Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eoabNxkzk-cILBgw6rdkOMMgzMs.roa
File: eoabNxkzk-cILBgw6rdkOMMgzMs.roa (raw, json)
Hash identifier: /WEhNCEJKTVaw3RHGiPcSLd+uei/2kSJInP5DI/BwJs=
Subject key identifier: 7A:86:9B:37:19:33:93:E7:08:2C:18:30:EA:B7:64:38:C3:20:CC:CB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01919E137D950B25D3B5E1368C3FBFB52F16
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eoabNxkzk-cILBgw6rdkOMMgzMs.roa
Signing time: Thu 29 Aug 2024 12:19:22 +0000
ROA not before: Thu 29 Aug 2024 12:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
89.213.248.0/24 maxlen: 24
89.213.249.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.16.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
217.145.73.0/24 maxlen: 24
217.145.74.0/24 maxlen: 24
217.145.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 12:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:13:7d:95:0b:25:d3:b5:e1:36:8c:3f:bf:b5:2f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 29 12:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a869b37193393e7082c1830eab76438c320cccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:21:19:13:6f:46:39:4b:66:35:a3:1b:7d:
5c:cf:23:76:13:83:e7:ac:9d:00:ba:5a:8c:2e:41:
da:bf:e7:e0:81:b3:72:48:7e:05:66:cb:03:68:c3:
40:b3:7a:88:97:07:02:4c:c3:c9:f6:c9:c5:ec:ca:
e1:d9:8b:e5:79:ba:a3:da:e1:31:73:a7:cc:53:4e:
3f:01:66:25:fe:e8:84:76:ea:d6:ff:db:cc:12:9a:
57:27:b4:ec:17:07:78:9b:98:fc:d7:5d:2d:9e:bf:
b2:1d:b3:8e:70:49:4b:fe:da:55:ac:3b:a0:dd:cc:
24:01:21:d2:ff:fd:43:89:98:3e:48:47:4a:e5:12:
69:c6:33:25:48:a7:4b:5d:e2:9e:e1:13:dc:09:d1:
4f:9f:e1:5a:8c:89:bd:47:d3:4a:cf:b1:19:e1:d1:
51:29:1e:94:1c:3b:6d:e4:0d:91:f4:63:78:5f:68:
40:9b:f8:79:e3:a6:cd:ed:46:42:f0:08:b4:c2:ed:
65:58:69:74:4f:97:0d:e4:d5:f7:b3:1a:8c:8e:27:
dc:76:38:24:61:a6:a7:3f:14:c3:98:77:4c:2f:e3:
b2:de:32:1c:d1:30:17:cf:be:d3:96:a8:d4:da:98:
8b:32:70:70:5d:cc:8e:7f:99:bc:f7:f9:c0:e1:62:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:9B:37:19:33:93:E7:08:2C:18:30:EA:B7:64:38:C3:20:CC:CB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eoabNxkzk-cILBgw6rdkOMMgzMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
89.213.248.0/23
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
40:85:ab:12:c2:47:b9:fe:06:a0:12:64:a7:8f:66:88:42:f4:
cb:35:65:95:ec:86:ce:f5:d4:0e:1c:60:b7:a9:9f:c0:24:f6:
b0:f0:2a:48:04:17:83:44:38:ab:0d:6b:37:63:42:0c:13:0e:
cc:0f:1c:af:89:85:fd:1c:3b:5d:ff:cf:71:c2:69:9f:f3:db:
99:d1:da:9f:05:81:07:7d:61:3d:94:fb:c7:30:48:af:47:eb:
8c:77:c0:42:f1:b1:53:6b:96:af:ef:93:a0:c4:15:c1:78:cd:
b8:22:d4:f6:52:53:d3:4f:0d:dc:e3:f7:24:53:66:de:a8:ae:
08:a5:da:d8:ec:67:85:0a:bd:2b:c4:6a:5c:d3:f3:fd:51:60:
83:98:f4:17:3a:5c:65:f8:2b:78:cf:fe:b8:d5:31:e3:7e:f1:
38:34:81:17:52:d0:24:8a:b6:cd:86:fd:68:35:c6:b2:1f:15:
f4:f3:87:10:b6:22:a5:97:cb:bd:cb:f9:51:21:e8:9e:d0:96:
45:fe:88:98:40:9a:fd:08:0e:eb:be:79:25:97:04:c3:7a:7c:
a5:61:4b:52:67:f2:60:31:75:f4:70:79:1d:cd:c5:cc:a3:c8:
85:40:97:be:88:49:21:63:c9:6d:1c:19:e8:8e:c4:f1:01:2f:
81:5e:08:0d
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAZGeE32VCyXTteE2jD+/tS8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwODI5MTIxOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTg2OWIzNzE5MzM5M2U3MDgyYzE4MzBlYWI3NjQzOGMzMjBjY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslQhGRNvRjlLZjWjG31czyN2E4Pn
rJ0AulqMLkHav+fggbNySH4FZssDaMNAs3qIlwcCTMPJ9snF7Mrh2Yvlebqj2uEx
c6fMU04/AWYl/uiEdurW/9vMEppXJ7TsFwd4m5j8110tnr+yHbOOcElL/tpVrDug
3cwkASHS//1DiZg+SEdK5RJpxjMlSKdLXeKe4RPcCdFPn+FajIm9R9NKz7EZ4dFR
KR6UHDtt5A2R9GN4X2hAm/h546bN7UZC8Ai0wu1lWGl0T5cN5NX3sxqMjifcdjgk
YaanPxTDmHdML+Oy3jIc0TAXz77TlqjU2piLMnBwXcyOf5m89/nA4WLixQIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFHqGmzcZM5PnCCwYMOq3ZDjDIMzLMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZW9hYk54a3prLWNJTEJndzZyZGtPTU1nek1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAFS
mLADBAJSmYgDBAFZ1TIDBAJZ1TgDBABZ1YEDBABZ1ZEwDAMEAlnVlAMEBVnVgAME
AFnVpwMEAlnVrDAMAwQCWdXEAwQEWdXAMAwDBAJZ1eQDBARZ1eADBAFZ1fgDBANt
sBADBAJtsMwDBAG5MX4DBATCaVADBAHUJlgDBADV2tMDBADZkUIDBAPZkUgwDQYJ
KoZIhvcNAQELBQADggEBAECFqxLCR7n+BqASZKePZohC9Ms1ZZXshs711A4cYLep
n8Ak9rDwKkgEF4NEOKsNazdjQgwTDswPHK+Jhf0cO13/z3HCaZ/z25nR2p8FgQd9
YT2U+8cwSK9H64x3wELxsVNrlq/vk6DEFcF4zbgi1PZSU9NPDdzj9yRTZt6orgil
2tjsZ4UKvSvEalzT8/1RYIOY9Bc6XGX4K3jP/rjVMeN+8Tg0gRdS0CSKts2G/Wg1
xrIfFfTzhxC2IqWXy73L+VEh6J7QlkX+iJhAmv0IDuu+eSWXBMN6fKVhS1Jn8mAx
dfRweR3NxcyjyIVAl76ISSFjyW0cGeiOxPEBL4FeCA0=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:46 2025 by rpki-client