Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NwcrBpVs-l6doPnxyDE6-dxUSr8.roa
File: NwcrBpVs-l6doPnxyDE6-dxUSr8.roa (raw, json)
Hash identifier: C38BMR3ufVzN/QC1bzZthx9zcscAb9aZopyhuoqm660=
Subject key identifier: 37:07:2B:06:95:6C:FA:5E:9D:A0:F9:F1:C8:31:3A:F9:DC:54:4A:BF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01937200B9747190B5318FB29A26D62DA4E7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NwcrBpVs-l6doPnxyDE6-dxUSr8.roa
Signing time: Thu 28 Nov 2024 09:01:10 +0000
ROA not before: Thu 28 Nov 2024 09:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 17:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:00:b9:74:71:90:b5:31:8f:b2:9a:26:d6:2d:a4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 28 09:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37072b06956cfa5e9da0f9f1c8313af9dc544abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:e5:12:88:28:0b:35:81:89:b2:a1:13:ee:
b2:59:f3:1b:8a:a7:ec:e7:64:8a:1f:4a:14:5c:ea:
cc:1a:0f:26:2b:1a:e4:1a:f7:03:28:0b:22:2d:c9:
9d:77:24:34:cb:02:d3:02:af:fa:e3:3b:e2:58:ad:
3b:c0:3e:5e:37:f4:c2:09:ed:69:f0:2a:d4:3c:77:
e4:ec:c7:7b:25:a5:78:27:a3:55:96:65:b3:f0:72:
7c:41:7b:25:2b:41:af:83:51:5d:45:57:fe:03:f2:
a8:f0:fc:03:64:35:c8:3f:10:13:40:49:2d:c1:f7:
9f:14:e3:dc:71:b1:78:6f:ae:38:74:e9:0e:c3:f3:
d2:bc:b9:ee:71:03:8a:72:5e:4b:41:1e:01:ad:b8:
99:29:ca:92:4e:d9:36:0a:2b:8f:33:ca:cf:7c:96:
21:c9:c6:80:3f:65:79:10:29:ac:b4:70:75:78:2d:
a9:45:02:70:4a:7d:ea:c5:b6:5b:09:d9:bd:78:38:
3d:ee:ac:03:c3:e9:3a:a2:a2:df:fe:20:68:49:c2:
93:8a:4d:75:6f:f5:e1:9b:43:3a:4e:fa:e0:db:22:
03:7e:50:91:b6:41:6e:de:28:0a:95:5d:b4:d6:d1:
25:a4:41:d2:f3:96:8d:a0:bf:2c:45:fc:66:e7:1c:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:2B:06:95:6C:FA:5E:9D:A0:F9:F1:C8:31:3A:F9:DC:54:4A:BF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NwcrBpVs-l6doPnxyDE6-dxUSr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
12:fc:34:c1:c5:b4:b8:88:aa:e0:01:98:be:76:22:be:76:cd:
5a:33:0a:37:54:a6:ba:f4:49:1d:9c:2e:96:7a:56:12:cb:99:
bb:54:b5:d9:3c:68:6c:a4:32:b5:1a:9c:e4:8d:ed:21:fe:79:
3b:84:98:a1:f2:17:9c:bb:ab:56:dd:65:61:f4:cd:a8:a8:64:
15:88:0e:2b:a5:b3:71:2d:79:5a:2d:0c:a6:ad:62:a2:d7:7c:
7e:53:32:96:11:08:71:10:93:5f:a6:79:91:b4:88:c5:88:b6:
a3:2c:57:85:4f:4a:88:2a:23:c0:87:df:e0:df:d7:c1:c3:e9:
3b:a2:fc:64:74:0a:e4:fd:17:8f:b8:87:c3:c7:75:c6:11:47:
30:c8:95:5c:2c:09:37:cb:91:f5:e2:8c:8b:06:e1:f5:bd:c5:
2e:51:49:ef:91:77:6d:a2:a4:1c:6b:df:04:f0:21:3e:1c:64:
22:ac:b6:44:fc:72:e1:78:87:8b:a7:4c:89:8e:2e:1f:49:ba:
88:7f:84:8d:b1:ce:bc:f0:5a:c8:02:d3:d1:ca:82:2d:e8:2f:
b1:c1:a8:9e:28:e9:05:e2:68:4b:27:df:86:c2:2f:f2:4f:fb:
cd:72:9d:5a:1c:00:26:f9:2f:9d:db:fb:10:56:81:5e:1b:f0:
bf:0b:16:ba
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAZNyALl0cZC1MY+ymibWLaTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMTI4MDkwMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzA3MmIwNjk1NmNmYTVlOWRhMGY5ZjFjODMxM2FmOWRjNTQ0YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EXlEogoCzWBibKhE+6yWfMbiqfs
52SKH0oUXOrMGg8mKxrkGvcDKAsiLcmddyQ0ywLTAq/64zviWK07wD5eN/TCCe1p
8CrUPHfk7Md7JaV4J6NVlmWz8HJ8QXslK0Gvg1FdRVf+A/Ko8PwDZDXIPxATQEkt
wfefFOPccbF4b644dOkOw/PSvLnucQOKcl5LQR4BrbiZKcqSTtk2CiuPM8rPfJYh
ycaAP2V5ECmstHB1eC2pRQJwSn3qxbZbCdm9eDg97qwDw+k6oqLf/iBoScKTik11
b/Xhm0M6Tvrg2yIDflCRtkFu3igKlV201tElpEHS85aNoL8sRfxm5xx0CQIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFDcHKwaVbPpenaD58cgxOvncVEq/MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTndjckJwVnMtbDZkb1BueHlERTYtZHhVU3I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHhBggrBgEFBQcBBwEB/wSB0TCBzjCBywQCAAEwgcQDBABS
mAgDBAFSmLADBAJSmYgDBAFZ1SwDBAFZ1TIDBAJZ1TgDBABZ1YEDBABZ1YQDBABZ
1YswDAMEAFnVkQMEAFnVkjAMAwQCWdWUAwQFWdWAAwQAWdWiAwQAWdWnAwQCWdWs
MAwDBAJZ1cQDBARZ1cAwDAMEAlnV5AMEBFnV4AMEA22wEAMEAm2wzAMEAW2w8gME
AbkxfgMEBMJpUAMEAdQmWAMEAtXSNAMEANXa0zAMAwQA2ZFBAwQA2ZFCAwQD2ZFI
MA0GCSqGSIb3DQEBCwUAA4IBAQAS/DTBxbS4iKrgAZi+diK+ds1aMwo3VKa69Ekd
nC6WelYSy5m7VLXZPGhspDK1Gpzkje0h/nk7hJih8hecu6tW3WVh9M2oqGQViA4r
pbNxLXlaLQymrWKi13x+UzKWEQhxEJNfpnmRtIjFiLajLFeFT0qIKiPAh9/g39fB
w+k7ovxkdArk/RePuIfDx3XGEUcwyJVcLAk3y5H14oyLBuH1vcUuUUnvkXdtoqQc
a98E8CE+HGQirLZE/HLheIeLp0yJji4fSbqIf4SNsc688FrIAtPRyoIt6C+xwaie
KOkF4mhLJ9+Gwi/yT/vNcp1aHAAm+S+d2/sQVoFeG/C/Cxa6
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:22 2025 by rpki-client