Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r9dl0ei37kc64e81MwidfQE4dm0.roa
File: r9dl0ei37kc64e81MwidfQE4dm0.roa (raw, json)
Hash identifier: L+ZixHAC0CqMVGNt20HmAo81ySB9NGFV5mODU2etzjI=
Subject key identifier: AF:D7:65:D1:E8:B7:EE:47:3A:E1:EF:35:33:08:9D:7D:01:38:76:6D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F9A20FF413BABAEFDBE15AA0550EBB6E5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r9dl0ei37kc64e81MwidfQE4dm0.roa
Signing time: Tue 21 May 2024 07:50:04 +0000
ROA not before: Tue 21 May 2024 07:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.152.176.0/24 maxlen: 24
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.98.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.218.0/24 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.250.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 12:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:20:ff:41:3b:ab:ae:fd:be:15:aa:05:50:eb:b6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 21 07:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afd765d1e8b7ee473ae1ef3533089d7d0138766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:d9:2c:99:29:f5:72:05:f6:2a:5a:cd:7e:
d7:05:9a:05:72:68:05:79:31:cf:7a:21:a2:73:67:
5d:ec:11:dc:bd:22:05:0d:ea:38:d1:2c:b0:f0:d6:
99:56:c2:8f:5b:fe:a3:10:75:c3:72:f7:91:bb:38:
c0:ad:49:78:7b:13:64:c7:fa:9a:2f:2c:b9:47:f4:
8b:80:cb:f3:bd:43:ef:bf:41:8d:9e:90:d9:fe:59:
73:30:28:c0:be:3c:3e:34:93:70:ac:c6:f7:12:22:
55:31:dd:9c:a6:70:bb:67:be:c6:fd:6b:cf:cd:50:
53:3a:09:7a:9a:a7:47:84:8e:6d:dd:be:fc:c6:d7:
a0:50:05:55:d0:85:0c:a1:e4:7f:27:2d:4f:39:af:
34:b6:fe:09:1c:62:97:2f:de:68:dc:a4:b4:c3:9c:
2f:be:5c:71:23:da:ae:18:5e:b0:2a:cb:5e:1c:fb:
22:e0:d4:24:60:7d:a1:73:20:7e:68:1c:0c:8a:2b:
31:c7:6e:ac:30:e5:23:4d:67:55:e5:1f:bf:3c:98:
b5:a2:5f:02:e3:74:f5:d7:b6:57:01:a1:62:65:98:
51:fe:94:d5:cb:51:ae:20:e7:79:c1:de:a7:ec:41:
ae:e4:59:09:cf:aa:a4:62:57:05:40:1d:80:78:90:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:65:D1:E8:B7:EE:47:3A:E1:EF:35:33:08:9D:7D:01:38:76:6D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r9dl0ei37kc64e81MwidfQE4dm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
89.213.98.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.218.0/24
89.213.232.0/21
109.176.16.0/21
109.176.250.0/24
185.49.126.0/23
194.105.80.0/20
213.130.130.0/24
213.130.149.0/24
213.218.210.0/23
213.218.231.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ed:b7:a7:da:ba:25:ba:a3:8c:59:fd:14:50:e2:1f:41:c8:
4c:d3:49:22:e8:36:98:4c:b1:fd:2a:99:52:65:61:aa:48:ae:
3d:70:06:13:2a:34:e7:80:a3:35:93:7c:be:30:e7:50:57:02:
21:34:fa:94:3c:5a:d4:21:52:5d:33:6a:b6:77:6c:1d:1b:80:
ba:6c:17:f3:2f:b2:63:d6:de:35:86:f1:02:67:69:5f:71:cc:
1f:93:aa:b0:cd:d0:b4:af:d7:a2:5d:b0:64:9c:ab:6b:8b:6b:
23:b3:a2:82:6b:9c:c9:95:1c:34:86:9d:c8:36:01:f8:1b:02:
80:f6:50:d0:8a:90:c2:c4:ad:c8:69:ce:c2:32:ee:e1:bb:55:
0e:d2:52:c3:52:87:1a:f8:dd:20:40:5f:31:0b:08:0e:dc:62:
d7:ee:b4:70:96:8f:6c:b2:f0:4f:82:8b:7f:b9:ab:8d:00:73:
21:a8:b8:34:0d:6c:8d:e0:98:16:1a:e1:2b:e0:ba:fd:63:8b:
32:92:da:9b:83:54:f2:2f:96:5e:92:46:26:65:8f:1c:00:4a:
f3:6f:61:d4:57:85:24:fc:a4:40:57:cc:b8:cf:fd:12:72:c4:
0a:44:c7:17:9e:f5:c9:5d:7b:76:21:9d:6b:9d:2a:42:05:47:
f8:46:14:71
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAY+aIP9BO6uu/b4VqgVQ67blMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNTIxMDc1MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmQ3NjVkMWU4YjdlZTQ3M2FlMWVmMzUzMzA4OWQ3ZDAxMzg3NjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuzZLJkp9XIF9ipazX7XBZoFcmgF
eTHPeiGic2dd7BHcvSIFDeo40Syw8NaZVsKPW/6jEHXDcveRuzjArUl4exNkx/qa
Lyy5R/SLgMvzvUPvv0GNnpDZ/llzMCjAvjw+NJNwrMb3EiJVMd2cpnC7Z77G/WvP
zVBTOgl6mqdHhI5t3b78xtegUAVV0IUMoeR/Jy1POa80tv4JHGKXL95o3KS0w5wv
vlxxI9quGF6wKsteHPsi4NQkYH2hcyB+aBwMiisxx26sMOUjTWdV5R+/PJi1ol8C
43T117ZXAaFiZZhR/pTVy1GuIOd5wd6n7EGu5FkJz6qkYlcFQB2AeJCMqQIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFK/XZdHot+5HOuHvNTMInX0BOHZtMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvcjlkbDBlaTM3a2M2NGU4MU13aWRmUUU0ZG0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAFSmLAD
BABSmTIDBAJSmYgDBABZ1WIwDAMEAlnVlAMEBVnVgAMEAlnVrDAMAwQCWdXEAwQE
WdXAAwQAWdXaAwQDWdXoAwQDbbAQAwQAbbD6AwQBuTF+AwQEwmlQAwQA1YKCAwQA
1YKVAwQB1drSAwQA1drnMA0GCSqGSIb3DQEBCwUAA4IBAQCb7ben2roluqOMWf0U
UOIfQchM00ki6DaYTLH9KplSZWGqSK49cAYTKjTngKM1k3y+MOdQVwIhNPqUPFrU
IVJdM2q2d2wdG4C6bBfzL7Jj1t41hvECZ2lfccwfk6qwzdC0r9eiXbBknKtri2sj
s6KCa5zJlRw0hp3INgH4GwKA9lDQipDCxK3Iac7CMu7hu1UO0lLDUoca+N0gQF8x
CwgO3GLX7rRwlo9ssvBPgot/uauNAHMhqLg0DWyN4JgWGuEr4Lr9Y4syktqbg1Ty
L5ZekkYmZY8cAErzb2HUV4Uk/KRAV8y4z/0ScsQKRMcXnvXJXXt2IZ1rnSpCBUf4
RhRx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org