Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Esf3a4jEYoxVV3OmsKgzkWS4UFk.roa
File: Esf3a4jEYoxVV3OmsKgzkWS4UFk.roa (raw, json)
Hash identifier: KVVtpTEqldFFgWzZakcaqmf6ZvSEGPL7w+YLieJ0rYs=
Subject key identifier: 12:C7:F7:6B:88:C4:62:8C:55:57:73:A6:B0:A8:33:91:64:B8:50:59
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FE93667ABA200E43ED3E21365689134D7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Esf3a4jEYoxVV3OmsKgzkWS4UFk.roa
Signing time: Wed 05 Jun 2024 16:23:27 +0000
ROA not before: Wed 05 Jun 2024 16:23:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 37.252.27.0/24 maxlen: 24
79.99.76.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
81.168.67.0/24 maxlen: 24
81.168.122.0/24 maxlen: 24
82.152.4.0/24 maxlen: 24
82.152.5.0/24 maxlen: 24
82.152.6.0/24 maxlen: 24
82.152.12.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.105.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.140.0/24 maxlen: 24
82.152.142.0/24 maxlen: 24
82.153.34.0/24 maxlen: 24
82.153.35.0/24 maxlen: 24
82.153.55.0/24 maxlen: 24
82.153.135.0/24 maxlen: 24
82.153.153.0/24 maxlen: 24
82.153.156.0/24 maxlen: 24
82.153.159.0/24 maxlen: 24
82.153.200.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.202.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
82.153.207.0/24 maxlen: 24
82.153.226.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
89.213.97.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.197.0/24 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.229.0/24 maxlen: 24
109.176.230.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
213.210.58.0/24 maxlen: 24
213.210.63.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
213.218.233.0/24 maxlen: 24
213.218.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 10:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e9:36:67:ab:a2:00:e4:3e:d3:e2:13:65:68:91:34:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 5 16:23:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12c7f76b88c4628c555773a6b0a8339164b85059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:7e:59:74:fc:8b:aa:62:db:83:e7:62:d4:
16:a1:f8:cf:0c:00:25:de:59:b8:b4:33:db:fa:2b:
40:a1:c0:62:9a:46:d9:62:81:52:e3:41:cc:96:f0:
c0:9e:69:9d:43:a5:17:b4:a8:6d:62:23:93:e9:7d:
d3:f8:ed:5e:00:f3:4a:da:cb:a1:8a:87:0e:a1:ed:
2d:56:ce:1a:44:1b:f0:6f:92:15:91:67:1c:64:36:
e9:02:80:0e:94:23:20:c2:3d:3c:90:7b:d5:df:6f:
dd:bf:52:d3:af:d3:4e:70:35:f2:ba:91:62:1c:21:
77:09:6e:c2:d6:5e:73:6f:ae:a1:68:e2:9b:5b:ba:
4b:4a:5d:e9:29:71:a1:23:82:29:06:78:ff:d9:96:
45:81:48:5b:1e:fc:b5:87:56:88:03:dc:6f:1e:7c:
2a:08:4c:ca:56:b9:3e:cc:0a:18:41:96:65:9a:42:
48:b6:e8:3e:0c:65:8c:d7:b8:14:6d:9e:5f:a7:6a:
3d:b7:2c:25:c9:97:55:38:e3:3c:4d:d1:a1:60:2b:
ee:d3:15:11:51:a7:38:cc:ec:9c:2d:47:4c:90:06:
e3:8e:c1:af:0c:a9:c0:55:13:43:8b:48:68:1b:ee:
01:b1:89:74:95:c0:53:bc:72:e6:16:62:d5:68:be:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:F7:6B:88:C4:62:8C:55:57:73:A6:B0:A8:33:91:64:B8:50:59
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Esf3a4jEYoxVV3OmsKgzkWS4UFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
