Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_5ai3xIKm7jvWn_GyZ8Uk97SmQI.roa
File: _5ai3xIKm7jvWn_GyZ8Uk97SmQI.roa (raw, json)
Hash identifier: EZA9qHHjU/l3/JnfGgZrvSei2DfgEpjmO+rRWQRNoOk=
Subject key identifier: FF:96:A2:DF:12:0A:9B:B8:EF:5A:7F:C6:C9:9F:14:93:DE:D2:99:02
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01900133C398251353AC16C900855CC76970
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_5ai3xIKm7jvWn_GyZ8Uk97SmQI.roa
Signing time: Mon 10 Jun 2024 08:11:27 +0000
ROA not before: Mon 10 Jun 2024 08:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.252.27.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
82.152.12.0/24 maxlen: 24
82.152.105.0/24 maxlen: 24
82.152.140.0/24 maxlen: 24
82.152.142.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.34.0/24 maxlen: 24
82.153.35.0/24 maxlen: 24
82.153.134.0/24 maxlen: 24
82.153.135.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.159.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.202.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.210.58.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 15:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:33:c3:98:25:13:53:ac:16:c9:00:85:5c:c7:69:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 08:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff96a2df120a9bb8ef5a7fc6c99f1493ded29902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:93:21:fc:ed:49:a8:a3:42:c8:e1:0c:d8:
d4:d6:9f:4b:48:db:3a:a6:6b:9e:e0:d5:d3:50:43:
b3:42:73:75:fa:eb:6f:56:c6:9a:89:78:19:ce:d9:
ee:6e:dc:8b:00:30:da:07:e3:90:dc:99:a4:93:fe:
f5:00:e4:65:df:55:a4:0a:a5:ec:ea:09:1a:02:27:
46:b3:f9:99:6f:0d:6d:63:56:10:32:e5:18:42:f4:
45:67:68:8e:e8:6c:84:09:99:21:ed:69:b3:aa:22:
e0:25:0d:ef:a5:19:9d:af:ae:03:f2:3b:58:f2:40:
49:da:43:8b:53:b5:6f:35:ce:ac:1f:5b:85:61:d9:
59:71:28:83:1e:1b:c8:da:81:cb:f0:92:72:71:d0:
2b:cf:c3:9e:16:97:f3:88:e1:31:e5:30:43:b1:2e:
ad:90:77:0e:16:f6:2d:89:c6:a3:7e:16:06:24:dc:
2c:07:14:03:b5:6f:9c:b0:a7:24:45:3d:5d:35:a0:
68:2b:c8:d9:e3:30:4d:22:07:c9:c7:34:d2:71:29:
91:8d:22:48:7f:96:93:c5:ba:3e:a9:10:44:ea:36:
e7:e5:39:5d:61:b6:17:77:d7:35:ce:fe:a3:4c:f3:
79:e9:1e:c8:60:09:8a:5f:b2:38:d7:75:b4:67:fb:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:96:A2:DF:12:0A:9B:B8:EF:5A:7F:C6:C9:9F:14:93:DE:D2:99:02
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_5ai3xIKm7jvWn_GyZ8Uk97SmQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
81.168.50.0/24
82.152.12.0/24
82.152.105.0/24
82.152.140.0/24
82.152.142.0/24
82.152.176.0/23
82.153.34.0/23
82.153.134.0-82.153.139.255
82.153.159.0/24
