Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wTteqSFvy_gBNPMTjI7NwiW2K-A.roa
File: wTteqSFvy_gBNPMTjI7NwiW2K-A.roa (raw, json)
Hash identifier: sOsUoBWl72u5a2yvDPu4m5KogoqICcJXU0XwKD88pIg=
Subject key identifier: C1:3B:5E:A9:21:6F:CB:F8:01:34:F3:13:8C:8E:CD:C2:25:B6:2B:E0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019053B9A95CA9BCA42CBDE9F193F3B99A65
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wTteqSFvy_gBNPMTjI7NwiW2K-A.roa
Signing time: Wed 26 Jun 2024 08:46:34 +0000
ROA not before: Wed 26 Jun 2024 08:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.49.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.134.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.165.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 08:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:b9:a9:5c:a9:bc:a4:2c:bd:e9:f1:93:f3:b9:9a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 26 08:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c13b5ea9216fcbf80134f3138c8ecdc225b62be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:38:be:d6:e7:1c:4b:78:f3:72:7f:8d:0c:
15:3c:de:48:c3:7c:b6:bb:23:67:f7:04:f3:c8:87:
77:a7:b8:43:fa:20:cc:28:f7:04:b7:3e:bc:2e:2f:
f4:f9:13:07:49:5c:d6:d1:18:19:b6:c6:fe:31:0b:
3a:87:ca:0f:b9:a1:04:e5:39:2e:b1:e5:84:94:3b:
1c:01:e9:77:9d:f6:22:3a:fe:f0:9c:5b:35:83:e3:
a9:aa:da:0f:18:fc:da:a2:7b:66:57:c7:d1:09:52:
95:52:86:a1:76:3a:a5:a6:8c:3d:95:81:c7:97:98:
a1:88:68:80:ff:27:8f:c2:04:da:1e:e7:1c:6e:32:
be:4d:ea:c0:a2:f4:90:d8:a3:a9:c3:73:3d:2b:02:
07:d7:2c:22:95:86:32:63:f2:d8:a2:dc:f2:11:54:
4c:2a:36:c9:f6:1f:6b:29:b4:f4:a3:a8:c8:f8:ba:
10:82:02:f1:22:4c:7f:0d:7c:29:f0:b2:61:7e:69:
d6:3a:56:37:09:aa:79:3f:90:4d:9a:ee:88:da:7b:
d4:1a:4f:96:df:34:44:5c:44:f3:25:10:89:ce:55:
f3:81:82:cc:f7:85:b0:36:35:ea:63:8a:40:36:9b:
6c:2a:c3:92:ed:24:c7:4c:01:c1:4f:8e:2c:b0:ad:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3B:5E:A9:21:6F:CB:F8:01:34:F3:13:8C:8E:CD:C2:25:B6:2B:E0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wTteqSFvy_gBNPMTjI7NwiW2K-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.49.0-89.213.59.255
89.213.134.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.165.0/24
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:7b:60:18:81:bf:20:2d:dd:91:7b:c9:78:be:e3:a5:95:07:
84:3d:66:4e:9f:4c:c7:1d:aa:cd:0a:6a:72:1d:ad:75:1b:35:
91:98:2d:81:4d:fa:bb:de:a9:2c:c4:5f:20:4d:dd:37:04:16:
3c:fe:6c:31:0f:41:c4:75:67:a1:92:ee:0b:42:bc:1a:ca:c7:
dd:db:64:89:2c:73:10:c0:3b:13:46:22:6e:96:11:e3:0f:cb:
44:de:b6:40:44:9e:6d:36:08:e3:c6:ab:12:9a:41:55:55:03:
a3:28:92:d9:be:e3:51:71:e9:95:a2:e6:26:62:eb:1c:81:b2:
82:d2:1f:ec:ab:34:d7:b3:c7:db:09:07:8e:da:57:6c:5e:bc:
4c:da:f0:87:16:a0:a7:89:f0:71:8a:70:f5:ec:85:f9:16:76:
bd:5a:86:fe:26:d8:16:f9:be:9f:d1:fa:00:0d:c9:a2:63:5e:
d0:21:9f:1b:61:77:9c:a9:9a:a3:e3:28:6c:0e:cc:a8:3a:49:
eb:29:30:10:70:fd:27:9b:0a:17:0b:77:a7:d1:b0:99:5a:51:
c6:c4:85:b3:69:31:71:de:84:df:e0:38:de:81:af:b0:ba:b6:
eb:f9:9c:a8:68:ad:59:6a:95:0b:68:22:45:c0:e2:17:4d:0f:
1c:b9:87:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:13 2025 by rpki-client