Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nN62LpvfEWTGJ-fho47WlaeaDUs.roa
File: nN62LpvfEWTGJ-fho47WlaeaDUs.roa (raw, json)
Hash identifier: kgTonIsKPncNJgFzlJYGKTMRdv5LLMZDcNq9EV3s4M4=
Subject key identifier: 9C:DE:B6:2E:9B:DF:11:64:C6:27:E7:E1:A3:8E:D6:95:A7:9A:0D:4B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194A71174ED0DD1342DCB9F66835B032742
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nN62LpvfEWTGJ-fho47WlaeaDUs.roa
Signing time: Mon 27 Jan 2025 09:22:06 +0000
ROA not before: Mon 27 Jan 2025 09:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.86.0/24 maxlen: 24
82.152.7.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.222.0/24 maxlen: 24
82.153.228.0/23 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.196.0/24 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 13:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:11:74:ed:0d:d1:34:2d:cb:9f:66:83:5b:03:27:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 27 09:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cdeb62e9bdf1164c627e7e1a38ed695a79a0d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:f1:a8:ba:05:9e:4c:fb:b6:a8:5c:57:60:
55:54:1e:be:39:7b:ed:d0:0b:b5:81:ad:9b:c3:6b:
2f:e5:84:a3:0a:e1:65:fc:47:d8:1e:59:b9:65:09:
bb:70:96:70:00:0c:9b:c6:b0:38:3d:7e:c7:ab:68:
2e:5f:a5:9f:42:93:1b:23:2a:36:30:f2:ec:54:2b:
6c:31:0b:1d:3a:d9:bd:b1:d4:18:3b:a0:2f:4d:d4:
40:99:ce:2a:6f:38:18:87:02:a0:3d:fe:32:89:62:
b1:8a:40:8b:44:d1:85:17:1a:a7:c8:10:8f:da:16:
0a:12:05:49:4d:09:ad:69:cc:25:a2:a6:10:6d:22:
47:3e:84:87:06:28:c8:84:1d:3b:a3:c7:01:9a:2f:
fd:35:df:9e:2c:d1:85:dd:66:68:ae:24:60:be:cd:
54:ac:6b:e0:0f:9e:87:af:df:d0:63:9a:3f:a3:0c:
1e:8b:c0:c7:cb:4f:2b:e1:a1:ce:5b:9d:b5:c7:a5:
29:77:f0:f4:d0:4f:ad:d2:f6:68:ab:89:84:89:b0:
fe:6f:c3:ee:c9:fb:25:2e:02:02:36:9a:50:ae:60:
ed:23:62:6f:16:48:6a:c6:07:7c:e4:d2:9b:99:77:
7a:4f:01:0a:0c:0a:28:e5:a5:00:53:a6:c5:9d:51:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:B6:2E:9B:DF:11:64:C6:27:E7:E1:A3:8E:D6:95:A7:9A:0D:4B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nN62LpvfEWTGJ-fho47WlaeaDUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
82.152.7.0-82.152.8.255
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.153.222.0/24
82.153.228.0/23
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
46:3f:19:d9:83:df:1b:cc:e3:bb:89:91:50:77:79:9c:4a:85:
f5:01:e8:63:9f:bc:17:bb:3d:f2:f4:9d:30:32:d6:63:d8:90:
cb:74:23:c3:4a:95:cf:5f:6b:b8:12:09:4b:99:b5:20:4a:49:
bd:b0:f6:3b:cf:82:66:e4:24:a2:81:e8:7b:a7:f0:fa:ed:59:
32:18:2d:a7:61:d9:15:30:62:d3:81:cb:9e:54:0c:ec:f0:4a:
00:49:d9:68:3b:c9:70:89:71:5a:c2:0f:bc:4b:c5:42:cc:67:
48:82:5c:32:b1:1c:e9:b8:b0:30:97:ff:9e:cf:52:42:a4:7b:
cd:2e:c2:3b:44:da:7d:86:4c:86:66:cb:17:a2:07:99:df:64:
4e:46:d5:78:e5:d2:94:e5:7e:e4:f3:90:14:bd:7b:9b:82:ea:
ad:34:c9:2e:2f:04:df:2e:16:de:f1:80:e9:6b:0e:14:26:9e:
fe:90:e9:4b:b3:cb:90:6f:1d:67:dd:fa:e3:2e:d0:23:9e:2a:
30:8a:a5:ba:28:5a:be:bd:ec:e5:b4:8b:6a:70:21:cb:87:6c:
8c:c0:9f:25:b0:7d:a2:d0:94:7d:d5:6c:bc:1e:1c:c7:90:c8:
18:d6:13:1c:71:93:dd:d2:d7:9b:9a:95:7a:ef:20:ad:4b:31:
6f:2c:e3:1b
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgISAZSnEXTtDdE0LcufZoNbAydCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTI3MDkyMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2RlYjYyZTliZGYxMTY0YzYyN2U3ZTFhMzhlZDY5NWE3OWEwZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FnxqLoFnkz7tqhcV2BVVB6+OXvt
0Au1ga2bw2sv5YSjCuFl/EfYHlm5ZQm7cJZwAAybxrA4PX7Hq2guX6WfQpMbIyo2
MPLsVCtsMQsdOtm9sdQYO6AvTdRAmc4qbzgYhwKgPf4yiWKxikCLRNGFFxqnyBCP
2hYKEgVJTQmtacwloqYQbSJHPoSHBijIhB07o8cBmi/9Nd+eLNGF3WZoriRgvs1U
rGvgD56Hr9/QY5o/owwei8DHy08r4aHOW521x6Upd/D00E+t0vZoq4mEibD+b8Pu
yfslLgICNppQrmDtI2JvFkhqxgd85NKbmXd6TwEKDAoo5aUAU6bFnVFUcQIDAQAB
o4IDLzCCAyswHQYDVR0OBBYEFJzeti6b3xFkxifn4aOO1pWnmg1LMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbk42MkxwdmZFV1RHSi1maG80N1dsYWVhRFVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBQwYIKwYBBQUHAQcBAf8EggEyMIIBLjCCASoEAgABMIIB
IgMEAFDwVjAMAwQAUpgHAwQAUpgIAwQBUpiwAwQAUpkyAwQCUpmIAwQAUpneAwQB
UpnkAwQAUpnzAwQBWdUsAwQBWdUyAwQCWdU4AwQAWdWBAwQAWdWEAwQAWdWLAwQA
WdWPMAwDBABZ1ZEDBABZ1ZIwDAMEAlnVlAMEBVnVgAMEAFnVogMEAFnVpAMEAFnV
pwMEAFnVqTAMAwQAWdWrAwQEWdWgAwQAWdW1AwQAWdW/MAwDBAJZ1cQDBARZ1cAw
DAMEAlnV5AMEBFnV4AMEA22wEAMEAm2wzAMEAW2w8gMEAG2w/AMEAbkxfgMEBMJp
UAMEANQmTwMEAdQmWAMEANWYKwMEAtXSNAMEANXa0zAMAwQA2ZFBAwQA2ZFCAwQD
2ZFIMA0GCSqGSIb3DQEBCwUAA4IBAQBGPxnZg98bzOO7iZFQd3mcSoX1Aehjn7wX
uz3y9J0wMtZj2JDLdCPDSpXPX2u4EglLmbUgSkm9sPY7z4Jm5CSigeh7p/D67Vky
GC2nYdkVMGLTgcueVAzs8EoASdloO8lwiXFawg+8S8VCzGdIglwysRzpuLAwl/+e
z1JCpHvNLsI7RNp9hkyGZssXogeZ32RORtV45dKU5X7k85AUvXubguqtNMkuLwTf
Lhbe8YDpaw4UJp7+kOlLs8uQbx1n3frjLtAjniowiqW6KFq+vezltItqcCHLh2yM
wJ8lsH2i0JR91Wy8HhzHkMgY1hMccZPd0tebmpV67yCtSzFvLOMb
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:29:52 2025 by rpki-client