82.153.201.0-82.153.202.255
82.153.205.0/24
82.163.15.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
109.176.202.0/24
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.210.58.0/24
213.218.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:a6:ff:d0:31:db:4d:07:d0:35:53:bd:d2:24:9e:ad:9d:64:
11:d7:03:6d:aa:1d:a0:90:da:3c:96:bb:ba:31:1c:87:c3:c7:
6b:ef:06:4b:86:12:bc:a3:8b:84:48:05:c0:ea:dd:6a:a9:26:
f0:76:00:9d:1d:db:ff:8f:09:04:78:31:38:87:b1:37:ee:ff:
d6:86:20:d1:b7:4a:c3:f9:a8:60:92:6a:5b:e1:e6:cd:39:91:
34:f5:16:01:0f:e4:c4:f2:49:49:48:07:92:69:a3:5b:c0:1f:
c1:36:f3:82:73:85:ac:a2:75:59:18:f7:f1:54:37:6b:42:d4:
7f:60:f7:d9:54:6a:d5:a8:fe:5c:91:31:87:53:56:79:73:c4:
51:f4:6b:b5:0a:ce:59:aa:54:9e:91:fd:77:f8:ac:f5:94:08:
4d:fc:e7:f2:af:31:78:83:88:4d:55:c0:02:0d:0e:b2:90:3d:
3f:8d:02:89:5e:12:0b:55:61:3f:b2:2c:9f:28:70:6d:ef:f5:
6b:fd:6b:36:11:22:fc:cf:8c:27:ca:4d:7a:91:d5:41:7a:2a:
17:44:53:11:37:c5:37:4d:dd:3f:3b:54:d8:8b:91:e9:60:cd:
c7:6c:02:e7:e0:0c:38:35:b6:8e:4e:4e:d1:5a:b1:40:2d:f7:
eb:0a:9f:7d
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAZABM8OYJRNTrBbJAIVcx2lwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNjEwMDgxMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjk2YTJkZjEyMGE5YmI4ZWY1YTdmYzZjOTlmMTQ5M2RlZDI5OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq6TIfztSaijQsjhDNjU1p9LSNs6
pmue4NXTUEOzQnN1+utvVsaaiXgZztnubtyLADDaB+OQ3Jmkk/71AORl31WkCqXs
6gkaAidGs/mZbw1tY1YQMuUYQvRFZ2iO6GyECZkh7WmzqiLgJQ3vpRmdr64D8jtY
8kBJ2kOLU7VvNc6sH1uFYdlZcSiDHhvI2oHL8JJycdArz8OeFpfziOEx5TBDsS6t
kHcOFvYticajfhYGJNwsBxQDtW+csKckRT1dNaBoK8jZ4zBNIgfJxzTScSmRjSJI
f5aTxbo+qRBE6jbn5TldYbYXd9c1zv6jTPN56R7IYAmKX7I413W0Z/uHswIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFP+Wot8SCpu471p/xsmfFJPe0pkCMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvXzVhaTN4SUttN2p2V25fR3laOFVrOTdTbVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYDBAAl
/BsDBABRqDIDBABSmAwDBABSmGkDBABSmIwDBABSmI4DBAFSmLADBAFSmSIwDAME
AVKZhgMEAlKZiAMEAFKZnzAMAwQAUpnJAwQAUpnKAwQAUpnNAwQAUqMPMAwDBAJZ
1ZQDBAVZ1YADBAJZ1awwDAMEAlnVxAMEBFnVwAMEA1nV6AMEA22wEAMEAG2wygME
Am2wzAMEAbkxfgMEBMJpUAMEAdQmWAMEANXSOgMEAdXa0jANBgkqhkiG9w0BAQsF
AAOCAQEAS6b/0DHbTQfQNVO90iSerZ1kEdcDbaodoJDaPJa7ujEch8PHa+8GS4YS
vKOLhEgFwOrdaqkm8HYAnR3b/48JBHgxOIexN+7/1oYg0bdKw/moYJJqW+HmzTmR
NPUWAQ/kxPJJSUgHkmmjW8AfwTbzgnOFrKJ1WRj38VQ3a0LUf2D32VRq1aj+XJEx
h1NWeXPEUfRrtQrOWapUnpH9d/is9ZQITfzn8q8xeIOITVXAAg0OspA9P40CiV4S
C1VhP7Isnyhwbe/1a/1rNhEi/M+MJ8pNepHVQXoqF0RTETfFN03dPztU2IuR6WDN
x2wC5+AMODW2jk5O0VqxQC336wqffQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:26:30 2025 by rpki-client