Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kWz93XD68BVcyc8qqas8p_WgknA.roa
File: kWz93XD68BVcyc8qqas8p_WgknA.roa (raw, json)
Hash identifier: y+7FN8jhyGCxv8kmkyveO7PIbzOEW6HFGDAw+bK7Pnw=
Subject key identifier: 91:6C:FD:DD:70:FA:F0:15:5C:C9:CF:2A:A9:AB:3C:A7:F5:A0:92:70
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019156019714149EE272244D45F5AF00B67F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kWz93XD68BVcyc8qqas8p_WgknA.roa
Signing time: Thu 15 Aug 2024 12:27:10 +0000
ROA not before: Thu 15 Aug 2024 12:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 80.240.88.0/21 maxlen: 24
81.168.122.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
82.163.24.0/21 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.108.0/23 maxlen: 24
89.213.110.0/24 maxlen: 24
89.213.122.0/24 maxlen: 24
89.213.126.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.194.0/23 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.240.0/23 maxlen: 24
89.213.250.0/24 maxlen: 24
109.176.230.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 13:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:01:97:14:14:9e:e2:72:24:4d:45:f5:af:00:b6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 15 12:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=916cfddd70faf0155cc9cf2aa9ab3ca7f5a09270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:c7:93:f2:f6:cb:72:c3:1f:4e:89:08:f6:
f4:24:c4:d1:90:59:2c:04:13:ba:2b:5b:f0:55:7e:
5c:13:1d:41:46:b5:71:0f:ac:37:c3:f3:88:9e:6f:
a9:25:08:69:e5:d3:c2:44:7a:2a:76:92:9b:01:50:
46:63:a7:3a:50:36:bb:b9:b8:43:54:07:9b:9f:6f:
8f:a4:a8:d8:83:06:3d:9c:8b:9e:73:5c:97:04:f7:
9d:34:6e:6f:21:42:8c:7d:96:7c:76:10:1b:fa:46:
14:d4:6c:5f:74:ce:8a:1f:0b:d8:e2:e9:33:0f:d2:
47:ba:a1:9a:c8:df:97:01:ba:8f:99:93:44:4d:90:
ab:6f:a8:13:41:f6:e5:0e:4f:e6:a7:23:fa:89:9f:
4b:54:e6:e9:57:c2:eb:7c:f5:81:d4:03:94:2c:5e:
c3:8c:16:2d:8f:1e:3a:e9:fd:c8:84:b9:45:a6:e5:
0a:3e:38:d0:0b:37:4a:6e:65:4a:e0:da:b7:99:6c:
37:da:4b:9e:f5:81:43:85:b1:23:a2:6d:f0:f8:6e:
04:e1:7a:b1:f7:be:f4:07:c4:b0:d5:7f:76:1e:f8:
c6:85:c3:c3:b8:09:2d:0b:c0:01:3f:d9:b5:33:50:
6b:ed:ab:01:c8:c9:35:18:e9:7d:5a:38:10:db:0f:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:FD:DD:70:FA:F0:15:5C:C9:CF:2A:A9:AB:3C:A7:F5:A0:92:70
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kWz93XD68BVcyc8qqas8p_WgknA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
81.168.122.0/24
82.152.131.0/24
82.152.174.0/23
82.153.208.0/22
82.163.19.0/24
82.163.24.0/21
89.213.58.0/24
89.213.60.0/23
89.213.108.0-89.213.110.255
89.213.122.0/24
