:e0:f2:95:34:a9:b9:d5:d0:
92:0c:3e:a6:de:50:06:dc:28:8b:80:a6:82:29:a9:
e4:43:77:64:51:47:cf:06:69:96:28:89:25:93:00:
23:b6:fe:6c:6f:b0:ba:89:07:b3:23:ac:81:f2:bd:
fd:d5:f0:d0:39:46:57:90:25:b2:ed:af:58:c8:a9:
83:17:39:70:a9:90:c4:5d:fd:d0:55:e8:27:d4:fe:
92:ee:90:81:de:52:53:d6:77:25:5b:cf:28:4f:90:
8e:2d:f4:90:85:25:6d:ee:18:a2:02:d1:1c:d1:64:
67:1a:95:1c:59:19:52:fc:92:e1:52:f0:48:b9:93:
c8:0d:5b:c9:63:6a:b9:cc:7e:c0:58:34:6b:ac:81:
04:a1:e7:1c:47:d5:0e:c9:1e:ad:ab:6e:58:13:ad:
e4:0c:33:1d:b4:93:42:15:0b:08:8d:b5:50:a6:ef:
88:8f:83:29:cd:ec:d8:21:d8:f0:d5:99:ac:55:75:
52:86:dd:af:54:ce:16:9b:6d:fa:e2:c2:bc:f3:0b:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:13:DB:07:88:55:F3:02:E3:C3:C4:B0:68:BF:D7:53:93:DB:A4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dhgT2weIVfMC48PEsGi_11OT26Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.7.0/24
82.152.176.0/23
82.153.35.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.202.0/24
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:ae:e9:54:7b:30:6f:33:7b:67:65:4f:20:8f:8d:46:89:e7:
75:72:4a:06:87:3d:f6:1e:ee:54:d2:63:98:a0:81:ca:79:44:
95:22:4b:23:8f:25:56:23:33:a1:0c:cb:b3:4c:ff:d6:e2:93:
49:29:af:72:c7:5d:dd:ee:cd:92:ab:d1:ee:df:a1:dd:b8:85:
0d:a0:4b:5a:42:c6:f2:d0:39:65:38:34:50:47:ba:11:a2:7d:
54:8f:54:15:f3:6e:53:a8:19:06:01:f3:07:9d:33:0e:c9:67:
8a:ae:54:a6:af:fb:33:f4:28:f7:ef:fd:a3:36:03:f7:6c:08:
ea:8e:d3:68:39:bd:19:e5:c1:20:bc:f7:e4:fa:b5:22:cf:34:
95:aa:5a:51:0d:ac:28:32:0f:a9:91:00:fa:89:6d:79:be:a1:
4a:4d:03:cc:07:69:fd:7a:57:05:68:91:39:79:d6:e8:2a:c0:
86:47:e8:a4:a9:ce:d6:26:6e:63:b6:0c:76:0a:89:0b:a6:7c:
c0:01:fa:56:e5:3a:db:16:19:f7:88:45:ff:c4:51:4e:94:41:
51:2d:0a:58:c3:42:0f:2d:d2:bb:e4:90:77:b4:f3:8a:bb:f9:
83:b8:81:23:18:30:f0:5c:b4:ab:6c:5c:10:b0:4e:39:58:10:
7a:12:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:04:09 2025 by rpki-client