Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OPPKmDNBwmMJgt4F5Xs5U8nORrA.roa
File: OPPKmDNBwmMJgt4F5Xs5U8nORrA.roa (raw, json)
Hash identifier: 5I2dqsPMG10EGyAg54TyN7CwG08evj7at3VMcQwwO+Y=
Subject key identifier: 38:F3:CA:98:33:41:C2:63:09:82:DE:05:E5:7B:39:53:C9:CE:46:B0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01923DF748FB1B80A462C8E64DCDB152482C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OPPKmDNBwmMJgt4F5Xs5U8nORrA.roa
Signing time: Sun 29 Sep 2024 13:27:49 +0000
ROA not before: Sun 29 Sep 2024 13:27:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 81.168.120.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.248.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.153.34.0/24 maxlen: 24
82.153.37.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
89.213.4.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.190.0/24 maxlen: 24
89.213.196.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
185.49.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 13:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3d:f7:48:fb:1b:80:a4:62:c8:e6:4d:cd:b1:52:48:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 29 13:27:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38f3ca983341c2630982de05e57b3953c9ce46b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:ab:91:37:d9:b3:79:14:e1:89:2c:7f:eb:
97:3e:b9:24:91:c1:24:e9:43:da:3f:c2:36:ee:4d:
ae:f2:b2:cf:de:f7:b0:48:98:08:df:f8:41:29:5d:
21:b8:af:3f:3c:90:1f:71:45:28:1f:02:47:b2:f1:
31:09:8f:3d:23:95:b4:aa:bf:c5:5f:ff:aa:ab:77:
5e:19:97:8e:1d:64:d2:57:4b:14:3c:e7:b3:3f:36:
87:b9:ed:7b:43:37:ab:8b:44:e4:79:52:56:60:4c:
ae:fc:49:f9:99:32:f3:2a:c0:2e:c2:ff:b5:91:1a:
a4:1c:c7:3b:60:4d:f3:c8:14:b3:01:3a:e1:77:f9:
cc:7d:fc:7e:c1:02:00:03:ef:48:82:78:d1:63:a5:
8e:06:a6:d8:ee:76:08:6e:38:7e:18:aa:0e:2f:29:
be:61:ac:2b:ae:79:ac:91:4a:22:b1:35:95:5b:3b:
e4:32:b4:df:80:dc:9f:fe:0b:2d:da:c4:9c:87:07:
47:81:7c:41:6f:59:ac:66:6e:d7:f7:00:a7:a9:9f:
03:7c:51:63:51:94:17:1f:34:e4:f0:26:60:86:b9:
2e:da:7c:36:fd:f8:d5:9c:e0:3a:78:24:c8:be:6a:
d7:4b:85:d4:bc:3f:f9:63:32:6f:18:29:d7:ab:77:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:CA:98:33:41:C2:63:09:82:DE:05:E5:7B:39:53:C9:CE:46:B0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OPPKmDNBwmMJgt4F5Xs5U8nORrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.120.0/24
82.152.8.0/24
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.34.0/24
82.153.37.0/24
82.153.69.0/24
82.153.72.0/24
82.153.79.0/24
82.153.132.0/24
82.153.224.0/24
89.213.4.0/24
89.213.7.0/24
89.213.130.0/24
89.213.190.0/24
89.213.196.0/24
109.176.247.0/24
109.176.251.0/24
185.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:26:c2:8e:72:74:00:05:bb:18:68:f9:a4:a5:db:ea:7f:96:
67:3f:d5:8f:63:2d:3d:38:3f:03:93:27:ff:bb:94:0b:cc:5d:
ae:bb:05:35:93:38:6b:c3:64:66:3b:ed:23:8d:7b:19:7c:aa:
6f:ee:bc:a1:b3:f9:aa:19:af:40:b8:e7:7b:9d:c2:67:36:b9:
ba:5a:5c:ed:bf:34:4d:2b:7c:a9:b2:89:f3:c6:8d:c0:b4:6b:
f7:39:1f:be:e3:80:53:db:5e:b9:b5:97:9e:f2:30:32:29:72:
6e:4f:d6:dd:d0:c0:d8:01:16:53:db:ab:94:61:f8:85:8e:e0:
64:bd:6b:d3:dd:68:c6:c3:5f:db:9d:17:5d:4d:4b:64:c9:e9:
ee:48:bf:04:e4:b8:52:14:6c:f0:c5:a1:79:49:27:0c:d5:76:
d9:37:67:bd:5c:97:8e:73:6b:fd:4b:da:09:84:7d:2f:85:5e:
9c:26:84:5b:bb:74:b5:0d:a9:3f:61:56:74:2f:68:20:9f:c6:
db:fc:34:7d:4f:3a:07:f6:0b:b4:3a:c9:45:ad:b0:1d:c9:4e:
60:29:7b:53:b9:b8:09:ab:04:ee:5e:6c:22:56:59:92:d8:d2:
2d:7b:5f:0a:b3:b7:34:8d:d6:24:4a:63:2f:c4:05:bf:7b:d4:
d4:a1:c1:13
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAZI990j7G4CkYsjmTc2xUkgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwOTI5MTMyNzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGYzY2E5ODMzNDFjMjYzMDk4MmRlMDVlNTdiMzk1M2M5Y2U0NmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37mrkTfZs3kU4Yksf+uXPrkkkcEk
6UPaP8I27k2u8rLP3vewSJgI3/hBKV0huK8/PJAfcUUoHwJHsvExCY89I5W0qr/F
X/+qq3deGZeOHWTSV0sUPOezPzaHue17Qzeri0TkeVJWYEyu/En5mTLzKsAuwv+1
kRqkHMc7YE3zyBSzATrhd/nMffx+wQIAA+9IgnjRY6WOBqbY7nYIbjh+GKoOLym+
YawrrnmskUoisTWVWzvkMrTfgNyf/gst2sSchwdHgXxBb1msZm7X9wCnqZ8DfFFj
UZQXHzTk8CZghrku2nw2/fjVnOA6eCTIvmrXS4XUvD/5YzJvGCnXq3fIMwIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFDjzypgzQcJjCYLeBeV7OVPJzkawMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvT1BQS21ETkJ3bU1KZ3Q0RjVYczVVOG5PUnJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQAUah4
AwQAUpgIAwQAUpj4AwQAUpj7AwQAUpj+AwQAUpkiAwQAUpklAwQAUplFAwQAUplI
AwQAUplPAwQAUpmEAwQAUpngAwQAWdUEAwQAWdUHAwQAWdWCAwQAWdW+AwQAWdXE
AwQAbbD3AwQAbbD7AwQAuTF8MA0GCSqGSIb3DQEBCwUAA4IBAQBNJsKOcnQABbsY
aPmkpdvqf5ZnP9WPYy09OD8Dkyf/u5QLzF2uuwU1kzhrw2RmO+0jjXsZfKpv7ryh
s/mqGa9AuOd7ncJnNrm6WlztvzRNK3ypsonzxo3AtGv3OR++44BT2165tZee8jAy
KXJuT9bd0MDYARZT26uUYfiFjuBkvWvT3WjGw1/bnRddTUtkyenuSL8E5LhSFGzw
xaF5SScM1XbZN2e9XJeOc2v9S9oJhH0vhV6cJoRbu3S1Dak/YVZ0L2ggn8bb/DR9
TzoH9gu0OslFrbAdyU5gKXtTubgJqwTuXmwiVlmS2NIte18Ks7c0jdYkSmMvxAW/
e9TUocET
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:10:56 2025 by rpki-client