89.213.126.0/24
89.213.143.0/24
89.213.147.0/24
89.213.181.0/24
89.213.194.0/23
89.213.198.0-89.213.205.255
89.213.240.0/23
89.213.250.0/24
109.176.230.0/24
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2f:63:f3:8c:0c:b7:59:a7:92:ef:19:b9:74:31:15:f3:9b:
f9:11:e8:61:e8:8d:ed:c4:58:7c:07:40:38:ac:7c:90:e7:8e:
5f:2c:ee:c2:8d:b8:b1:2c:55:14:47:e7:0f:1c:c6:96:94:89:
24:95:a9:20:f3:f6:7d:a9:1b:10:30:1b:2b:05:58:c2:19:8b:
aa:fe:2a:20:79:91:ba:f6:db:46:7c:63:e5:f2:30:f3:aa:ed:
f3:58:dd:9f:f0:2e:74:c9:53:9e:f9:46:76:6a:35:db:7c:7c:
85:b1:54:fe:45:ff:d4:60:e0:26:77:1d:47:a8:ea:b1:37:f8:
fc:c0:b3:a0:7f:f9:e1:e6:cd:ed:c7:29:4a:68:f4:c2:9e:be:
c9:10:6b:e9:47:5e:a5:1b:52:b4:d8:44:bb:4b:7d:be:1d:1d:
41:cf:c7:f3:39:56:0a:3d:94:2f:6e:6a:28:b3:55:24:41:90:
c1:a2:fa:6c:1a:2d:66:e9:36:b4:83:94:94:1e:e5:19:68:7c:
b6:67:0d:83:3e:f3:e8:0b:2f:a1:1c:96:96:21:7a:89:c4:cc:
1a:6e:6f:36:08:93:7d:be:5d:3c:1a:25:11:78:e2:7d:00:db:
76:6e:ad:58:6c:a0:36:70:3f:12:d0:7a:7c:60:81:1e:55:a7:
bc:9f:c8:69
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZFWAZcUFJ7iciRNRfWvALZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwODE1MTIyNzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTZjZmRkZDcwZmFmMDE1NWNjOWNmMmFhOWFiM2NhN2Y1YTA5MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoXHk/L2y3LDH06JCPb0JMTRkFks
BBO6K1vwVX5cEx1BRrVxD6w3w/OInm+pJQhp5dPCRHoqdpKbAVBGY6c6UDa7ubhD
VAebn2+PpKjYgwY9nIuec1yXBPedNG5vIUKMfZZ8dhAb+kYU1GxfdM6KHwvY4ukz
D9JHuqGayN+XAbqPmZNETZCrb6gTQfblDk/mpyP6iZ9LVObpV8LrfPWB1AOULF7D
jBYtjx466f3IhLlFpuUKPjjQCzdKbmVK4Nq3mWw32kue9YFDhbEjom3w+G4E4Xqx
9770B8Sw1X92HvjGhcPDuAktC8ABP9m1M1Br7asByMk1GOl9WjgQ2w8reQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFJFs/d1w+vAVXMnPKqmrPKf1oJJwMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEva1d6OTNYRDY4QlZjeWM4cXFhczhwX1dna25BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBswQCAAEwgawDBANQ
8FgDBABRqHoDBABSmIMDBAFSmK4DBAJSmdADBABSoxMDBANSoxgDBABZ1ToDBAFZ
1TwwDAMEAlnVbAMEAFnVbgMEAFnVegMEAFnVfgMEAFnVjwMEAFnVkwMEAFnVtQME
AVnVwjAMAwQBWdXGAwQBWdXMAwQBWdXwAwQAWdX6AwQAbbDmAwQA1dIQAwQA1dIS
AwQA1dIhAwQA1dIzAwQA1drcAwQA2ZCXMA0GCSqGSIb3DQEBCwUAA4IBAQBbL2Pz
jAy3WaeS7xm5dDEV85v5Eehh6I3txFh8B0A4rHyQ545fLO7CjbixLFUUR+cPHMaW
lIkklakg8/Z9qRsQMBsrBVjCGYuq/iogeZG69ttGfGPl8jDzqu3zWN2f8C50yVOe
+UZ2ajXbfHyFsVT+Rf/UYOAmdx1HqOqxN/j8wLOgf/nh5s3txylKaPTCnr7JEGvp
R16lG1K02ES7S32+HR1Bz8fzOVYKPZQvbmoos1UkQZDBovpsGi1m6Ta0g5SUHuUZ
aHy2Zw2DPvPoCy+hHJaWIXqJxMwabm82CJN9vl08GiUReOJ9ANt2bq1YbKA2cD8S
0Hp8YIEeVae8n8hp
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:04:26 2025 by rpki-client