Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/up2mJ6NvlvFQsI77MrQqVZ3zz_k.roa
File: up2mJ6NvlvFQsI77MrQqVZ3zz_k.roa (raw, json)
Hash identifier: 8hfpmyhOBlbM6mzVadb5hZO9KsF0+De/6lRn+G/xMCc=
Subject key identifier: BA:9D:A6:27:A3:6F:96:F1:50:B0:8E:FB:32:B4:2A:55:9D:F3:CF:F9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01928FED635A1DFEF6BDD8A0814ED3239941
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/up2mJ6NvlvFQsI77MrQqVZ3zz_k.roa
Signing time: Tue 15 Oct 2024 11:25:52 +0000
ROA not before: Tue 15 Oct 2024 11:25:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 08:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:ed:63:5a:1d:fe:f6:bd:d8:a0:81:4e:d3:23:99:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 15 11:25:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba9da627a36f96f150b08efb32b42a559df3cff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:9a:72:2a:fe:ba:a4:d1:e5:a4:e4:1b:90:
ee:23:92:87:18:2d:8d:13:66:4c:b7:cc:c2:e9:d1:
a8:02:be:6b:08:24:6e:12:5f:fb:09:b8:93:31:00:
2c:4e:c5:ec:7d:b7:52:7e:c7:46:48:2e:03:6b:37:
0b:0c:73:89:48:ff:18:05:64:76:95:c6:01:6f:71:
77:f4:16:aa:b5:a6:15:19:ea:46:ba:d3:d4:1c:02:
17:a0:9b:d3:ed:a6:80:16:45:48:81:1b:48:96:60:
49:6c:82:62:7a:cb:16:2f:6f:25:3d:0d:ee:00:e8:
fb:44:b3:4c:65:24:ba:03:d1:91:ca:8d:a8:42:12:
b6:dc:c2:fd:87:7b:82:85:67:ba:de:55:3f:60:77:
c7:1f:02:bf:56:d8:da:c2:c5:f6:48:1f:1b:b7:77:
f4:ac:63:0b:c9:83:5c:88:c2:37:97:96:64:71:7f:
2c:bf:3a:db:10:bf:6a:65:74:a1:2f:4f:0a:ee:03:
28:c8:37:81:be:01:ad:5a:d5:ef:ac:72:6c:89:8c:
4a:65:2a:32:2c:bc:cf:f5:55:94:9c:87:27:c7:1c:
62:94:d9:4c:0d:52:b0:34:ba:1f:34:d5:c3:1a:5f:
b1:cb:08:6c:28:da:7d:9d:2f:41:50:f8:22:05:bf:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9D:A6:27:A3:6F:96:F1:50:B0:8E:FB:32:B4:2A:55:9D:F3:CF:F9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/up2mJ6NvlvFQsI77MrQqVZ3zz_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
57:41:60:79:74:4e:c0:d2:e0:46:77:55:38:55:52:b4:2b:7d:
72:0a:5b:a9:90:29:1a:9f:5f:2d:ad:64:05:04:a6:cd:c7:fd:
b0:f2:be:36:db:75:a0:d7:5c:d4:29:77:98:ab:59:0f:f1:c2:
b5:69:48:fe:6e:74:d1:c3:ff:43:7b:d6:ca:cc:62:c0:5a:1b:
b6:9a:0e:ca:e9:b2:09:22:0b:83:f3:34:58:63:03:23:a5:82:
47:63:5e:d3:e7:cc:ff:99:e0:92:c5:d7:d8:b4:26:7e:f0:2a:
09:e4:dd:c1:e8:c6:3c:d8:f4:93:76:21:29:ea:36:77:55:ff:
6d:25:19:6d:bf:8c:58:d4:e4:20:09:55:13:06:b8:4e:e7:35:
1a:a9:0e:c0:ec:2c:5f:67:36:f8:36:fe:cb:61:82:51:27:2f:
f6:bd:ba:5e:e2:26:b5:23:77:45:8f:bd:2e:18:cd:d0:4c:75:
b4:db:d2:32:d2:2b:35:7e:b1:43:43:58:6c:55:ad:81:95:b2:
0f:4c:7b:2b:f2:2e:70:61:bc:37:21:41:2b:3d:f6:77:42:95:
f6:f0:f9:44:70:11:c0:e0:a1:d1:56:ba:60:e4:80:20:b1:1f:
51:f6:87:34:0a:e8:78:1b:a5:2b:25:c0:e4:9b:f5:d2:41:92:
2e:02:d4:e4
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZKP7WNaHf72vdiggU7TI5lBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMDE1MTEyNTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTlkYTYyN2EzNmY5NmYxNTBiMDhlZmIzMmI0MmE1NTlkZjNjZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUeacir+uqTR5aTkG5DuI5KHGC2N
E2ZMt8zC6dGoAr5rCCRuEl/7CbiTMQAsTsXsfbdSfsdGSC4DazcLDHOJSP8YBWR2
lcYBb3F39BaqtaYVGepGutPUHAIXoJvT7aaAFkVIgRtIlmBJbIJiessWL28lPQ3u
AOj7RLNMZSS6A9GRyo2oQhK23ML9h3uChWe63lU/YHfHHwK/VtjawsX2SB8bt3f0
rGMLyYNciMI3l5ZkcX8svzrbEL9qZXShL08K7gMoyDeBvgGtWtXvrHJsiYxKZSoy
LLzP9VWUnIcnxxxilNlMDVKwNLofNNXDGl+xywhsKNp9nS9BUPgiBb8XiQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFLqdpiejb5bxULCO+zK0KlWd88/5MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdXAybUo2TnZsdkZRc0k3N01yUXFWWjN6el9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBswQCAAEwgawDBAFS
mLADBAJSmYgDBAFZ1SwDBAFZ1TIDBAJZ1TgDBABZ1YEDBABZ1YswDAMEAFnVkQME
AFnVkjAMAwQCWdWUAwQFWdWAAwQAWdWnAwQCWdWsMAwDBAJZ1cQDBARZ1cAwDAME
AlnV5AMEBFnV4AMEA22wEAMEAm2wzAMEAW2w8gMEAbkxfgMEBMJpUAMEAdQmWAME
ANXa0zAMAwQA2ZFBAwQA2ZFCAwQD2ZFIMA0GCSqGSIb3DQEBCwUAA4IBAQBXQWB5
dE7A0uBGd1U4VVK0K31yClupkCkan18trWQFBKbNx/2w8r4223Wg11zUKXeYq1kP
8cK1aUj+bnTRw/9De9bKzGLAWhu2mg7K6bIJIguD8zRYYwMjpYJHY17T58z/meCS
xdfYtCZ+8CoJ5N3B6MY82PSTdiEp6jZ3Vf9tJRltv4xY1OQgCVUTBrhO5zUaqQ7A
7CxfZzb4Nv7LYYJRJy/2vbpe4ia1I3dFj70uGM3QTHW029Iy0is1frFDQ1hsVa2B
lbIPTHsr8i5wYbw3IUErPfZ3QpX28PlEcBHA4KHRVrpg5IAgsR9R9oc0Cuh4G6Ur
JcDkm/XSQZIuAtTk
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:03 2025 by rpki-client