Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QfZ4ErKwKnUqAKfvbaZyd-wZTqI.roa
File: QfZ4ErKwKnUqAKfvbaZyd-wZTqI.roa (raw, json)
Hash identifier: gJRpV5VIY5GKuzaBpgT1wcI0VXtq5LLzFf/ZZlSsUEQ=
Subject key identifier: 41:F6:78:12:B2:B0:2A:75:2A:00:A7:EF:6D:A6:72:77:EC:19:4E:A2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194B284FA616350C2569413FB9035553983
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QfZ4ErKwKnUqAKfvbaZyd-wZTqI.roa
Signing time: Wed 29 Jan 2025 14:44:06 +0000
ROA not before: Wed 29 Jan 2025 14:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.7.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.222.0/24 maxlen: 24
82.153.228.0/23 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.196.0/24 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.215.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 11:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:84:fa:61:63:50:c2:56:94:13:fb:90:35:55:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 29 14:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41f67812b2b02a752a00a7ef6da67277ec194ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:27:df:91:d4:8b:96:88:e0:6b:c3:d2:ae:
ff:36:fc:fe:e0:bb:8f:5e:51:af:d7:76:d4:38:c8:
50:21:29:7a:c7:2f:64:9d:62:ef:da:39:69:4a:68:
ea:29:73:92:15:48:49:cf:b6:ee:ad:00:25:58:e8:
aa:1e:51:e4:b1:6c:7c:14:45:39:04:be:bc:e6:b4:
dd:ed:55:08:ec:ab:8c:68:de:94:ad:93:fb:b2:62:
44:ed:72:0c:7e:a3:e5:5f:6b:4c:d3:1e:dc:18:84:
3f:0c:b6:75:ca:8c:7a:db:39:0c:f5:5e:1f:dc:27:
02:45:05:ee:09:bd:ad:df:cd:62:a5:97:4f:3d:bf:
c7:c4:1b:a2:8d:f1:d8:d9:32:2a:ee:18:40:b5:76:
c2:7a:4b:e1:c6:6c:7b:01:13:b5:5a:e2:00:eb:4c:
db:d4:78:5e:19:1e:31:f9:b1:12:1c:e7:08:60:3a:
f4:d3:ab:18:87:2f:fe:cb:70:30:27:d6:bf:e7:a9:
ae:24:ea:77:1b:15:60:12:fa:16:18:d0:50:ca:1d:
12:a7:79:7e:6f:b0:2c:69:1b:8c:2d:0b:7b:be:1f:
b0:53:6c:94:40:84:41:ac:58:e2:ef:93:d8:f6:45:
56:61:2d:e1:fb:6b:27:77:f3:b9:21:11:bc:26:d7:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F6:78:12:B2:B0:2A:75:2A:00:A7:EF:6D:A6:72:77:EC:19:4E:A2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QfZ4ErKwKnUqAKfvbaZyd-wZTqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.7.0-82.152.8.255
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.153.222.0/24
82.153.228.0/23
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.215.0/24
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
77:77:44:89:bd:1e:83:5e:5d:35:cf:28:7a:fa:dd:f9:ff:7a:
