Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aYDBlvpIo2B02ZubZl0zSKrpvss.roa
File: aYDBlvpIo2B02ZubZl0zSKrpvss.roa (raw, json)
Hash identifier: dhTKHBPKgMqK5IFxRg7zlH+n3Ao0R1y1POqBiciMILU=
Subject key identifier: 69:80:C1:96:FA:48:A3:60:74:D9:9B:9B:66:5D:33:48:AA:E9:BE:CB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019184FD0FAAA876FFE7E714E4EE246816C5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aYDBlvpIo2B02ZubZl0zSKrpvss.roa
Signing time: Sat 24 Aug 2024 15:24:22 +0000
ROA not before: Sat 24 Aug 2024 15:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 16:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:84:fd:0f:aa:a8:76:ff:e7:e7:14:e4:ee:24:68:16:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 24 15:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6980c196fa48a36074d99b9b665d3348aae9becb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:cd:8f:00:7c:0b:03:da:ec:c3:46:2d:f1:
8d:23:db:fa:1f:fc:9e:36:63:16:ff:41:7f:ab:e3:
b2:d4:8e:98:2b:ee:7c:9a:96:55:50:b9:21:3f:18:
5e:e4:c4:c5:0f:70:e6:5b:8e:c6:4b:09:64:36:1f:
3d:da:74:b0:17:36:68:b4:34:0a:76:1f:13:61:c5:
10:e9:0a:84:6a:27:a2:2c:70:1b:a5:15:db:ba:3d:
8b:fe:37:8c:07:0a:12:8a:dc:46:17:43:d3:b8:98:
37:07:c2:29:98:0e:36:f4:54:4b:9e:ac:45:a6:53:
1f:c1:2d:d9:c8:f7:5a:99:fb:34:15:56:49:af:03:
4a:e7:a5:8d:62:1d:53:72:cc:5a:05:67:34:74:c1:
ef:e6:b1:38:d5:18:a3:52:05:74:9c:51:70:dd:19:
39:2d:23:cf:b3:9b:9b:c0:98:44:6f:e2:ab:89:7d:
e8:dc:38:76:d2:cc:2f:f3:66:d5:85:cb:85:8f:b1:
2b:43:19:f3:cc:76:59:75:f2:1d:93:07:9a:d9:8c:
73:07:40:5a:84:c2:54:b1:d3:64:a8:ab:c3:b9:8d:
1c:e1:17:e8:a0:e7:46:82:0c:a4:86:92:60:3e:b8:
37:d5:44:8d:6a:7d:d2:a9:90:c2:96:7e:9f:3a:62:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:80:C1:96:FA:48:A3:60:74:D9:9B:9B:66:5D:33:48:AA:E9:BE:CB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aYDBlvpIo2B02ZubZl0zSKrpvss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.50.0/23
89.213.56.0/22
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
08:94:b9:66:31:17:70:08:d0:c1:29:52:be:71:ca:73:c3:27:
68:db:e1:21:a7:f8:60:41:2f:9c:2d:4e:65:f4:bd:48:d5:1f:
0a:fb:54:59:56:c9:eb:07:08:f2:8a:e2:1d:6d:2f:07:f3:97:
35:2d:a5:84:6c:0a:0a:a3:a6:1e:95:b3:49:a4:30:da:23:df:
ba:de:9a:17:c6:63:17:b2:4a:fd:b9:d7:2d:38:01:71:89:2d:
86:17:d2:9f:49:e1:5b:9b:a4:48:10:59:9f:f6:4a:b5:7c:f4:
4e:9c:44:e3:1a:94:7f:1a:e0:4e:bc:06:07:57:01:8e:de:ce:
4c:15:78:58:01:a4:de:3e:42:f1:f8:bc:4e:d2:8b:62:47:8b:
8f:64:8f:fc:4a:e2:d1:93:cc:e8:48:29:ba:db:8d:cc:38:01:
41:c3:b7:74:d4:40:bf:ad:3d:43:8c:06:f6:bd:3f:fd:cb:8b:
d9:b7:e9:89:17:8a:4a:b2:cd:26:6f:71:9e:0e:84:07:78:58:
b8:94:a0:4d:19:f4:7e:30:ab:79:89:b6:da:e5:38:e2:0e:04:
d8:be:69:da:36:75:67:91:af:93:ff:f2:86:d1:32:a3:bc:90:
b2:22:2e:38:71:1a:3a:1f:a2:b2:02:17:b0:63:ab:43:f9:de:
e1:61:28:c0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAZGE/Q+qqHb/5+cU5O4kaBbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwODI0MTUyNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTgwYzE5NmZhNDhhMzYwNzRkOTliOWI2NjVkMzM0OGFhZTliZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbrNjwB8CwPa7MNGLfGNI9v6H/ye
NmMW/0F/q+Oy1I6YK+58mpZVULkhPxhe5MTFD3DmW47GSwlkNh892nSwFzZotDQK
dh8TYcUQ6QqEaieiLHAbpRXbuj2L/jeMBwoSitxGF0PTuJg3B8IpmA429FRLnqxF
plMfwS3ZyPdamfs0FVZJrwNK56WNYh1TcsxaBWc0dMHv5rE41RijUgV0nFFw3Rk5
LSPPs5ubwJhEb+KriX3o3Dh20swv82bVhcuFj7ErQxnzzHZZdfIdkwea2YxzB0Ba
hMJUsdNkqKvDuY0c4RfooOdGggykhpJgPrg31USNan3SqZDCln6fOmKDbQIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFGmAwZb6SKNgdNmbm2ZdM0iq6b7LMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYVlEQmx2cElvMkIwMlp1YlpsMHpTS3JwdnNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAFS
mLADBAJSmYgDBAFZ1TIDBAJZ1TgDBABZ1ZEwDAMEAlnVlAMEBVnVgAMEAFnVpwME
AlnVrDAMAwQCWdXEAwQEWdXAMAwDBAJZ1eQDBARZ1eADBANtsBADBAJtsMwDBAG5
MX4DBATCaVADBAHUJlgDBADV2tMDBADZkUIDBAPZkUgwDQYJKoZIhvcNAQELBQAD
ggEBAAiUuWYxF3AI0MEpUr5xynPDJ2jb4SGn+GBBL5wtTmX0vUjVHwr7VFlWyesH
CPKK4h1tLwfzlzUtpYRsCgqjph6Vs0mkMNoj37remhfGYxeySv251y04AXGJLYYX
0p9J4VubpEgQWZ/2SrV89E6cROMalH8a4E68BgdXAY7ezkwVeFgBpN4+QvH4vE7S
i2JHi49kj/xK4tGTzOhIKbrbjcw4AUHDt3TUQL+tPUOMBva9P/3Li9m36YkXikqy
zSZvcZ4OhAd4WLiUoE0Z9H4wq3mJttrlOOIOBNi+ado2dWeRr5P/8obRMqO8kLIi
LjhxGjoforICF7Bjq0P53uFhKMA=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:44 2025 by rpki-client