Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pJVsguQGLVVIw_H2XxuoXKKscRE.roa
File: pJVsguQGLVVIw_H2XxuoXKKscRE.roa (raw, json)
Hash identifier: NSdDjBalulUCc417JbNdGUn1ODIZKUAYCTh9erXaqx0=
Subject key identifier: A4:95:6C:82:E4:06:2D:55:48:C3:F1:F6:5F:1B:A8:5C:A2:AC:71:11
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189D0A7B71C3A69345D3B327F7E34E9D60B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pJVsguQGLVVIw_H2XxuoXKKscRE.roa
Signing time: Mon 07 Aug 2023 15:39:59 +0000
ROA not before: Mon 07 Aug 2023 15:39:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.214.0/24 maxlen: 24
109.176.215.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.243.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.41.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.47.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.186.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.187.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.212.0/24 maxlen: 24
109.176.213.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 07:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:a7:b7:1c:3a:69:34:5d:3b:32:7f:7e:34:e9:d6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 15:39:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4956c82e4062d5548c3f1f65f1ba85ca2ac7111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:48:88:ef:5c:66:36:ac:c7:22:8a:e7:bc:
a4:11:ca:80:7f:7c:13:b5:94:a2:d3:dc:d6:2b:fb:
f5:ec:fc:5f:a2:b4:81:28:03:02:c8:91:85:d6:e4:
f0:2f:f6:af:81:2e:12:df:ff:dc:d5:28:a9:10:fa:
4e:8b:b2:16:0e:4b:1a:90:d8:30:e0:69:15:c8:4d:
f4:8c:1b:69:36:fd:29:64:0a:c7:d0:fd:ed:48:8d:
fb:8b:7e:4f:a5:75:bc:5e:91:cc:8f:1a:d7:9a:cf:
b5:a8:d6:c0:1e:f5:c5:11:fa:c5:21:96:a8:99:19:
20:e1:64:87:5b:eb:9b:f0:fc:05:86:9a:7e:83:4c:
dd:f2:13:97:b5:4f:16:b5:36:d1:4b:a0:d3:29:0e:
4f:2e:4c:9a:cd:f8:ba:01:60:8c:3c:aa:35:7f:60:
61:eb:ac:48:92:63:c2:e4:29:ed:1c:95:28:df:e9:
32:58:fa:64:9a:6e:b4:72:04:d6:d0:7a:6a:44:a8:
d4:6e:5a:fa:37:b0:9e:52:aa:f3:ba:5e:38:16:c4:
43:db:71:cf:22:16:90:ca:ac:a2:da:af:a3:11:c6:
0f:26:bf:a8:ac:5b:5c:c7:04:b8:76:c4:15:70:43:
20:88:d9:40:92:79:f9:05:0d:30:37:dd:37:72:c7:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:6C:82:E4:06:2D:55:48:C3:F1:F6:5F:1B:A8:5C:A2:AC:71:11
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pJVsguQGLVVIw_H2XxuoXKKscRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0/24
89.213.5.0/24
89.213.41.0-89.213.42.255
89.213.44.0/24
89.213.47.0/24
89.213.136.0/24
89.213.139.0-89.213.141.255
89.213.146.0/24
89.213.148.0-89.213.152.255
89.213.154.0/23
89.213.157.0-89.213.158.255
89.213.160.0/24
89.213.162.0-89.213.164.255
89.213.168.0/23
89.213.173.0-89.213.177.255
89.213.179.0-89.213.182.255
89.213.184.0-89.213.189.255
