Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yCdZuucOmiBjQIgtxmUmTnI0bS8.roa
File: yCdZuucOmiBjQIgtxmUmTnI0bS8.roa (raw, json)
Hash identifier: krOBvBB1X0S+CgG7xPh/b73iIDtWdKEiWssP3IDuDlE=
Subject key identifier: C8:27:59:BA:E7:0E:9A:20:63:40:88:2D:C6:65:26:4E:72:34:6D:2F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192533005E58A1BF593B776B124A76C7C38
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yCdZuucOmiBjQIgtxmUmTnI0bS8.roa
Signing time: Thu 03 Oct 2024 16:21:49 +0000
ROA not before: Thu 03 Oct 2024 16:21:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.41.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.63.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.229.0/24 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.243.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 18:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:30:05:e5:8a:1b:f5:93:b7:76:b1:24:a7:6c:7c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 3 16:21:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c82759bae70e9a206340882dc665264e72346d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:41:91:4c:d3:42:44:1e:bf:3f:2d:0d:c2:
a8:2f:33:87:27:0d:60:9f:3f:43:c7:99:2c:11:15:
5d:30:5b:5f:f8:97:89:84:d2:cc:69:be:90:99:50:
24:05:fc:92:15:57:3e:5b:6a:cf:a4:bd:e9:e0:8c:
a3:02:17:58:3e:1f:d9:e5:af:cb:7c:b6:25:66:41:
5b:a3:0d:b5:30:79:be:d0:dd:68:1c:bb:44:3b:02:
51:64:d6:40:9b:76:61:09:4c:a4:70:c8:d3:6d:f2:
a2:84:cc:1f:06:89:88:33:7d:47:da:0a:42:8c:71:
9c:56:b9:6b:e7:91:8c:92:75:6f:24:d3:72:e5:3e:
f0:a0:1b:19:46:9b:d1:54:91:7c:08:3f:be:e4:96:
cf:66:06:c4:ab:28:45:82:71:3a:68:0c:fd:eb:17:
66:f9:e6:9b:b9:2e:d8:fc:56:ad:c4:2c:44:9e:1d:
1b:a8:ee:ef:df:9b:42:23:79:64:ee:86:b7:35:6e:
32:dd:02:0f:59:d7:00:bd:c8:e4:42:c8:9c:32:c2:
8e:ba:25:97:eb:c8:27:61:ee:3b:de:4e:59:c2:e4:
44:76:5b:8e:68:c6:a5:f4:4a:fb:bf:50:57:a9:34:
f2:8d:4b:0d:15:66:c7:97:92:5b:c5:a5:cb:6b:1b:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:27:59:BA:E7:0E:9A:20:63:40:88:2D:C6:65:26:4E:72:34:6D:2F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yCdZuucOmiBjQIgtxmUmTnI0bS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.41.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.63.0/24
89.213.129.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
78:a0:d5:05:63:d0:7a:59:18:e1:c0:49:b2:36:4e:54:ba:9c:
ef:01:de:38:8b:a1:66:80:17:0d:a8:f4:e2:83:8c:7c:48:e0:
0c:7e:67:03:51:fe:60:86:4f:89:66:ea:22:21:0c:09:34:d7:
b1:a9:3c:39:20:a2:9c:3c:2c:f3:b7:ae:ea:a8:9a:fa:ee:90:
70:54:5f:c0:b0:08:82:56:25:ba:45:ad:1f:23:f5:62:d7:1f:
d4:16:83:50:34:6e:24:c0:48:68:ff:af:c4:78:d9:a9:1f:92:
59:4f:a0:3d:14:ef:37:3a:83:fe:b6:93:37:56:56:95:67:48:
16:e6:3f:c6:33:5a:fa:fe:44:90:6b:c6:81:1c:96:2d:22:8d:
05:66:b0:42:18:64:83:23:bd:5c:96:60:5d:89:b0:43:94:18:
3a:4c:94:aa:fb:c1:dd:8f:34:bb:ac:55:7d:b4:54:0f:40:71:
48:d4:4f:31:cc:06:d5:c1:9f:2b:5e:eb:4b:13:1e:9a:62:78:
d6:dc:d1:b5:58:1b:06:0b:42:fd:4d:67:e0:a2:34:f3:1e:59:
01:c3:4d:c6:59:3d:6a:6f:75:1b:ec:7a:b9:33:98:66:5b:0b:
e4:c6:ca:19:00:fa:9e:3e:de:97:ec:0b:88:da:a3:42:c0:79:
36:49:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:46:07 2025 by rpki-client