Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hs0389S7GRDJ_JFUebbM3KV0WOc.roa
File: hs0389S7GRDJ_JFUebbM3KV0WOc.roa (raw, json)
Hash identifier: 0HA6eimJ6uVr9hy4qJaMP53II8BN4TOvtziE8C5cHAA=
Subject key identifier: 86:CD:37:F3:D4:BB:19:10:C9:FC:91:54:79:B6:CC:DC:A5:74:58:E7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192FD4A5BC7F8D41AE5CD38AFCA2D3C595A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hs0389S7GRDJ_JFUebbM3KV0WOc.roa
Signing time: Tue 05 Nov 2024 17:06:01 +0000
ROA not before: Tue 05 Nov 2024 17:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.163.23.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.153.0/24 maxlen: 24
213.210.35.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 17:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fd:4a:5b:c7:f8:d4:1a:e5:cd:38:af:ca:2d:3c:59:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 5 17:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86cd37f3d4bb1910c9fc915479b6ccdca57458e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:5d:fa:42:52:a6:d3:63:14:36:cb:d7:ff:
3b:32:d9:08:cc:f2:58:56:12:4b:78:d3:f0:80:e2:
dd:fe:4d:43:0f:50:cf:ae:67:69:b8:f5:c8:31:e2:
de:fd:9f:d7:79:21:5e:1b:68:c4:fe:9a:5d:a1:c1:
ef:00:f8:4f:32:0b:b8:ae:be:8e:bd:7c:62:a2:b6:
52:ae:aa:ce:08:c1:0e:42:8f:68:61:29:5d:ce:a7:
6f:f3:9d:a5:41:ae:f1:55:c8:9f:ac:97:98:2a:11:
8c:e4:08:42:45:5a:64:a1:ed:f1:9c:5a:95:fa:df:
35:36:91:bb:1d:85:50:fa:69:5b:62:0f:d5:34:df:
e2:d3:bf:57:db:f6:c3:00:42:2a:c8:a7:88:d3:31:
41:e9:92:fa:3d:4f:51:18:80:12:81:58:bb:d1:d7:
99:bd:dd:b4:12:c8:a5:02:86:a5:10:0c:95:b9:2f:
ac:d3:af:78:a8:00:6c:22:de:61:64:06:f7:e8:a4:
0d:d9:2e:64:ff:a8:37:1f:b9:c8:1c:45:f5:20:46:
c2:cd:3f:03:a4:37:07:ab:da:5f:2e:0f:df:bf:3b:
4c:a2:3a:02:02:3f:14:49:61:84:df:ae:c8:ff:29:
ee:c1:33:ce:c5:14:00:eb:6b:b3:5c:b1:52:ed:f8:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:37:F3:D4:BB:19:10:C9:FC:91:54:79:B6:CC:DC:A5:74:58:E7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hs0389S7GRDJ_JFUebbM3KV0WOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.163.23.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.130.153.0/24
213.210.35.0/24
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
54:8f:b6:a2:43:e8:74:11:fb:99:2f:bf:db:23:99:63:27:6f:
8f:db:b9:f8:f0:a7:57:d8:7b:7b:6d:91:e9:c0:01:ce:eb:cd:
b4:39:c7:bb:34:e9:47:e7:0d:5e:00:d1:33:7f:c7:42:3a:0e:
41:e7:6b:57:2c:f4:e8:af:19:fc:46:99:24:bd:55:c3:d6:4d:
62:d8:8d:87:80:79:2b:38:52:64:60:be:b0:b2:54:91:d3:7d:
6a:4e:aa:b0:92:b3:7e:d0:15:c0:87:fa:28:8a:b6:8c:4c:8d:
10:de:73:74:a1:e8:dc:1d:2c:b4:68:d0:7d:c4:07:c7:0f:0d:
ad:b4:83:15:3c:e1:52:56:16:f2:4e:84:6a:67:95:7c:74:2c:
ea:c3:f0:2b:ad:93:5b:d3:44:f7:ba:4b:da:02:03:34:df:29:
61:b0:b2:c3:8b:92:b5:89:a5:a5:1b:9e:18:cf:dc:6a:ef:03:
58:ae:62:5b:77:12:85:72:77:eb:82:42:2e:1b:aa:20:00:96:
09:83:38:18:8e:ae:64:7c:0f:16:04:5a:61:c5:c8:5f:c7:51:
50:72:34:b0:1d:96:d2:8d:1d:3d:10:4d:db:7a:ac:cb:5d:e7:
be:4f:43:ba:00:bb:7c:c9:15:83:5c:52:16:6e:95:fc:ed:cd:
2d:1f:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:55:16 2025 by rpki-client