Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tTKdjrCfizAfEkptZYrt-NRgQm8.roa
File: tTKdjrCfizAfEkptZYrt-NRgQm8.roa (raw, json)
Hash identifier: LS2dFEYtBm/8mUPXHpccImPudvmEWslVthNN3II6v50=
Subject key identifier: B5:32:9D:8E:B0:9F:8B:30:1F:12:4A:6D:65:8A:ED:F8:D4:60:42:6F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194B71AE2652F39A8A16C2C7F985300F92C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tTKdjrCfizAfEkptZYrt-NRgQm8.roa
Signing time: Thu 30 Jan 2025 12:06:19 +0000
ROA not before: Thu 30 Jan 2025 12:06:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.222.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.196.0/24 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
89.213.248.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 15:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:1a:e2:65:2f:39:a8:a1:6c:2c:7f:98:53:00:f9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 30 12:06:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5329d8eb09f8b301f124a6d658aedf8d460426f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:ac:b2:6e:8d:38:a5:a9:4e:2c:fb:cb:f8:
74:86:00:a9:c6:2d:f6:97:f6:c7:99:51:84:a9:45:
59:e5:b4:83:dc:4f:0d:c0:36:b2:e8:a4:a9:dc:ee:
ff:43:52:af:d3:ac:ad:bf:d7:13:4a:97:8c:a2:09:
19:ef:70:d4:53:a8:2f:07:db:46:66:cd:73:60:ef:
55:86:1b:33:3b:a6:f2:6b:32:1b:7a:d3:5c:96:32:
1e:ab:b3:63:36:75:12:f7:c5:d3:b5:5d:20:3b:9a:
87:a2:f2:9d:06:b1:4c:02:04:ee:27:aa:65:94:f3:
3a:02:1e:fe:92:c4:77:2d:9c:91:61:c6:d0:95:c6:
3a:6a:4b:54:ae:fa:e7:19:06:ef:b0:54:69:3e:40:
36:a7:9a:e5:1b:97:0a:43:40:19:df:d9:3f:8b:ea:
e3:53:89:05:93:83:bf:ce:01:77:7d:bf:ba:59:fb:
cf:7b:1d:5c:2c:76:d1:a6:e7:21:32:20:e8:86:24:
b8:1c:75:df:25:26:85:42:da:5d:a8:b2:c5:45:81:
b6:46:68:95:c4:aa:21:81:45:25:4d:13:bf:4a:a0:
83:c7:25:50:09:9d:d3:03:dd:50:db:75:9b:15:de:
c6:c2:83:17:07:c0:c6:31:8a:9e:f4:4d:cd:09:77:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:9D:8E:B0:9F:8B:30:1F:12:4A:6D:65:8A:ED:F8:D4:60:42:6F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tTKdjrCfizAfEkptZYrt-NRgQm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.153.222.0/24
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
89.213.248.0/24
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:2b:ab:d6:0b:10:2e:48:5d:44:56:bb:3d:47:3c:09:38:16:
07:2f:85:b4:11:60:55:84:8a:08:51:b6:e6:fb:9b:0f:97:c5:
4c:71:f0:d1:ce:7c:e5:c6:84:89:ce:cf:e8:d6:28:2f:31:a8:
42:32:1e:e1:18:58:f8:7b:94:7a:0f:2e:b9:20:52:b0:e5:3c:
f1:8c:59:13:ff:7a:bd:de:a4:bb:fa:7b:c9:a8:54:9b:ad:fb:
c3:3f:a2:db:ed:3a:4f:04:14:17:17:98:95:e3:d9:1b:53:3d:
6a:b2:16:e7:bb:db:44:2e:84:34:04:90:1c:20:dc:f9:dc:9c:
31:e5:28:52:dc:cc:45:42:55:e5:9f:6e:8f:1e:86:93:f7:f2:
45:3a:dc:88:89:8d:70:e4:62:0b:45:a0:6b:02:25:f2:a4:20:
23:53:c1:51:09:be:92:b5:69:ed:06:a3:af:4c:e8:1a:e0:c5:
88:19:53:99:61:e3:d8:16:fa:d8:ee:08:1c:74:6e:b8:9a:97:
7f:20:0c:3d:5f:ca:c1:8a:c4:2b:1e:a6:59:ee:4d:ae:b2:2a:
f0:4c:2c:38:5e:eb:c1:93:2a:8f:a8:01:1b:ea:14:76:ad:e7:
7b:2c:75:40:97:c8:fb:4d:7d:a9:df:b0:42:d9:26:84:8c:c1:
55:b6:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:33:13 2025 by rpki-client