Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lNFc94Lpj3a_3S29azOd278gh74.roa
File: lNFc94Lpj3a_3S29azOd278gh74.roa (raw, json)
Hash identifier: tNElRNDL8AjPHtmdp8tkC8ZHrSjTQr/x8afOsrGGj/A=
Subject key identifier: 94:D1:5C:F7:82:E9:8F:76:BF:DD:2D:BD:6B:33:9D:DB:BF:20:87:BE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01920FF0722EDD2D6E91BE1066AB7BDAE916
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lNFc94Lpj3a_3S29azOd278gh74.roa
Signing time: Fri 20 Sep 2024 14:57:48 +0000
ROA not before: Fri 20 Sep 2024 14:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 81.168.96.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.148.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.113.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
213.130.153.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 11:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:f0:72:2e:dd:2d:6e:91:be:10:66:ab:7b:da:e9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 20 14:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94d15cf782e98f76bfdd2dbd6b339ddbbf2087be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:98:f8:0f:94:ce:6d:f0:0c:19:44:9a:ba:
54:c5:a6:02:1e:dc:58:1f:8e:ba:18:d4:82:c3:19:
21:2a:9f:1a:57:8c:46:d4:8c:5f:89:25:66:ef:41:
dc:24:19:94:04:b8:63:cc:6e:cd:47:0e:51:8e:8e:
f9:54:32:c1:06:69:f2:8c:21:14:16:01:6f:35:5e:
36:c0:79:b8:85:a6:7f:62:c5:b8:e0:68:49:38:f2:
8c:e6:8b:6a:aa:30:91:28:c5:b4:39:c1:53:bb:dd:
ec:f9:9c:a3:e4:cc:1a:20:a9:74:19:25:0b:fd:cd:
71:f2:43:5c:14:71:df:07:6f:5f:fc:21:ea:27:7a:
b9:7f:ea:bd:3e:6a:1c:de:0b:f9:b6:6a:89:9e:04:
79:0f:dd:30:d0:2a:ba:21:9a:e5:b0:5f:12:58:90:
dc:c1:70:2d:8c:c9:c4:eb:15:32:5b:da:24:86:e3:
5f:9b:c3:76:cf:75:b7:0d:cb:96:00:c5:44:a4:96:
9a:3f:a2:f3:10:d1:9a:34:1c:7a:d3:63:59:07:2e:
34:8e:87:9c:4a:6a:99:1f:4c:f1:31:00:0d:b8:be:
56:1e:e2:6a:69:bd:22:26:29:59:c1:70:db:cb:c7:
68:ff:ad:9a:f8:d7:fd:b4:d8:58:eb:84:5d:9c:3e:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:5C:F7:82:E9:8F:76:BF:DD:2D:BD:6B:33:9D:DB:BF:20:87:BE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lNFc94Lpj3a_3S29azOd278gh74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
82.153.51.0/24
82.153.148.0/24
82.163.15.0/24
89.213.6.0/24
89.213.107.0/24
89.213.112.0/23
89.213.116.0/24
89.213.121.0/24
89.213.157.0/24
89.213.227.0/24
109.176.242.0/24
213.130.137.0/24
213.130.152.0-213.130.154.255
Signature Algorithm: sha256WithRSAEncryption
96:8b:28:b1:03:4b:72:86:ca:b0:a0:35:5b:e3:86:0f:b5:d4:
0e:c8:bd:20:47:d8:f0:f9:e2:21:ee:ad:a8:6f:56:68:15:0d:
49:f7:b9:da:d1:6e:fc:fd:a3:2b:dd:6b:bd:8c:50:16:9d:ea:
bb:0b:e3:2d:64:5f:b9:09:55:2c:80:7d:05:39:84:da:4a:3d:
39:43:2a:73:88:eb:20:14:da:bf:54:8a:38:db:18:be:f1:39:
e4:09:3d:5c:bd:82:60:87:b4:13:22:3b:0c:ee:03:53:a1:e3:
cc:ad:a0:5e:44:c3:d7:38:66:a4:e4:b1:28:4d:60:8e:a6:17:
b4:43:81:8b:6c:aa:0e:70:b0:d6:76:a0:15:7f:7f:d0:bb:f2:
60:d3:cf:60:15:f9:14:9e:10:e8:7d:35:f6:d1:68:88:38:57:
fb:ba:2e:b7:38:a8:f3:d5:6e:41:d9:a2:b5:f5:56:73:aa:2e:
91:f7:a4:45:0e:b3:96:ad:cf:ca:5d:d5:67:48:73:72:13:2f:
c1:17:0f:71:ba:24:4c:59:9a:5f:f1:f1:4c:2c:b9:40:0c:a3:
c3:4c:6a:e6:3e:3a:f0:f6:ee:6e:6a:54:5e:c1:9d:93:e9:ad:
da:6f:b9:9c:fc:08:3b:01:85:ed:fb:28:f6:08:70:69:1f:9c:
94:21:99:19
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZIP8HIu3S1ukb4QZqt72ukWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwOTIwMTQ1NzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGQxNWNmNzgyZTk4Zjc2YmZkZDJkYmQ2YjMzOWRkYmJmMjA4N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZKY+A+Uzm3wDBlEmrpUxaYCHtxY
H466GNSCwxkhKp8aV4xG1IxfiSVm70HcJBmUBLhjzG7NRw5Rjo75VDLBBmnyjCEU
FgFvNV42wHm4haZ/YsW44GhJOPKM5otqqjCRKMW0OcFTu93s+Zyj5MwaIKl0GSUL
/c1x8kNcFHHfB29f/CHqJ3q5f+q9Pmoc3gv5tmqJngR5D90w0Cq6IZrlsF8SWJDc
wXAtjMnE6xUyW9okhuNfm8N2z3W3DcuWAMVEpJaaP6LzENGaNBx602NZBy40joec
SmqZH0zxMQANuL5WHuJqab0iJilZwXDby8do/62a+Nf9tNhY64RdnD4COQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFJTRXPeC6Y92v90tvWszndu/IIe+MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbE5GYzk0THBqM2FfM1MyOWF6T2QyNzhnaDc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAUahgAwQA
UpkzAwQAUpmUAwQAUqMPAwQAWdUGAwQAWdVrAwQBWdVwAwQAWdV0AwQAWdV5AwQA
WdWdAwQAWdXjAwQAbbDyAwQA1YKJMAwDBAPVgpgDBADVgpowDQYJKoZIhvcNAQEL
BQADggEBAJaLKLEDS3KGyrCgNVvjhg+11A7IvSBH2PD54iHurahvVmgVDUn3udrR
bvz9oyvda72MUBad6rsL4y1kX7kJVSyAfQU5hNpKPTlDKnOI6yAU2r9UijjbGL7x
OeQJPVy9gmCHtBMiOwzuA1Oh48ytoF5Ew9c4ZqTksShNYI6mF7RDgYtsqg5wsNZ2
oBV/f9C78mDTz2AV+RSeEOh9NfbRaIg4V/u6Lrc4qPPVbkHZorX1VnOqLpH3pEUO
s5atz8pd1WdIc3ITL8EXD3G6JExZml/x8UwsuUAMo8NMauY+OvD27m5qVF7BnZPp
rdpvuZz8CDsBhe37KPYIcGkfnJQhmRk=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:07:11 2025 by rpki-client