Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OqNIZXUSKyjaI1UlS1IIYKq8SlA.roa
File: OqNIZXUSKyjaI1UlS1IIYKq8SlA.roa (raw, json)
Hash identifier: jQLK2kNbCGfdACF3KyJfOpyzRaVMODkFWGCFNwajhh4=
Subject key identifier: 3A:A3:48:65:75:12:2B:28:DA:23:55:25:4B:52:08:60:AA:BC:4A:50
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191B35F74B07CE29A13787A7D80BCE11200
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OqNIZXUSKyjaI1UlS1IIYKq8SlA.roa
Signing time: Mon 02 Sep 2024 15:34:23 +0000
ROA not before: Mon 02 Sep 2024 15:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.152.178.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.23.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.138.0/24 maxlen: 24
213.210.58.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
217.145.76.0/24 maxlen: 24
217.145.78.0/24 maxlen: 24
217.145.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 11:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:5f:74:b0:7c:e2:9a:13:78:7a:7d:80:bc:e1:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 2 15:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aa3486575122b28da2355254b520860aabc4a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:ca:60:85:1c:8e:30:d9:c3:0e:cb:34:d9:
fb:ce:39:b4:28:78:d3:66:eb:56:10:71:e9:8e:61:
14:5b:18:2b:8a:0c:fb:a1:24:43:15:92:0e:cf:32:
ab:8c:25:87:02:65:c1:17:92:00:ec:16:9d:89:c4:
29:a9:03:9a:72:c3:2c:a1:58:59:cd:08:99:32:df:
ed:48:e9:1f:74:27:e3:8c:31:f3:7c:3f:2d:0a:4d:
4f:9a:3f:a8:30:f2:70:95:56:6d:37:70:ab:b9:2f:
f1:35:74:09:85:8a:a4:17:fb:8d:2e:be:f0:7e:3e:
99:14:70:9a:8a:be:b6:b2:dd:c4:73:ac:e6:82:14:
18:0c:16:66:4a:73:16:70:0b:eb:70:2b:93:70:53:
12:91:da:63:e3:b3:75:d1:8a:56:1e:06:da:b7:cc:
35:86:af:2e:be:b9:aa:eb:84:b3:e3:8b:c9:91:10:
a1:99:2f:53:17:13:5c:84:78:18:f3:ed:b4:ac:e1:
51:40:88:3c:61:e3:95:c3:37:42:08:c7:38:9f:10:
53:ad:f0:de:fe:59:ed:25:46:c8:19:7a:85:5e:4b:
27:2d:96:6a:62:fd:b9:61:9f:33:89:10:f7:72:5b:
37:f8:ab:5d:c1:9e:5a:6b:c1:ba:2e:6f:2f:0e:66:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A3:48:65:75:12:2B:28:DA:23:55:25:4B:52:08:60:AA:BC:4A:50
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OqNIZXUSKyjaI1UlS1IIYKq8SlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0-82.152.178.255
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.130.138.0/24
213.210.58.0/24
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
03:8a:87:a0:eb:d4:9c:61:7e:66:3e:2c:17:82:25:e2:21:d6:
e6:d9:08:c7:eb:bb:8c:7d:d7:92:5b:e5:ff:94:81:41:d2:94:
d4:97:10:09:fb:25:7f:ea:ec:84:e1:af:14:86:d8:36:9d:17:
a9:db:ff:9b:07:12:9e:62:8d:6d:34:78:d4:02:f2:f8:aa:2e:
4b:ff:22:8d:2d:25:01:77:95:75:47:0f:5f:09:a3:f3:50:37:
53:d9:12:50:cd:e9:6f:38:9f:ea:5d:6a:b2:d7:be:3d:e5:0a:
1c:1e:9c:68:e6:e3:46:15:c0:c7:60:8f:da:4e:4c:d0:c1:90:
6a:4e:59:82:09:73:d1:86:f7:be:a7:a3:80:ad:5c:a4:54:59:
8b:7f:b4:36:e8:fa:83:8b:4a:1e:ba:b5:bf:bb:78:1b:d0:e9:
9f:2a:d6:1e:41:87:ec:03:eb:77:8a:d4:34:ed:19:9e:18:1d:
d6:74:19:06:51:7f:5c:21:cf:f6:80:a9:5e:cb:5c:94:02:70:
e7:f1:fe:1a:18:0c:e1:b2:42:68:35:9f:8a:e5:ed:1d:ff:65:
7c:30:ee:5e:26:47:01:b8:9c:47:55:71:12:84:64:3d:b0:e1:
57:ac:e0:74:2b:22:bd:87:92:d9:6d:bb:3d:28:e6:03:7b:6d:
4f:29:77:48
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAZGzX3SwfOKaE3h6fYC84RIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwOTAyMTUzNDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWEzNDg2NTc1MTIyYjI4ZGEyMzU1MjU0YjUyMDg2MGFhYmM0YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhTKYIUcjjDZww7LNNn7zjm0KHjT
ZutWEHHpjmEUWxgrigz7oSRDFZIOzzKrjCWHAmXBF5IA7BadicQpqQOacsMsoVhZ
zQiZMt/tSOkfdCfjjDHzfD8tCk1Pmj+oMPJwlVZtN3CruS/xNXQJhYqkF/uNLr7w
fj6ZFHCair62st3Ec6zmghQYDBZmSnMWcAvrcCuTcFMSkdpj47N10YpWHgbat8w1
hq8uvrmq64Sz44vJkRChmS9TFxNchHgY8+20rOFRQIg8YeOVwzdCCMc4nxBTrfDe
/lntJUbIGXqFXksnLZZqYv25YZ8ziRD3cls3+KtdwZ5aa8G6Lm8vDmZTowIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFDqjSGV1Eiso2iNVJUtSCGCqvEpQMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvT3FOSVpYVVNLeWphSTFVbFMxSUlZS3E4U2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHVBggrBgEFBQcBBwEB/wSBxTCBwjCBvwQCAAEwgbgwDAME
BFKYsAMEAFKYsgMEAlKZiAMEAFKZ8wMEAVnVLAMEAVnVMgMEAlnVOAMEAFnVgQME
AFnVkTAMAwQCWdWUAwQFWdWAAwQAWdWnAwQCWdWsMAwDBAJZ1cQDBARZ1cAwDAME
AlnV5AMEBFnV4AMEA22wEAMEAm2wzAMEAW2w8gMEAbkxfgMEBMJpUAMEAdQmWAME
ANWCigMEANXSOgMEANXa0zAMAwQA2ZFBAwQA2ZFCAwQD2ZFIMA0GCSqGSIb3DQEB
CwUAA4IBAQADioeg69ScYX5mPiwXgiXiIdbm2QjH67uMfdeSW+X/lIFB0pTUlxAJ
+yV/6uyE4a8Uhtg2nRep2/+bBxKeYo1tNHjUAvL4qi5L/yKNLSUBd5V1Rw9fCaPz
UDdT2RJQzelvOJ/qXWqy17495QocHpxo5uNGFcDHYI/aTkzQwZBqTlmCCXPRhve+
p6OArVykVFmLf7Q26PqDi0oeurW/u3gb0OmfKtYeQYfsA+t3itQ07RmeGB3WdBkG
UX9cIc/2gKley1yUAnDn8f4aGAzhskJoNZ+K5e0d/2V8MO5eJkcBuJxHVXEShGQ9
sOFXrOB0KyK9h5LZbbs9KOYDe21PKXdI
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:03:32 2025 by rpki-client