Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bfELksnFVzbJ8zp6WjaR_Nj4CPI.roa
File: bfELksnFVzbJ8zp6WjaR_Nj4CPI.roa (raw, json)
Hash identifier: oOlzaCRgycebf1UcerL3amW8ldjPtUO3DiyBAZHlSMc=
Subject key identifier: 6D:F1:0B:92:C9:C5:57:36:C9:F3:3A:7A:5A:36:91:FC:D8:F8:08:F2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193699853A95E6785A60686E72072F1B6A7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bfELksnFVzbJ8zp6WjaR_Nj4CPI.roa
Signing time: Tue 26 Nov 2024 17:50:10 +0000
ROA not before: Tue 26 Nov 2024 17:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.76.0/23 maxlen: 24
82.152.79.0/24 maxlen: 24
82.152.86.0/23 maxlen: 24
82.152.88.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.38.0/24 maxlen: 24
82.153.56.0/24 maxlen: 24
82.153.61.0/24 maxlen: 24
82.153.83.0/24 maxlen: 24
82.153.84.0/24 maxlen: 24
82.153.152.0/24 maxlen: 24
82.153.186.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.239.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
89.213.232.0/23 maxlen: 24
89.213.234.0/23 maxlen: 24
89.213.236.0/23 maxlen: 24
109.176.27.0/24 maxlen: 24
109.176.32.0/21 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.56.0/21 maxlen: 24
109.176.201.0/24 maxlen: 24
109.176.235.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.210.54.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:98:53:a9:5e:67:85:a6:06:86:e7:20:72:f1:b6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 26 17:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6df10b92c9c55736c9f33a7a5a3691fcd8f808f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:dd:1e:13:23:46:3d:6d:27:ee:50:21:f0:
b8:67:73:53:31:a5:2e:1a:4b:5f:31:83:c3:3a:5e:
c2:c1:57:77:48:d8:e1:a5:f3:b0:7f:c7:13:2e:5e:
c7:68:d4:16:aa:65:51:3a:6f:d6:97:08:17:0f:e0:
76:ac:c8:64:94:4b:9a:22:0c:2c:2b:d1:b7:47:7a:
84:f3:5b:9a:f3:3a:4d:fd:1d:cf:0d:0f:47:fd:6f:
de:b0:3f:37:7f:14:de:28:e3:03:b8:4d:0e:99:1d:
df:ab:7d:38:a1:b8:39:a5:3c:ff:c3:65:04:91:05:
3c:90:68:67:98:ca:c7:36:77:1e:31:24:30:25:5c:
ef:69:5f:fd:fd:69:5d:94:73:18:f3:3f:77:5d:86:
5e:71:20:7f:d0:a6:99:c5:84:d0:e0:08:8c:de:9b:
ee:ea:a8:f7:74:b9:b4:3d:5b:a7:6c:8c:a3:d1:49:
bb:42:f9:eb:ca:f6:aa:29:33:18:9a:2c:87:45:a8:
20:1a:d3:4a:31:78:0c:60:8b:e6:e7:27:99:11:68:
d5:82:f6:b4:d4:ba:7a:3b:89:99:0b:b9:8e:26:04:
c7:b2:ab:46:94:23:59:02:c7:72:ec:78:ab:25:99:
6f:1e:5f:07:b2:eb:cb:e8:b4:32:ab:65:d1:bd:01:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:0B:92:C9:C5:57:36:C9:F3:3A:7A:5A:36:91:FC:D8:F8:08:F2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bfELksnFVzbJ8zp6WjaR_Nj4CPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0-82.152.77.255
82.152.79.0/24
82.152.86.0-82.152.88.255
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.38.0/24
82.153.56.0/24
82.153.61.0/24
82.153.83.0-82.153.84.255
