Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qv2-lhuOZcYmx6cTOS32hFLrrs0.roa
File: Qv2-lhuOZcYmx6cTOS32hFLrrs0.roa (raw, json)
Hash identifier: mGdqM4ku0JGHdKAtZgrLgNPevT/Tb0zCt9nHpeduMR0=
Subject key identifier: 42:FD:BE:96:1B:8E:65:C6:26:C7:A7:13:39:2D:F6:84:52:EB:AE:CD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01912887A90784A1E725DED482FE2C1AED50
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qv2-lhuOZcYmx6cTOS32hFLrrs0.roa
Signing time: Tue 06 Aug 2024 16:31:04 +0000
ROA not before: Tue 06 Aug 2024 16:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.163.15.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 12:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:87:a9:07:84:a1:e7:25:de:d4:82:fe:2c:1a:ed:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 6 16:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42fdbe961b8e65c626c7a713392df68452ebaecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:f6:67:66:16:d3:59:72:31:ae:75:27:69:
0b:39:68:db:19:1b:18:0b:1d:51:96:82:8c:79:18:
e2:92:10:1f:33:eb:8e:76:ad:88:e0:f6:0b:cc:a3:
cf:c4:3e:81:5c:17:0e:5a:66:ae:8d:f3:ef:64:61:
f7:38:a3:72:ed:b4:c2:6d:e3:eb:f9:8f:a8:f2:b6:
47:e3:06:fb:2b:ec:1b:70:5c:f9:02:e0:94:57:d8:
9f:28:ad:11:68:fb:5c:3d:82:52:01:1b:5d:4b:14:
40:a8:b3:fe:90:3d:79:ea:0a:0f:da:d2:ab:37:5d:
4e:f3:ba:40:45:c9:fb:a9:0c:ed:f4:9b:4b:d2:55:
46:d6:7f:96:28:71:e4:af:5c:25:d3:f0:e3:26:31:
de:22:34:e6:d3:62:84:3c:7e:39:9f:47:a4:07:71:
50:d4:16:a8:b9:41:44:d1:6c:00:d6:1f:a5:49:4d:
aa:98:b6:ab:61:70:27:b2:21:93:70:a8:78:02:d5:
66:c4:ac:bf:a4:4e:03:93:eb:db:b2:b6:b2:f4:16:
de:9a:bd:a0:db:ac:d3:8b:53:a2:bb:07:33:07:5b:
91:7e:63:64:9d:8b:39:16:ef:5b:31:73:7a:e0:e6:
58:a7:71:3b:36:49:7a:60:76:f3:9f:8f:f8:80:00:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FD:BE:96:1B:8E:65:C6:26:C7:A7:13:39:2D:F6:84:52:EB:AE:CD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qv2-lhuOZcYmx6cTOS32hFLrrs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.163.15.0/24
89.213.50.0/23
89.213.56.0/22
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
82:0e:5b:9c:10:72:f8:22:46:b9:55:0e:21:a2:fa:60:84:ac:
f1:e9:53:c6:7d:bd:ea:d1:bd:5e:39:41:4a:3b:da:b0:8f:ff:
ec:e9:07:5c:d7:47:d6:dc:4f:ce:7c:bb:81:a4:b3:12:63:d6:
2e:22:96:f5:d5:fe:c9:a1:92:4f:8d:64:2d:b6:23:fc:1c:61:
ae:66:cb:59:ee:b9:04:99:9d:8a:08:01:18:fa:68:04:ef:7f:
49:bc:8b:8a:97:d3:fe:40:54:5e:df:f4:ff:af:ff:91:86:4d:
a0:cc:12:00:10:d4:48:74:5f:6a:b5:4d:7c:20:22:d4:ef:41:
a1:6f:df:d0:cb:fa:91:b9:8e:f9:8e:26:cd:f1:01:70:42:84:
3d:f6:e4:c3:8f:60:ad:c5:71:a0:e2:e3:3c:95:7f:a2:19:44:
6a:6d:86:be:b0:6c:de:6d:48:49:f2:59:c7:e7:55:fd:8d:a5:
7e:40:50:6a:a6:4c:b2:ac:71:97:b6:2a:9a:15:b4:81:c3:85:
ac:39:c4:38:e8:db:19:24:e0:9a:81:cb:26:80:2e:bb:8a:63:
28:ad:3f:9e:06:1f:e4:4b:b0:fa:17:dc:2f:49:2a:8c:25:17:
ce:e1:dc:f6:48:72:44:3a:ad:e7:f7:a3:25:eb:e0:12:83:64:
8f:38:68:be
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZEoh6kHhKHnJd7Ugv4sGu1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwODA2MTYzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmZkYmU5NjFiOGU2NWM2MjZjN2E3MTMzOTJkZjY4NDUyZWJhZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PT2Z2YW01lyMa51J2kLOWjbGRsY
Cx1RloKMeRjikhAfM+uOdq2I4PYLzKPPxD6BXBcOWmaujfPvZGH3OKNy7bTCbePr
+Y+o8rZH4wb7K+wbcFz5AuCUV9ifKK0RaPtcPYJSARtdSxRAqLP+kD156goP2tKr
N11O87pARcn7qQzt9JtL0lVG1n+WKHHkr1wl0/DjJjHeIjTm02KEPH45n0ekB3FQ
1BaouUFE0WwA1h+lSU2qmLarYXAnsiGTcKh4AtVmxKy/pE4Dk+vbsray9Bbemr2g
26zTi1OiuwczB1uRfmNknYs5Fu9bMXN64OZYp3E7Nkl6YHbzn4/4gAD2QQIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFEL9vpYbjmXGJsenEzkt9oRS667NMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUXYyLWxodU9aY1lteDZjVE9TMzJoRkxycnMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAFS
mLADBAJSmYgDBABSow8DBAFZ1TIDBAJZ1TgDBABZ1ZEwDAMEAlnVlAMEBVnVgAME
AFnVpwMEAlnVrDAMAwQCWdXEAwQEWdXAMAwDBAJZ1eQDBARZ1eADBANtsBADBAJt
sMwDBAG5MX4DBATCaVADBAHUJlgDBADV2tMDBADZkUIDBAPZkUgwDQYJKoZIhvcN
AQELBQADggEBAIIOW5wQcvgiRrlVDiGi+mCErPHpU8Z9verRvV45QUo72rCP/+zp
B1zXR9bcT858u4GksxJj1i4ilvXV/smhkk+NZC22I/wcYa5my1nuuQSZnYoIARj6
aATvf0m8i4qX0/5AVF7f9P+v/5GGTaDMEgAQ1Eh0X2q1TXwgItTvQaFv39DL+pG5
jvmOJs3xAXBChD325MOPYK3FcaDi4zyVf6IZRGpthr6wbN5tSEnyWcfnVf2NpX5A
UGqmTLKscZe2KpoVtIHDhaw5xDjo2xkk4JqByyaALruKYyitP54GH+RLsPoX3C9J
KowlF87h3PZIckQ6ref3oyXr4BKDZI84aL4=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:15:29 2025 by rpki-client