bb:c1:df:c3:4e:c4:af:70:d6:c0:72:d3:40:b4:50:7b:1c:95:
49:f2:97:28:d9:dc:e8:c7:96:5e:f2:7e:1b:b5:0d:d5:28:60:
e3:00:a1:9f:c5:4d:9b:25:af:ae:e2:b7:72:74:02:b5:dd:28:
53:83:54:34:cc:a8:04:74:38:45:91:e4:2b:7a:52:6a:9f:4f:
06:23:85:95:6a:0f:d0:d0:6d:8e:5f:e4:a7:26:00:e8:f5:ff:
68:23:38:c1:b7:2c:9d:e1:39:ac:c9:ef:6d:83:d2:e7:a0:2c:
b9:d5:33:4c:c1:32:0b:c6:38:68:32:91:55:b3:9e:62:bb:4c:
ef:e9:98:0c:19:90:44:83:ed:91:d9:10:9c:5c:78:94:3f:26:
b1:1a:41:10:a9:25:e4:b1:9f:bf:70:c4:2c:17:0c:a7:98:df:
6e:15:df:19:6f:9e:af:6b:10:e3:dc:3d:34:11:92:fa:d3:93:
2a:51:31:fb:da:23:2a:a0:6c:7d:00:57:8f:f4:bc:08:a3:e6:
b1:51:f9:63:58:4c:66:52:87:8f:58:04:6f:cb:0d:a5:a7:4b:
08:3d:a4:d1:12:63:19:e3:40:ab:c2:55:51:6c:93:ad:0e:72:
b1:0a:2b:a7
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgISAZSyhPphY1DCVpQT+5A1VTmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTI5MTQ0NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWY2NzgxMmIyYjAyYTc1MmEwMGE3ZWY2ZGE2NzI3N2VjMTk0ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSEn35HUi5aI4GvD0q7/Nvz+4LuP
XlGv13bUOMhQISl6xy9knWLv2jlpSmjqKXOSFUhJz7burQAlWOiqHlHksWx8FEU5
BL685rTd7VUI7KuMaN6UrZP7smJE7XIMfqPlX2tM0x7cGIQ/DLZ1yox62zkM9V4f
3CcCRQXuCb2t381ipZdPPb/HxBuijfHY2TIq7hhAtXbCekvhxmx7ARO1WuIA60zb
1HheGR4x+bESHOcIYDr006sYhy/+y3AwJ9a/56muJOp3GxVgEvoWGNBQyh0Sp3l+
b7AsaRuMLQt7vh+wU2yUQIRBrFji75PY9kVWYS3h+2snd/O5IRG8Jtc4NwIDAQAB
o4IDKTCCAyUwHQYDVR0OBBYEFEH2eBKysCp1KgCn722mcnfsGU6iMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUWZaNEVyS3dLblVxQUtmdmJhWnlkLXdaVHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPQYIKwYBBQUHAQcBAf8EggEsMIIBKDCCASQEAgABMIIB
HDAMAwQAUpgHAwQAUpgIAwQBUpiwAwQAUpkyAwQCUpmIAwQAUpneAwQBUpnkAwQA
UpnzAwQBWdUsAwQBWdUyAwQCWdU4AwQAWdWBAwQAWdWEAwQAWdWLAwQAWdWPMAwD
BABZ1ZEDBABZ1ZIwDAMEAlnVlAMEBVnVgAMEAFnVogMEAFnVpAMEAFnVpwMEAFnV
qTAMAwQAWdWrAwQEWdWgAwQAWdW1AwQAWdW/MAwDBAJZ1cQDBARZ1cADBABZ1dcw
DAMEAlnV5AMEBFnV4AMEA22wEAMEAm2wzAMEAW2w8gMEAbkxfgMEBMJpUAMEANQm
TwMEAdQmWAMEANWYKwMEAtXSNAMEANXa0zAMAwQA2ZFBAwQA2ZFCAwQD2ZFIMA0G
CSqGSIb3DQEBCwUAA4IBAQB3d0SJvR6DXl01zyh6+t35/3q7wd/DTsSvcNbActNA
tFB7HJVJ8pco2dzox5Ze8n4btQ3VKGDjAKGfxU2bJa+u4rdydAK13ShTg1Q0zKgE
dDhFkeQrelJqn08GI4WVag/Q0G2OX+SnJgDo9f9oIzjBtyyd4Tmsye9tg9LnoCy5
1TNMwTILxjhoMpFVs55iu0zv6ZgMGZBEg+2R2RCcXHiUPyaxGkEQqSXksZ+/cMQs
FwynmN9uFd8Zb56vaxDj3D00EZL605MqUTH72iMqoGx9AFeP9LwIo+axUfljWExm
UoePWARvyw2lp0sIPaTREmMZ40CrwlVRbJOtDnKxCiun
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:07:56 2025 by rpki-client