Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j8Oo8WTfgtfD-1nYQa5e0R3zInU.roa
File: j8Oo8WTfgtfD-1nYQa5e0R3zInU.roa (raw, json)
Hash identifier: c9bG7TzE16Ysp8+mhFxnkNT4hoGGuOuKt5SwIUEr1Tk=
Subject key identifier: 8F:C3:A8:F1:64:DF:82:D7:C3:FB:59:D8:41:AE:5E:D1:1D:F3:22:75
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190FA7EFDF6682DBF6E144728C68DA3CBAD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j8Oo8WTfgtfD-1nYQa5e0R3zInU.roa
Signing time: Sun 28 Jul 2024 17:59:04 +0000
ROA not before: Sun 28 Jul 2024 17:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.76.0/22 maxlen: 24
194.105.80.0/20 maxlen: 20
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 13:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:7e:fd:f6:68:2d:bf:6e:14:47:28:c6:8d:a3:cb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 28 17:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fc3a8f164df82d7c3fb59d841ae5ed11df32275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:f2:79:41:68:15:2d:04:90:33:71:17:9e:
6c:1f:9e:f8:e5:77:2b:32:eb:f4:0c:8c:0f:09:04:
34:35:8b:00:1e:4c:24:4c:71:c4:ea:e6:84:4b:e4:
37:23:1c:7e:c1:6a:e1:d7:cd:2d:db:c6:d6:bc:87:
df:85:06:0c:75:b2:bf:f9:0a:4f:f1:a7:99:90:4e:
e9:a9:5e:ae:d2:4e:95:8e:69:4d:a6:b3:0d:6f:ab:
90:12:c3:2c:b1:80:a1:cd:f2:c4:84:5e:a2:7a:4d:
ad:c4:29:a6:9f:32:9e:a4:a0:b2:e4:8c:51:ad:65:
05:e1:7b:ba:8d:23:5f:33:f3:4b:ac:bd:d7:ed:32:
b7:49:51:8b:27:ca:d4:f4:8a:88:56:36:eb:f6:fc:
5d:f2:e3:2d:1d:bb:af:fc:a3:3b:a2:e2:3e:48:59:
0f:7a:24:ad:b1:29:f6:a7:8e:10:0a:40:6b:35:56:
99:88:0c:0e:80:93:04:54:ef:b5:1e:bb:e8:16:ec:
07:3c:4e:40:bb:75:4a:10:2b:96:b1:27:67:9b:68:
89:35:77:26:84:05:70:1b:43:e9:05:a8:2f:da:26:
09:9a:b4:78:f2:c7:d4:8d:b5:c6:5d:64:c5:f0:4d:
e4:a7:b5:92:e0:67:81:95:1b:38:b6:b8:be:e6:e1:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:A8:F1:64:DF:82:D7:C3:FB:59:D8:41:AE:5E:D1:1D:F3:22:75
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j8Oo8WTfgtfD-1nYQa5e0R3zInU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.153.243.0/24
89.213.50.0/23
89.213.56.0/22
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
185.49.126.0/23
194.105.76.0-194.105.95.255
212.38.88.0/23
213.218.211.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
32:c9:81:f5:8e:9d:5b:24:33:3f:62:a4:2c:10:a0:61:7c:95:
50:fa:55:f4:40:b0:3d:5d:eb:9b:ef:57:a3:01:92:c7:5f:74:
d7:7d:63:2f:0b:83:1a:bb:8f:65:d6:8a:01:a3:88:e4:6e:f4:
9e:7f:8f:a4:34:c6:29:3d:1f:4c:aa:37:d0:30:0a:f3:40:a4:
bd:44:b2:d1:17:86:f0:da:67:8e:a8:88:27:12:11:b2:d3:c9:
d7:74:57:f8:26:a1:d5:9d:4d:55:99:b0:13:36:91:8e:5b:b1:
35:31:27:8c:31:5c:9d:32:d3:90:63:92:d8:3b:93:17:0b:f4:
d8:f4:c3:a9:a1:7c:93:9d:c8:d3:69:e3:f1:df:02:cb:86:29:
84:bd:9b:80:6a:40:09:61:5c:21:2a:80:2b:fc:6f:c7:d5:66:
9c:65:f8:de:88:e3:70:97:07:da:38:ce:83:b9:9e:b7:08:ce:
23:74:fa:73:4e:be:2e:cf:70:3f:74:5b:a2:70:20:8f:23:ca:
0e:ba:1f:46:c2:bd:30:ec:b7:98:93:78:2d:cd:62:bc:9d:83:
92:92:93:8e:ae:ae:31:de:89:8f:f7:ad:98:88:59:72:56:f0:
34:42:ae:e8:8d:5d:f0:58:5e:81:50:af:69:59:d5:2d:56:45:
be:87:27:5c
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZD6fv32aC2/bhRHKMaNo8utMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNzI4MTc1OTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmMzYThmMTY0ZGY4MmQ3YzNmYjU5ZDg0MWFlNWVkMTFkZjMyMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugfyeUFoFS0EkDNxF55sH5745Xcr
Muv0DIwPCQQ0NYsAHkwkTHHE6uaES+Q3Ixx+wWrh180t28bWvIffhQYMdbK/+QpP
8aeZkE7pqV6u0k6VjmlNprMNb6uQEsMssYChzfLEhF6iek2txCmmnzKepKCy5IxR
rWUF4Xu6jSNfM/NLrL3X7TK3SVGLJ8rU9IqIVjbr9vxd8uMtHbuv/KM7ouI+SFkP
eiStsSn2p44QCkBrNVaZiAwOgJMEVO+1HrvoFuwHPE5Au3VKECuWsSdnm2iJNXcm
hAVwG0PpBagv2iYJmrR48sfUjbXGXWTF8E3kp7WS4GeBlRs4tri+5uGtCQIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFI/DqPFk34LXw/tZ2EGuXtEd8yJ1MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvajhPbzhXVGZndGZELTFuWVFhNWUwUjN6SW5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAFS
mLADBAJSmYgDBABSmfMDBAFZ1TIDBAJZ1TgDBABZ1ZEwDAMEAlnVlAMEBVnVgAME
AFnVpwMEAlnVrDAMAwQCWdXEAwQEWdXAMAwDBAJZ1eQDBARZ1eADBANtsBADBAJt
sMwDBAG5MX4wDAMEAsJpTAMEBcJpQAMEAdQmWAMEANXa0wMEANmRQgMEA9mRSDAN
BgkqhkiG9w0BAQsFAAOCAQEAMsmB9Y6dWyQzP2KkLBCgYXyVUPpV9ECwPV3rm+9X
owGSx190131jLwuDGruPZdaKAaOI5G70nn+PpDTGKT0fTKo30DAK80CkvUSy0ReG
8NpnjqiIJxIRstPJ13RX+Cah1Z1NVZmwEzaRjluxNTEnjDFcnTLTkGOS2DuTFwv0
2PTDqaF8k53I02nj8d8Cy4YphL2bgGpACWFcISqAK/xvx9VmnGX43ojjcJcH2jjO
g7metwjOI3T6c06+Ls9wP3RbonAgjyPKDrofRsK9MOy3mJN4Lc1ivJ2DkpKTjq6u
Md6Jj/etmIhZclbwNEKu6I1d8FhegVCvaVnVLVZFvocnXA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:13 2025 by rpki-client