Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6jJbzkauc9FyM5ZEltrQt3K3-KA.roa
File: 6jJbzkauc9FyM5ZEltrQt3K3-KA.roa (raw, json)
Hash identifier: k4PgQrz7H1VbXvx1ZTZ5r1sws9WBHCA3KUhHuTvyKUM=
Subject key identifier: EA:32:5B:CE:46:AE:73:D1:72:33:96:44:96:DA:D0:B7:72:B7:F8:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01926C222E3386D3968B27F5C3540ED76205
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6jJbzkauc9FyM5ZEltrQt3K3-KA.roa
Signing time: Tue 08 Oct 2024 12:37:12 +0000
ROA not before: Tue 08 Oct 2024 12:37:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.23.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.243.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 08:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:22:2e:33:86:d3:96:8b:27:f5:c3:54:0e:d7:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 8 12:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea325bce46ae73d17233964496dad0b772b7f8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:f5:27:14:6c:9b:f2:ba:53:13:22:2a:52:
87:5b:64:80:69:9a:a3:4c:c9:7f:52:ef:e9:63:42:
0e:74:33:37:aa:56:48:73:7f:e7:66:41:3b:3d:29:
98:dd:d3:4c:75:a4:97:a5:a6:fc:ae:c4:82:d0:d1:
f6:09:6d:79:fa:52:25:fb:38:7d:23:db:23:57:90:
71:1f:b6:9d:41:b5:8a:6b:31:ab:73:c4:fa:60:6e:
b3:e5:9d:08:30:bb:92:29:05:ec:e9:66:4d:c4:03:
00:6a:3d:8e:0e:24:6e:60:9a:03:1a:d6:2d:67:02:
67:72:41:49:aa:53:d0:6c:4a:b9:83:19:a2:0e:97:
1d:15:72:c4:90:38:8f:e4:0b:95:54:5f:bf:54:9f:
bd:79:e5:78:0e:8a:7a:48:62:6d:a8:da:f6:c7:e1:
a8:cc:0a:3e:33:91:d8:e3:89:6a:37:e1:41:72:12:
95:23:4b:c6:e6:c5:67:5f:fa:fd:d6:2b:aa:ac:6f:
37:b5:da:22:d1:ca:ea:ac:4c:93:ec:2c:bc:60:91:
78:5e:f1:a9:cc:38:d7:c5:1e:32:77:37:ee:5d:9d:
1d:3e:c3:cc:32:3c:cd:6e:fa:1e:bd:34:5b:05:18:
b1:50:7d:a0:18:4a:8a:1c:03:d4:dd:3b:b4:e6:60:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:5B:CE:46:AE:73:D1:72:33:96:44:96:DA:D0:B7:72:B7:F8:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6jJbzkauc9FyM5ZEltrQt3K3-KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
213.218.238.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:26:9b:03:2d:90:5d:63:b9:c3:32:e6:00:ac:83:f2:cd:77:
2d:1e:16:99:dc:82:2c:59:00:e3:ad:04:78:84:0b:76:87:cf:
c3:bf:27:f2:44:db:e0:13:9a:be:fa:70:81:85:2f:c7:83:8e:
24:43:7c:9a:d2:a5:93:41:25:87:72:9b:fe:9d:25:d6:6e:e1:
7a:67:1b:eb:12:d7:fe:f1:d5:fd:dd:35:e2:fb:50:fb:25:76:
1d:99:fd:5c:d2:ce:af:c3:be:e1:02:cd:27:f0:da:1a:b0:dc:
8d:66:34:8b:0a:c8:24:ac:90:7f:8e:e1:37:23:a9:25:57:0d:
d1:85:62:c8:3e:4f:3e:8e:92:a9:de:f0:ec:ce:30:34:fa:42:
e8:7a:ac:14:c2:52:0f:c2:6d:6d:ce:df:f8:96:45:98:dc:4a:
c7:f3:83:30:4e:06:fe:0e:70:42:9b:36:d4:3d:26:89:84:b4:
8f:7b:10:39:6b:d8:be:73:ef:a1:53:07:71:7d:cc:eb:03:c2:
de:4b:e8:57:f6:20:4b:4b:77:a0:fa:7d:0c:ea:f7:22:88:9b:
7e:5a:cb:06:31:7e:c1:72:39:84:b1:19:35:bd:62:8c:99:63:
83:f5:d8:ff:e4:b5:76:ec:6c:e3:b3:55:42:32:a2:9d:58:2f:
61:1e:2e:bc
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZJsIi4zhtOWiyf1w1QO12IFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMDA4MTIzNzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTMyNWJjZTQ2YWU3M2QxNzIzMzk2NDQ5NmRhZDBiNzcyYjdmOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1P1JxRsm/K6UxMiKlKHW2SAaZqj
TMl/Uu/pY0IOdDM3qlZIc3/nZkE7PSmY3dNMdaSXpab8rsSC0NH2CW15+lIl+zh9
I9sjV5BxH7adQbWKazGrc8T6YG6z5Z0IMLuSKQXs6WZNxAMAaj2ODiRuYJoDGtYt
ZwJnckFJqlPQbEq5gxmiDpcdFXLEkDiP5AuVVF+/VJ+9eeV4Dop6SGJtqNr2x+Go
zAo+M5HY44lqN+FBchKVI0vG5sVnX/r91iuqrG83tdoi0crqrEyT7Cy8YJF4XvGp
zDjXxR4ydzfuXZ0dPsPMMjzNbvoevTRbBRixUH2gGEqKHAPU3Tu05mD9xQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFOoyW85GrnPRcjOWRJba0Ldyt/igMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNmpKYnprYXVjOUZ5TTVaRWx0clF0M0szLUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHPBggrBgEFBQcBBwEB/wSBvzCBvDCBuQQCAAEwgbIDBAFS
mLADBAJSmYgDBAFZ1SwDBAFZ1TIDBAJZ1TgDBABZ1YEDBABZ1YswDAMEAFnVkQME
AFnVkjAMAwQCWdWUAwQFWdWAAwQAWdWnAwQCWdWsMAwDBAJZ1cQDBARZ1cAwDAME
AlnV5AMEBFnV4AMEA22wEAMEAm2wzAMEAW2w8gMEAbkxfgMEBMJpUAMEAdQmWAME
ANXa0wMEANXa7jAMAwQA2ZFBAwQA2ZFCAwQD2ZFIMA0GCSqGSIb3DQEBCwUAA4IB
AQBeJpsDLZBdY7nDMuYArIPyzXctHhaZ3IIsWQDjrQR4hAt2h8/DvyfyRNvgE5q+
+nCBhS/Hg44kQ3ya0qWTQSWHcpv+nSXWbuF6ZxvrEtf+8dX93TXi+1D7JXYdmf1c
0s6vw77hAs0n8NoasNyNZjSLCsgkrJB/juE3I6klVw3RhWLIPk8+jpKp3vDszjA0
+kLoeqwUwlIPwm1tzt/4lkWY3ErH84MwTgb+DnBCmzbUPSaJhLSPexA5a9i+c++h
UwdxfczrA8LeS+hX9iBLS3eg+n0M6vciiJt+WssGMX7BcjmEsRk1vWKMmWOD9dj/
5LV27Gzjs1VCMqKdWC9hHi68
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:48 2025 by rpki-client