Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FBTXyr0BTimgA270meRiYx3OpCw.roa
File: FBTXyr0BTimgA270meRiYx3OpCw.roa (raw, json)
Hash identifier: ndao6V1O0VZZPwEGl1WtB2ur5EVwPCN0KDKqhZBCWC8=
Subject key identifier: 14:14:D7:CA:BD:01:4E:29:A0:03:6E:F4:99:E4:62:63:1D:CE:A4:2C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192F6E0F464ECA4C14FE2E68DD79EB9A8AC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FBTXyr0BTimgA270meRiYx3OpCw.roa
Signing time: Mon 04 Nov 2024 11:13:10 +0000
ROA not before: Mon 04 Nov 2024 11:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.163.23.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
89.213.238.0/24 maxlen: 24
89.213.249.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.153.0/24 maxlen: 24
213.210.35.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:e0:f4:64:ec:a4:c1:4f:e2:e6:8d:d7:9e:b9:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 4 11:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1414d7cabd014e29a0036ef499e462631dcea42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:da:c3:01:3d:16:35:1d:86:c9:6c:8c:db:
1e:6c:55:72:c2:61:1f:c0:32:51:2f:eb:58:25:d7:
7b:b7:ac:5a:ce:ce:4f:bb:a8:f9:c2:93:db:d8:66:
1e:47:55:87:5c:fa:1d:ca:d6:86:f4:ab:bb:a0:d2:
57:b1:f9:16:42:24:bb:cd:1d:10:84:92:07:77:92:
a7:29:08:3d:86:f8:3d:71:b0:a2:ac:9c:8e:ad:aa:
01:ae:3f:c0:58:b6:d8:a0:ae:e1:1f:21:98:96:b7:
8d:b0:80:a1:75:02:9a:03:b4:6f:9a:0f:c9:f6:bb:
07:26:5b:05:9b:5e:a3:20:5f:58:ce:05:b6:0c:3f:
99:a5:3c:cb:b7:1d:30:a5:3f:05:60:d2:19:2b:d3:
18:2b:00:27:3b:5f:a3:cd:c8:e2:da:cb:ad:41:52:
40:20:7d:6b:d1:36:e4:32:5b:e1:7e:01:82:db:13:
98:45:63:1e:d7:e8:2f:34:e5:8f:2b:74:67:2a:20:
fd:72:9e:22:99:1b:63:4e:c0:28:4d:88:15:46:70:
ca:1d:67:ce:bf:83:0c:98:cf:c6:28:89:48:78:fd:
16:b7:04:76:8a:c8:1f:be:5a:3a:01:80:70:90:bc:
f4:29:74:32:11:7b:d7:94:9d:49:f0:e6:bb:ca:f4:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:14:D7:CA:BD:01:4E:29:A0:03:6E:F4:99:E4:62:63:1D:CE:A4:2C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FBTXyr0BTimgA270meRiYx3OpCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.163.23.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
89.213.249.0/24
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.130.153.0/24
213.210.35.0/24
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
70:c7:8b:be:e3:3d:c1:5a:2f:f1:fc:0a:a7:29:d9:9e:cd:c6:
dc:0e:37:56:33:70:62:43:e5:49:42:68:72:08:1b:09:ee:27:
5c:91:e0:c3:5f:4c:a2:ea:6e:87:e9:dd:e7:bb:b4:04:01:0f:
9a:fa:51:e2:fc:18:88:89:b8:cc:49:e4:e7:99:dc:55:d8:06:
cf:87:6a:6e:0c:c7:38:9c:b5:82:06:39:1b:cd:80:85:46:e7:
14:46:2e:b8:56:e9:2d:7b:56:8a:87:09:91:4b:dd:51:7a:0f:
08:09:db:6f:f4:f0:bb:a7:d8:e6:45:e9:9b:6b:cb:98:29:d8:
16:e2:7b:b8:e1:ef:bb:42:e1:22:48:9a:e0:44:33:f3:da:58:
55:07:38:a2:75:25:34:72:ad:d6:ad:fb:15:6e:0b:3d:0d:ef:
5e:6b:ee:d7:1e:a3:c2:9d:04:a8:4f:f5:d2:ea:2d:0e:f3:24:
52:ea:41:b9:b3:a0:23:8a:03:03:de:06:7a:70:a2:97:20:d6:
bd:cf:4c:85:02:57:ea:73:87:1f:d4:7e:9c:08:81:6c:ce:16:
c7:fe:b2:07:56:79:e1:55:a2:a2:af:88:90:44:a6:61:96:11:
76:2f:80:2f:a6:e1:a9:9a:40:80:7d:e5:17:30:38:d7:4f:0e:
e0:e0:e4:2b
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgISAZL24PRk7KTBT+LmjdeeuaisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMTA0MTExMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDE0ZDdjYWJkMDE0ZTI5YTAwMzZlZjQ5OWU0NjI2MzFkY2VhNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1DawwE9FjUdhslsjNsebFVywmEf
wDJRL+tYJdd7t6xazs5Pu6j5wpPb2GYeR1WHXPodytaG9Ku7oNJXsfkWQiS7zR0Q
hJIHd5KnKQg9hvg9cbCirJyOraoBrj/AWLbYoK7hHyGYlreNsIChdQKaA7Rvmg/J
9rsHJlsFm16jIF9YzgW2DD+ZpTzLtx0wpT8FYNIZK9MYKwAnO1+jzcji2sutQVJA
IH1r0TbkMlvhfgGC2xOYRWMe1+gvNOWPK3RnKiD9cp4imRtjTsAoTYgVRnDKHWfO
v4MMmM/GKIlIeP0WtwR2isgfvlo6AYBwkLz0KXQyEXvXlJ1J8Oa7yvR+MQIDAQAB
o4IC0jCCAs4wHQYDVR0OBBYEFBQU18q9AU4poANu9JnkYmMdzqQsMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRkJUWHlyMEJUaW1nQTI3MG1lUmlZeDNPcEN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCB0QQCAAEwgcoDBAFS
mLADBAJSmYgDBABSoxcDBAFZ1SwDBAFZ1TIDBAJZ1TgDBABZ1YEDBABZ1YQDBABZ
1YswDAMEAFnVkQMEAFnVkjAMAwQCWdWUAwQFWdWAAwQAWdWnAwQCWdWsMAwDBAJZ
1cQDBARZ1cAwDAMEAlnV5AMEBFnV4AMEAFnV+QMEA22wEAMEAm2wzAMEAW2w8gME
AbkxfgMEBMJpUAMEAdQmWAMEANWCmQMEANXSIwMEANXa0zAMAwQA2ZFBAwQA2ZFC
AwQD2ZFIMA0GCSqGSIb3DQEBCwUAA4IBAQBwx4u+4z3BWi/x/AqnKdmezcbcDjdW
M3BiQ+VJQmhyCBsJ7idckeDDX0yi6m6H6d3nu7QEAQ+a+lHi/BiIibjMSeTnmdxV
2AbPh2puDMc4nLWCBjkbzYCFRucURi64Vukte1aKhwmRS91Reg8ICdtv9PC7p9jm
Remba8uYKdgW4nu44e+7QuEiSJrgRDPz2lhVBziidSU0cq3WrfsVbgs9De9ea+7X
HqPCnQSoT/XS6i0O8yRS6kG5s6AjigMD3gZ6cKKXINa9z0yFAlfqc4cf1H6cCIFs
zhbH/rIHVnnhVaKir4iQRKZhlhF2L4AvpuGpmkCAfeUXMDjXTw7g4OQr
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:47 2025 by rpki-client