79.99.76.0/24
81.168.50.0/24
81.168.67.0/24
81.168.122.0/24
82.152.4.0-82.152.6.255
82.152.12.0/24
82.152.98.0/24
82.152.105.0/24
82.152.131.0/24
82.152.140.0/24
82.152.142.0/24
82.153.34.0/23
82.153.55.0/24
82.153.135.0/24
82.153.153.0/24
82.153.156.0/24
82.153.159.0/24
82.153.200.0-82.153.202.255
82.153.205.0/24
82.153.207.0/24
82.153.226.0/24
82.163.0.0/24
89.213.97.0/24
89.213.134.0/24
89.213.197.0/24
109.176.193.0/24
109.176.202.0/24
109.176.229.0-109.176.230.255
109.176.244.0/24
212.38.79.0/24
213.130.150.0/23
213.210.58.0/24
213.210.63.0/24
213.218.211.0/24
213.218.224.0/24
213.218.233.0/24
213.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:4f:df:73:f2:47:15:2d:3b:c5:eb:f7:f1:a7:87:42:12:9b:
72:b0:a4:07:e7:c1:6e:41:80:f3:bd:c2:9b:0d:9e:a4:1a:97:
4a:4f:5c:a6:ed:04:0a:71:10:41:72:da:2f:d1:a0:56:77:65:
ef:ee:66:e8:77:d8:0f:9f:06:a3:4d:30:b6:d2:3b:30:eb:37:
9c:c3:d3:6b:9f:bf:f2:5d:c2:26:ca:08:b9:5e:e9:10:4d:29:
40:ea:9a:65:ef:07:d5:65:15:fc:6f:2e:01:49:9d:bb:a6:c8:
43:ca:87:5e:01:0f:23:a7:3a:35:d1:cf:fd:06:ac:ee:81:93:
a6:54:b5:92:22:6f:9d:4c:b8:40:81:cb:60:84:4c:f0:ef:b9:
f7:3f:46:b8:e1:17:a8:cc:98:e0:9c:47:23:9f:8f:38:3e:6d:
dc:ad:d3:37:98:2a:f3:f6:14:17:0b:0f:b5:16:4f:9c:23:bf:
4f:cd:d0:b5:34:41:41:4c:8c:b4:5e:4c:f0:92:b2:c9:01:5b:
6b:de:69:0d:16:7e:40:8d:19:1c:a1:3c:29:e8:da:81:96:7f:
a0:e7:d6:a7:39:cf:ca:83:7e:c1:90:3f:11:72:51:7d:33:d0:
aa:f7:a0:87:34:27:c1:9d:17:a7:50:08:60:1b:4c:a1:bc:63:
92:bb:21:86
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAY/pNmerogDkPtPiE2VokTTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNjA1MTYyMzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmM3Zjc2Yjg4YzQ2MjhjNTU1NzczYTZiMGE4MzM5MTY0Yjg1MDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv1+WXT8i6pi24PnYtQWofjPDAAl
3lm4tDPb+itAocBimkbZYoFS40HMlvDAnmmdQ6UXtKhtYiOT6X3T+O1eAPNK2suh
iocOoe0tVs4aRBvwb5IVkWccZDbpAoAOlCMgwj08kHvV32/dv1LTr9NOcDXyupFi
HCF3CW7C1l5zb66haOKbW7pLSl3pKXGhI4IpBnj/2ZZFgUhbHvy1h1aIA9xvHnwq
CEzKVrk+zAoYQZZlmkJItug+DGWM17gUbZ5fp2o9tywlyZdVOOM8TdGhYCvu0xUR
Uac4zOycLUdMkAbjjsGvDKnAVRNDi0hoG+4BsYl0lcBTvHLmFmLVaL6W7QIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFBLH92uIxGKMVVdzprCoM5FkuFBZMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRXNmM2E0akVZb3hWVjNPbXNLZ3prV1M0VUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgABMIH8
AwQAJfwbAwQAT2NMAwQAUagyAwQAUahDAwQAUah6MAwDBAJSmAQDBABSmAYDBABS
mAwDBABSmGIDBABSmGkDBABSmIMDBABSmIwDBABSmI4DBAFSmSIDBABSmTcDBABS
mYcDBABSmZkDBABSmZwDBABSmZ8wDAMEA1KZyAMEAFKZygMEAFKZzQMEAFKZzwME
AFKZ4gMEAFKjAAMEAFnVYQMEAFnVhgMEAFnVxQMEAG2wwQMEAG2wyjAMAwQAbbDl
AwQAbbDmAwQAbbD0AwQA1CZPAwQB1YKWAwQA1dI6AwQA1dI/AwQA1drTAwQA1drg
AwQA1drpAwQA1dr5MA0GCSqGSIb3DQEBCwUAA4IBAQBMT99z8kcVLTvF6/fxp4dC
EptysKQH58FuQYDzvcKbDZ6kGpdKT1ym7QQKcRBBctov0aBWd2Xv7mbod9gPnwaj
TTC20jsw6zecw9Nrn7/yXcImygi5XukQTSlA6ppl7wfVZRX8by4BSZ27pshDyode
AQ8jpzo10c/9BqzugZOmVLWSIm+dTLhAgctghEzw77n3P0a44ReozJjgnEcjn484
Pm3crdM3mCrz9hQXCw+1Fk+cI79PzdC1NEFBTIy0XkzwkrLJAVtr3mkNFn5AjRkc
oTwp6NqBln+g59anOc/Kg37BkD8RclF9M9Cq96CHNCfBnRenUAhgG0yhvGOSuyGG
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:31:56 2025 by rpki-client