Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ev7mQDg7PqdwY8k7FhjtPg6YHVk.roa
File: ev7mQDg7PqdwY8k7FhjtPg6YHVk.roa (raw, json)
Hash identifier: 0dnm1TDvL2WTdE3RmRJes94TtTM18w41IbV3YvHiKAk=
Subject key identifier: 7A:FE:E6:40:38:3B:3E:A7:70:63:C9:3B:16:18:ED:3E:0E:98:1D:59
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195850EAF0334B9A29E77DBA86B41935F7B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ev7mQDg7PqdwY8k7FhjtPg6YHVk.roa
Signing time: Tue 11 Mar 2025 11:54:46 +0000
ROA not before: Tue 11 Mar 2025 11:54:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.168.126.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 15:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:0e:af:03:34:b9:a2:9e:77:db:a8:6b:41:93:5f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 11 11:54:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7afee640383b3ea77063c93b1618ed3e0e981d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:c3:6d:87:d8:65:fc:82:37:a2:9d:19:81:
3b:1f:a7:1a:5d:c2:38:fc:70:28:cb:6c:5c:9a:dd:
e3:5d:d2:1e:0e:5a:47:7c:bf:7f:12:31:f4:ad:a3:
d4:3c:05:25:f1:2d:e6:19:63:01:58:ae:8b:e9:54:
6d:35:70:7b:85:64:4c:4b:90:8a:86:68:55:f7:b1:
8b:ef:2e:0d:61:34:31:da:79:98:82:af:1f:92:ce:
7e:33:0e:a0:83:c6:1e:6a:77:c2:45:cb:b3:96:a8:
3c:98:45:cf:db:2e:74:d4:44:71:77:56:70:f5:a6:
b3:d8:ab:80:7b:89:90:6e:b0:44:8a:00:ad:eb:24:
de:35:a7:28:5c:2e:83:52:f4:93:22:91:27:d3:bf:
e4:b2:6b:5d:86:74:d6:0c:00:1b:f2:cd:6f:7d:06:
3d:ef:d5:ea:1f:11:98:6c:e6:14:30:57:8c:30:0f:
3c:3b:d5:ad:76:40:db:06:10:36:96:6f:65:fa:15:
57:4a:57:bc:a9:d2:28:81:a3:10:08:8f:28:e3:cf:
e6:96:83:c3:56:f2:60:a7:89:08:1b:d3:ee:74:ba:
51:4a:f9:c6:07:bb:32:06:8a:c3:87:ac:c6:49:b8:
17:26:fa:ca:c3:60:2a:a2:e8:3d:3a:fc:c7:a4:f0:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FE:E6:40:38:3B:3E:A7:70:63:C9:3B:16:18:ED:3E:0E:98:1D:59
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ev7mQDg7PqdwY8k7FhjtPg6YHVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.193.0/24
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.226.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
09:2b:af:55:cc:69:f0:29:30:c9:6d:8e:4b:00:a5:a7:23:26:
27:5e:6c:46:55:07:9a:bd:83:67:3e:58:b9:e8:1d:07:5d:4c:
eb:d9:b8:cd:54:4e:ef:35:1a:1c:a6:f7:c7:df:19:71:1c:3c:
e4:63:67:34:f5:b5:53:c3:76:7a:71:6c:60:38:f5:9f:7b:61:
