Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oqV4T74tvtbsd-ED1JKK8v8ITVk.roa
File: oqV4T74tvtbsd-ED1JKK8v8ITVk.roa (raw, json)
Hash identifier: 7JL41RYX9FRRetqaIFNyhFxoO4gNbipbYtuMfBINRFA=
Subject key identifier: A2:A5:78:4F:BE:2D:BE:D6:EC:77:E1:03:D4:92:8A:F2:FF:08:4D:59
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195B39DFBB1BA8DABC9E90713D26E538E73
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oqV4T74tvtbsd-ED1JKK8v8ITVk.roa
Signing time: Thu 20 Mar 2025 12:53:50 +0000
ROA not before: Thu 20 Mar 2025 12:53:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.168.116.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 08:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:9d:fb:b1:ba:8d:ab:c9:e9:07:13:d2:6e:53:8e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 20 12:53:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2a5784fbe2dbed6ec77e103d4928af2ff084d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:5d:f9:c1:e1:84:1b:27:e7:d3:69:64:d1:
d2:c4:c8:b6:35:b9:c4:b9:da:6c:f0:c1:f5:9e:71:
86:f6:ca:8e:57:f2:e2:55:0d:8f:30:b0:1f:54:2c:
e6:ff:d8:c9:c4:60:7f:1f:d2:79:38:31:5d:af:07:
98:19:ff:87:ce:3a:fb:ad:31:cc:5c:21:25:ee:cb:
15:42:1e:fd:1c:6e:ad:c7:e2:d1:34:ff:f4:f0:36:
08:6c:fb:a7:64:78:45:c8:55:6c:10:9a:ee:de:6b:
96:74:45:ea:5d:8d:5c:b3:c7:fa:c8:99:97:48:25:
6a:89:69:a5:86:97:a8:f4:8b:f7:57:d6:a9:e3:36:
39:b2:fc:b0:53:06:f9:52:93:e8:83:21:34:b7:a7:
4b:b1:00:ed:03:d3:40:3d:c6:ab:79:a2:e5:d6:2b:
f9:47:34:ed:09:50:7d:4c:67:d3:f9:3c:34:99:e0:
d5:5f:f2:12:c9:1b:02:78:6c:a8:eb:fd:cd:94:6c:
a0:c1:2a:82:f1:a8:65:fd:09:db:be:7d:61:a9:c9:
74:fa:5a:0a:60:6f:83:3f:03:b8:20:41:54:5d:a2:
33:ad:da:a3:94:15:6b:4b:8a:4c:db:e2:04:4d:65:
3c:8b:38:91:ec:ce:23:47:55:23:f0:9c:e9:e7:1e:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:78:4F:BE:2D:BE:D6:EC:77:E1:03:D4:92:8A:F2:FF:08:4D:59
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oqV4T74tvtbsd-ED1JKK8v8ITVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.193.0/24
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.226.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:b4:f4:55:27:14:95:b6:ff:72:a8:79:5e:a4:66:b6:ea:9e:
a5:a2:c6:93:17:f5:4a:a8:b9:85:0e:6e:1f:23:ef:6b:41:69:
c7:f0:01:55:49:cd:42:6b:c2:88:a1:11:ad:e4:be:fe:60:6a:
38:76:f4:12:a2:93:9d:98:61:42:80:a2:1c:31:a2:0f:31:b1:
b5:5c:c8:25:fe:ef:82:09:f2:64:9b:31:b9:c3:da:3a:8e:49:
ed:a9:6a:e0:e2:d6:b5:67:b4:6b:22:e1:d8:7e:05:d2:e5:88:
e9:3c:0e:fa:e6:7d:f2:dc:b0:7f:d1:9f:17:85:d9:c3:0b:cf:
57:33:38:d9:2a:ed:54:10:1a:a4:73:4d:7e:e1:00:69:cf:1e:
2d:6f:d6:58:07:56:ef:4f:74:59:07:f6:53:18:1f:6e:03:7f:
93:1e:52:cb:df:e9:68:6d:55:96:16:2a:9f:a2:9d:51:0a:bb:
2c:b3:ec:eb:30:2d:51:3c:dc:57:83:82:04:c5:2b:7e:cf:45:
52:44:1c:36:1c:46:f7:c4:39:d7:64:72:80:31:dc:bf:61:49:
8e:9a:d2:f3:06:1f:f4:da:ce:24:0e:85:00:31:df:5c:6d:6c:
19:8a:0f:84:c1:9a:0a:9c:d9:40:a3:d8:40:df:b0:4c:41:85:
cd:5c:c7:bd
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgISAZWznfuxuo2ryekHE9JuU45zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMzIwMTI1MzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmE1Nzg0ZmJlMmRiZWQ2ZWM3N2UxMDNkNDkyOGFmMmZmMDg0ZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE5d+cHhhBsn59NpZNHSxMi2NbnE
udps8MH1nnGG9sqOV/LiVQ2PMLAfVCzm/9jJxGB/H9J5ODFdrweYGf+Hzjr7rTHM
XCEl7ssVQh79HG6tx+LRNP/08DYIbPunZHhFyFVsEJru3muWdEXqXY1cs8f6yJmX
SCVqiWmlhpeo9Iv3V9ap4zY5svywUwb5UpPogyE0t6dLsQDtA9NAPcareaLl1iv5
RzTtCVB9TGfT+Tw0meDVX/ISyRsCeGyo6/3NlGygwSqC8ahl/Qnbvn1hqcl0+loK
YG+DPwO4IEFUXaIzrdqjlBVrS4pM2+IETWU8iziR7M4jR1Uj8Jzp5x7c7wIDAQAB
o4IDOTCCAzUwHQYDVR0OBBYEFKKleE++Lb7W7HfhA9SSivL/CE1ZMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvb3FWNFQ3NHR2dGJzZC1FRDFKS0s4djhJVFZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBTQYIKwYBBQUHAQcBAf8EggE8MIIBODCCATQEAgABMIIB
LAMEAFGodAMEAFKYCAMEAVKYsAMEAlKZiAMEAFKZ8wMEAVnVLAMEAVnVMgMEAlnV
OAMEAFnVgQMEAFnVhAMEAFnViwMEAFnVjzAMAwQAWdWRAwQAWdWSMAwDBAJZ1ZQD
BAVZ1YADBABZ1aIDBABZ1aQDBABZ1acDBABZ1akwDAMEAFnVqwMEAFnVsAMEAFnV
tQMEAFnVtwMEAFnVvzAMAwQCWdXEAwQEWdXAMAwDBAJZ1eQDBARZ1eADBANtsBAD
BABtsMEDBAJtsMwDBAFtsPIDBABtsPwDBAG5MX4DBAC5ZS8DBATCaVADBADUJk8D
BAHUJlgDBALVgoQDBADVmCsDBALV0jQDBADV2tMDBADV2uIDBALV2vQwDAMEANmR
QQMEANmRQgMEA9mRSDANBgkqhkiG9w0BAQsFAAOCAQEAo7T0VScUlbb/cqh5XqRm
tuqepaLGkxf1Sqi5hQ5uHyPva0Fpx/ABVUnNQmvCiKERreS+/mBqOHb0EqKTnZhh
QoCiHDGiDzGxtVzIJf7vggnyZJsxucPaOo5J7alq4OLWtWe0ayLh2H4F0uWI6TwO
+uZ98tywf9GfF4XZwwvPVzM42SrtVBAapHNNfuEAac8eLW/WWAdW7090WQf2Uxgf
bgN/kx5Sy9/paG1VlhYqn6KdUQq7LLPs6zAtUTzcV4OCBMUrfs9FUkQcNhxG98Q5
12RygDHcv2FJjprS8wYf9NrOJA6FADHfXG1sGYoPhMGaCpzZQKPYQN+wTEGFzVzH
vQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:13:05 2025 by rpki-client