82.153.152.0/24
82.153.186.0/24
82.153.201.0/24
82.153.239.0/24
82.163.0.0/24
89.213.43.0/24
89.213.98.0/24
89.213.161.0/24
89.213.232.0-89.213.237.255
109.176.27.0/24
109.176.32.0/19
109.176.201.0/24
109.176.235.0/24
213.130.130.0/24
213.130.149.0/24
213.210.54.0/24
213.218.214.0/24
213.218.231.0/24
Signature Algorithm: sha256WithRSAEncryption
94:86:f4:0d:77:31:b0:64:00:16:62:60:3c:5a:09:93:61:ea:
9e:c3:3f:9e:d7:a5:a3:e1:e9:c8:66:49:98:14:ed:40:88:cc:
fd:7a:a0:7d:53:47:a9:fa:f8:df:a7:3c:f7:61:dc:af:0e:93:
80:92:4c:9d:dd:a6:14:0b:7a:42:a8:7c:50:5c:8f:be:4e:8e:
bf:0a:c5:15:de:8b:d0:db:22:4a:af:0b:4e:c5:3f:91:a1:24:
f3:1f:2f:17:d9:3d:0c:ea:04:77:b6:ec:d1:6b:04:2a:46:9f:
27:7c:e2:69:51:66:57:58:6e:85:fb:b8:3e:49:60:49:1c:43:
52:ad:2d:3e:10:83:37:84:3b:3e:f1:6c:0f:48:d7:d2:d1:70:
30:f9:83:61:d5:34:5a:de:27:33:8c:2e:6e:38:44:51:79:81:
99:72:ec:83:ab:dd:cc:53:cb:8a:fc:da:c8:3c:f5:36:fc:bd:
b9:8e:96:20:52:ae:ae:72:3f:78:f2:b7:51:60:20:49:0d:2f:
e7:38:a2:ce:a6:24:ed:9f:e3:15:1e:b2:9d:b3:9b:98:3a:8d:
4d:9b:4f:c4:64:41:c6:5a:a9:a0:ae:51:c6:6a:a5:ec:71:35:
23:a5:a7:6f:8e:40:fe:81:1c:b3:56:00:d1:c0:a2:bb:a5:e6:
fc:35:17:13
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISAZNpmFOpXmeFpgaG5yBy8banMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMTI2MTc1MDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGYxMGI5MmM5YzU1NzM2YzlmMzNhN2E1YTM2OTFmY2Q4ZjgwOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg7dHhMjRj1tJ+5QIfC4Z3NTMaUu
GktfMYPDOl7CwVd3SNjhpfOwf8cTLl7HaNQWqmVROm/WlwgXD+B2rMhklEuaIgws
K9G3R3qE81ua8zpN/R3PDQ9H/W/esD83fxTeKOMDuE0OmR3fq304obg5pTz/w2UE
kQU8kGhnmMrHNnceMSQwJVzvaV/9/WldlHMY8z93XYZecSB/0KaZxYTQ4AiM3pvu
6qj3dLm0PVunbIyj0Um7QvnryvaqKTMYmiyHRaggGtNKMXgMYIvm5yeZEWjVgva0
1Lp6O4mZC7mOJgTHsqtGlCNZAsdy7HirJZlvHl8HsuvL6LQyq2XRvQHjEwIDAQAB
o4IC6jCCAuYwHQYDVR0OBBYEFG3xC5LJxVc2yfM6elo2kfzY+AjyMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYmZFTGtzbkZWemJKOHpwNldqYVJfTmo0Q1BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH/BggrBgEFBQcBBwEB/wSB7zCB7DCB6QQCAAEwgeIwDAME
AFKYOQMEAFKYOgMEAFKYSTAMAwQAUphLAwQBUphMAwQAUphPMAwDBAFSmFYDBABS
mFgDBABSmG0DBABSmOIDBABSmPADBABSmPMDBABSmSYDBABSmTgDBABSmT0wDAME
AFKZUwMEAFKZVAMEAFKZmAMEAFKZugMEAFKZyQMEAFKZ7wMEAFKjAAMEAFnVKwME
AFnVYgMEAFnVoTAMAwQDWdXoAwQBWdXsAwQAbbAbAwQFbbAgAwQAbbDJAwQAbbDr
AwQA1YKCAwQA1YKVAwQA1dI2AwQA1drWAwQA1drnMA0GCSqGSIb3DQEBCwUAA4IB
AQCUhvQNdzGwZAAWYmA8WgmTYeqewz+e16Wj4enIZkmYFO1AiMz9eqB9U0ep+vjf
pzz3YdyvDpOAkkyd3aYUC3pCqHxQXI++To6/CsUV3ovQ2yJKrwtOxT+RoSTzHy8X
2T0M6gR3tuzRawQqRp8nfOJpUWZXWG6F+7g+SWBJHENSrS0+EIM3hDs+8WwPSNfS
0XAw+YNh1TRa3iczjC5uOERReYGZcuyDq93MU8uK/NrIPPU2/L25jpYgUq6ucj94
8rdRYCBJDS/nOKLOpiTtn+MVHrKds5uYOo1Nm0/EZEHGWqmgrlHGaqXscTUjpadv
jkD+gRyzVgDRwKK7peb8NRcT
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:03:58 2025 by rpki-client