6b:a5:75:ee:b3:64:d1:36:bf:fa:d4:5f:72:21:55:73:0b:17:
3e:68:53:a5:ae:5a:7e:70:d3:57:df:10:4b:8e:ce:9a:ae:e6:
2a:0a:7a:15:0d:5f:8b:04:f0:c7:18:6a:ad:79:c2:89:cf:15:
45:de:d2:6b:3f:7b:8c:8a:1a:bd:27:f7:1a:44:37:58:29:aa:
75:23:6d:00:0c:38:d3:90:69:df:23:cf:14:07:1c:fe:bf:3c:
99:85:36:3d:8e:e9:09:d7:8a:df:b6:5c:47:c7:10:e1:77:3c:
f0:11:e7:ea:60:1b:8d:79:93:5e:38:1b:0e:02:fd:bf:ca:4f:
d3:57:d4:6b:2e:07:d7:10:50:4d:08:ae:f9:d8:a4:fe:28:ce:
e9:de:9b:05:21:96:4c:e1:15:e0:72:92:90:01:32:b5:31:f0:
a3:78:72:5f:7e:66:79:90:19:1a:27:af:ec:3d:a1:ec:5b:96:
91:66:16:6a
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgISAZWFDq8DNLminnfbqGtBk197MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMzExMTE1NDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWZlZTY0MDM4M2IzZWE3NzA2M2M5M2IxNjE4ZWQzZTBlOTgxZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NXDbYfYZfyCN6KdGYE7H6caXcI4
/HAoy2xcmt3jXdIeDlpHfL9/EjH0raPUPAUl8S3mGWMBWK6L6VRtNXB7hWRMS5CK
hmhV97GL7y4NYTQx2nmYgq8fks5+Mw6gg8YeanfCRcuzlqg8mEXP2y501ERxd1Zw
9aaz2KuAe4mQbrBEigCt6yTeNacoXC6DUvSTIpEn07/ksmtdhnTWDAAb8s1vfQY9
79XqHxGYbOYUMFeMMA88O9WtdkDbBhA2lm9l+hVXSle8qdIogaMQCI8o48/mloPD
VvJgp4kIG9PudLpRSvnGB7syBorDh6zGSbgXJvrKw2Aqoug9OvzHpPDGQQIDAQAB
o4IDMzCCAy8wHQYDVR0OBBYEFHr+5kA4Oz6ncGPJOxYY7T4OmB1ZMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZXY3bVFEZzdQcWR3WThrN0ZoanRQZzZZSFZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRwYIKwYBBQUHAQcBAf8EggE2MIIBMjCCAS4EAgABMIIB
JgMEAFGofgMEAFKYCAMEAVKYsAMEAlKZiAMEAFKZ8wMEAVnVLAMEAVnVMgMEAlnV
OAMEAFnVgQMEAFnVhAMEAFnViwMEAFnVjzAMAwQAWdWRAwQAWdWSMAwDBAJZ1ZQD
BAVZ1YADBABZ1aIDBABZ1aQDBABZ1acDBABZ1akwDAMEAFnVqwMEBFnVoAMEAFnV
tQMEAFnVvzAMAwQCWdXEAwQEWdXAMAwDBAJZ1eQDBARZ1eADBANtsBADBABtsMED
BAJtsMwDBAFtsPIDBABtsPwDBAG5MX4DBAC5ZS8DBATCaVADBADUJk8DBAHUJlgD
BALVgoQDBADVmCsDBALV0jQDBADV2tMDBADV2uIDBALV2vQwDAMEANmRQQMEANmR
QgMEA9mRSDANBgkqhkiG9w0BAQsFAAOCAQEACSuvVcxp8CkwyW2OSwClpyMmJ15s
RlUHmr2DZz5YuegdB11M69m4zVRO7zUaHKb3x98ZcRw85GNnNPW1U8N2enFsYDj1
n3tha6V17rNk0Ta/+tRfciFVcwsXPmhTpa5afnDTV98QS47Omq7mKgp6FQ1fiwTw
xxhqrXnCic8VRd7Saz97jIoavSf3GkQ3WCmqdSNtAAw405Bp3yPPFAcc/r88mYU2
PY7pCdeK37ZcR8cQ4Xc88BHn6mAbjXmTXjgbDgL9v8pP01fUay4H1xBQTQiu+dik
/ijO6d6bBSGWTOEV4HKSkAEytTHwo3hyX35meZAZGiev7D2h7FuWkWYWag==
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:18:09 2025 by rpki-client