109.176.211.0-109.176.221.255
109.176.223.0/24
109.176.240.0/24
109.176.242.0/23
109.176.245.0/24
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ae:7e:aa:ba:e3:88:94:d2:1d:da:e4:1d:8d:20:9c:00:55:
14:6c:65:e1:f2:95:97:e1:22:70:5f:dc:fe:05:3f:0e:0d:e9:
ab:f4:f3:7d:be:32:f0:35:92:72:bf:19:51:e1:ea:23:fd:9d:
25:22:70:ad:01:9f:84:d0:83:20:af:bd:ae:7a:73:82:82:70:
1d:81:4b:dc:02:c0:28:6f:c4:4b:af:f1:9f:61:b5:c5:c7:88:
32:1d:de:34:f8:1e:81:9a:c4:44:0c:ed:12:87:6b:da:10:6d:
c7:17:0a:58:2f:24:e2:a2:0f:90:3a:8e:49:98:20:8c:ae:44:
9e:4c:8c:a2:83:b9:e7:9c:49:15:ca:45:f3:cf:6e:1a:1b:20:
f3:18:e0:61:d7:f6:36:b9:bf:21:45:93:8f:e0:88:a2:3a:2f:
61:b0:cf:ce:13:9a:ac:d4:d6:f2:3b:68:69:d7:13:13:4a:ec:
76:f4:05:2b:8c:2e:bb:13:e6:97:ba:92:d5:0a:1e:a5:67:3d:
82:13:11:70:2e:ef:18:87:8b:3e:e4:8e:cb:68:d7:fd:70:59:
6e:15:57:0c:d8:c0:c9:bb:01:28:d2:fc:0f:b9:c4:0d:b9:6d:
41:cd:d7:22:e0:5c:b7:d8:83:62:97:e1:15:47:9a:57:0a:b5:
ae:1c:d2:88
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgISAYnQp7ccOmk0XTsyf3406dYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODA3MTUzOTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDk1NmM4MmU0MDYyZDU1NDhjM2YxZjY1ZjFiYTg1Y2EyYWM3MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKFIiO9cZjasxyKK57ykEcqAf3wT
tZSi09zWK/v17PxforSBKAMCyJGF1uTwL/avgS4S3//c1SipEPpOi7IWDksakNgw
4GkVyE30jBtpNv0pZArH0P3tSI37i35PpXW8XpHMjxrXms+1qNbAHvXFEfrFIZao
mRkg4WSHW+ub8PwFhpp+g0zd8hOXtU8WtTbRS6DTKQ5PLkyazfi6AWCMPKo1f2Bh
66xIkmPC5CntHJUo3+kyWPpkmm60cgTW0HpqRKjUblr6N7CeUqrzul44FsRD23HP
IhaQyqyi2q+jEcYPJr+orFtcxwS4dsQVcEMgiNlAknn5BQ0wN903cseJ9wIDAQAB
o4IDaTCCA2UwHQYDVR0OBBYEFKSVbILkBi1VSMPx9l8bqFyirHERMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvcEpWc2d1UUdMVlZJd19IMlh4dW9YS0tzY1JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBfQYIKwYBBQUHAQcBAf8EggFsMIIBaDCCAWQEAgABMIIB
XAMEAFEFnAMEAFGoKQMEAFGodAMEAFGodwMEAFGoewMEAFKYbwMEAVKY/AMEAFKY
/wMEAFKZAQMEAFKZSQMEAFKZTjAMAwQDUpmIAwQAUpmMAwQAUpndAwQAUpnfAwQA
UpnhAwQAUpnjAwQAUpnwAwQAUpn5AwQAWdUFMAwDBABZ1SkDBABZ1SoDBABZ1SwD
BABZ1S8DBABZ1YgwDAMEAFnViwMEAVnVjAMEAFnVkjAMAwQCWdWUAwQAWdWYAwQB
WdWaMAwDBABZ1Z0DBABZ1Z4DBABZ1aAwDAMEAVnVogMEAFnVpAMEAVnVqDAMAwQA
WdWtAwQBWdWwMAwDBABZ1bMDBABZ1bYwDAMEA1nVuAMEAVnVvDAMAwQAbbDTAwQB
bbDcAwQAbbDfAwQAbbDwAwQBbbDyAwQAbbD1MAwDBANtsPgDBABtsPowDAMEALkx
fQMEB7kxAAMEANWYKjANBgkqhkiG9w0BAQsFAAOCAQEAX65+qrrjiJTSHdrkHY0g
nABVFGxl4fKVl+EicF/c/gU/Dg3pq/Tzfb4y8DWScr8ZUeHqI/2dJSJwrQGfhNCD
IK+9rnpzgoJwHYFL3ALAKG/ES6/xn2G1xceIMh3eNPgegZrERAztEodr2hBtxxcK
WC8k4qIPkDqOSZggjK5EnkyMooO555xJFcpF889uGhsg8xjgYdf2Nrm/IUWTj+CI
ojovYbDPzhOarNTW8jtoadcTE0rsdvQFK4wuuxPml7qS1QoepWc9ghMRcC7vGIeL
PuSOy2jX/XBZbhVXDNjAybsBKNL8D7nEDbltQc3XIuBct9iDYpfhFUeaVwq1rhzS
iA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org