Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0J07yYdSDjw91T4YXzQRmqxZ9dk.roa
File: 0J07yYdSDjw91T4YXzQRmqxZ9dk.roa (raw, json)
Hash identifier: RZsuUIn1SeHT4exnjNSck1sp0cQRXywE/SBR6JbnxNg=
Subject key identifier: D0:9D:3B:C9:87:52:0E:3C:3D:D5:3E:18:5F:34:11:9A:AC:59:F5:D9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01901C433E99F3BA79A607F46BBD7A47A68B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0J07yYdSDjw91T4YXzQRmqxZ9dk.roa
Signing time: Sat 15 Jun 2024 14:18:07 +0000
ROA not before: Sat 15 Jun 2024 14:18:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.34.0/24 maxlen: 24
82.153.35.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.201.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.223.0/24 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jun 2024 19:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:43:3e:99:f3:ba:79:a6:07:f4:6b:bd:7a:47:a6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 15 14:18:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d09d3bc987520e3c3dd53e185f34119aac59f5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:b1:39:dc:e9:cc:e8:07:6d:21:3a:2d:31:
10:92:53:64:d3:cd:0e:08:35:d0:2f:c2:3c:d8:9b:
64:db:fc:34:15:d0:c1:44:bb:54:67:08:1b:b4:59:
26:62:9e:95:ff:af:98:6e:0a:53:a0:dc:49:8a:d8:
fd:32:3d:43:0a:33:0b:33:26:f2:fa:f3:a2:8e:26:
56:8c:3b:6c:ee:e3:87:cc:ea:51:14:94:de:d4:a1:
c1:74:6a:dd:a3:49:e4:35:f2:7a:ff:d0:a7:f2:57:
80:bb:d4:f6:7d:39:99:05:66:55:3e:ac:be:84:c8:
e2:01:e7:0e:64:21:b9:2e:46:5f:46:45:2a:3e:17:
07:0b:c5:ff:70:e3:b9:38:16:82:34:d5:ef:b5:51:
9d:c4:39:82:06:f8:d9:39:8b:71:2a:59:a8:a4:2f:
91:44:6a:7f:01:96:ca:b1:9c:cc:7b:d1:9e:fa:87:
da:69:ac:7e:09:4c:a4:8d:26:ef:ba:1e:c7:e9:c5:
d3:d2:3a:9f:bd:fa:72:18:eb:9d:62:11:16:6e:34:
28:71:fa:dc:91:20:bf:4e:33:a9:6c:05:39:3c:16:
97:c3:fa:37:79:90:e2:f2:71:12:25:44:6c:f6:36:
5e:55:1e:e3:76:99:f4:f2:5c:a3:ce:31:90:4e:23:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9D:3B:C9:87:52:0E:3C:3D:D5:3E:18:5F:34:11:9A:AC:59:F5:D9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0J07yYdSDjw91T4YXzQRmqxZ9dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.176.0/23
82.153.34.0/23
82.153.136.0/22
82.153.201.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.223.0/24
89.213.232.0/21
109.176.16.0/21
109.176.202.0/24
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
55:80:9c:07:91:e5:29:71:27:49:04:8b:70:92:cb:54:e2:ea:
f3:49:e2:a1:03:15:e4:34:b3:67:cb:0c:53:9a:e4:d6:29:56:
48:49:2d:10:ff:5b:8f:66:43:84:14:cc:12:27:85:12:07:c9:
6c:50:03:02:4d:36:cd:60:d7:bb:e8:6c:03:bd:4b:6e:98:16:
ce:f2:b3:15:d4:13:8f:60:b1:aa:09:e9:e1:82:b5:48:3f:70:
d0:0d:ba:ea:47:8c:7a:45:4f:ec:18:d1:46:cf:6b:57:2c:19:
f2:8f:37:ec:de:0e:2a:fb:ba:42:16:37:dc:c9:68:59:09:09:
3a:79:c3:2f:c6:a5:0e:6e:93:62:d2:da:c0:ae:fc:92:2c:d6:
df:d3:12:00:e2:5d:2e:80:e2:d5:7b:0b:a2:29:54:55:43:56:
33:d6:d4:7c:c7:8a:0a:97:ac:93:a4:f4:67:b9:36:d8:11:6c:
f9:a4:b4:6c:f8:17:c5:09:59:73:75:6a:91:8a:37:24:4c:bc:
df:5e:43:fe:82:84:66:42:a6:6e:85:0e:3d:8f:e9:4f:b6:11:
9f:fd:c4:38:f7:14:67:42:38:d6:e9:74:e4:c4:cf:46:51:71:
ee:57:4a:11:ca:46:0b:43:e2:55:48:70:8c:9c:24:3a:c8:68:
57:9f:fc:da
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZAcQz6Z87p5pgf0a716R6aLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNjE1MTQxODA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDlkM2JjOTg3NTIwZTNjM2RkNTNlMTg1ZjM0MTE5YWFjNTlmNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4WxOdzpzOgHbSE6LTEQklNk080O
CDXQL8I82Jtk2/w0FdDBRLtUZwgbtFkmYp6V/6+YbgpToNxJitj9Mj1DCjMLMyby
+vOijiZWjDts7uOHzOpRFJTe1KHBdGrdo0nkNfJ6/9Cn8leAu9T2fTmZBWZVPqy+
hMjiAecOZCG5LkZfRkUqPhcHC8X/cOO5OBaCNNXvtVGdxDmCBvjZOYtxKlmopC+R
RGp/AZbKsZzMe9Ge+ofaaax+CUykjSbvuh7H6cXT0jqfvfpyGOudYhEWbjQocfrc
kSC/TjOpbAU5PBaXw/o3eZDi8nESJURs9jZeVR7jdpn08lyjzjGQTiNgVwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFNCdO8mHUg48PdU+GF80EZqsWfXZMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMEowN3lZZFNEanc5MVQ0WVh6UVJtcXhaOWRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEACX8
GwMEAFGoMgMEAVKYsAMEAVKZIgMEAlKZiAMEAFKZyTAMAwQCWdWUAwQFWdWAAwQC
WdWsMAwDBAJZ1cQDBARZ1cADBABZ1d8DBANZ1egDBANtsBADBABtsMoDBAJtsMwD
BAG5MX4DBATCaVADBAHUJlgDBAHV2tIwDQYJKoZIhvcNAQELBQADggEBAFWAnAeR
5SlxJ0kEi3CSy1Ti6vNJ4qEDFeQ0s2fLDFOa5NYpVkhJLRD/W49mQ4QUzBInhRIH
yWxQAwJNNs1g17vobAO9S26YFs7ysxXUE49gsaoJ6eGCtUg/cNANuupHjHpFT+wY
0UbPa1csGfKPN+zeDir7ukIWN9zJaFkJCTp5wy/GpQ5uk2LS2sCu/JIs1t/TEgDi
XS6A4tV7C6IpVFVDVjPW1HzHigqXrJOk9Ge5NtgRbPmktGz4F8UJWXN1apGKNyRM
vN9eQ/6ChGZCpm6FDj2P6U+2EZ/9xDj3FGdCONbpdOTEz0ZRce5XShHKRgtD4lVI
cIycJDrIaFef/No=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:58 2025 by rpki-client