Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x4Nd7pXy3YJ3lcA0QuS1vJXrQgg.roa
File: x4Nd7pXy3YJ3lcA0QuS1vJXrQgg.roa (raw, json)
Hash identifier: xwDdXdXLRTG1q+0cjYI7zUxj9DXzdJWHE5K8kxl0y+I=
Subject key identifier: C7:83:5D:EE:95:F2:DD:82:77:95:C0:34:42:E4:B5:BC:95:EB:42:08
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A077023ED03338F8ABD5E151EFBFD3714
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x4Nd7pXy3YJ3lcA0QuS1vJXrQgg.roa
Signing time: Fri 18 Aug 2023 06:58:24 +0000
ROA not before: Fri 18 Aug 2023 06:58:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.243.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.45.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.178.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.186.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.187.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Aug 2023 08:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:70:23:ed:03:33:8f:8a:bd:5e:15:1e:fb:fd:37:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 18 06:58:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7835dee95f2dd827795c03442e4b5bc95eb4208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:75:ed:53:fb:b2:4b:2f:b8:c4:4b:37:25:
5c:68:28:5d:25:87:19:c4:48:a7:a2:eb:ae:50:dc:
c5:fb:58:88:e8:2e:11:d1:6e:69:cf:e5:ea:e0:e6:
16:9e:71:b9:eb:8a:74:eb:e7:ad:d8:9f:86:e8:5f:
d2:7c:aa:38:d3:5c:95:05:7f:5d:03:37:70:10:3c:
e9:80:60:71:08:8c:01:99:78:2c:88:56:16:27:df:
a7:f2:7a:8c:a3:70:8f:76:68:1a:ae:f7:6b:25:78:
45:dc:96:92:d2:e3:2c:f0:a1:80:1d:b2:64:7b:b8:
43:34:52:e8:4d:99:3f:e4:8d:f2:36:c9:75:89:5e:
54:dc:de:2d:3b:67:1a:b9:3f:09:82:49:c1:d4:39:
8d:02:03:f5:7e:8a:69:7b:ea:94:d0:b7:7f:78:52:
81:70:e7:4f:11:d7:8f:53:c0:73:ea:2e:50:06:31:
53:2b:f9:69:f3:3f:c9:b1:7a:15:59:d7:b7:4e:83:
2e:95:43:ed:cc:95:1d:31:61:38:21:f6:79:d4:fa:
bc:31:3b:2f:af:ad:ce:4b:04:7f:68:31:61:e5:56:
d2:7b:6e:ca:fa:50:f8:59:da:82:1f:35:b4:e1:a6:
1e:94:22:a7:bb:7e:66:65:22:b0:a5:c2:cb:16:e2:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:83:5D:EE:95:F2:DD:82:77:95:C0:34:42:E4:B5:BC:95:EB:42:08
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x4Nd7pXy3YJ3lcA0QuS1vJXrQgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0-82.153.250.255
89.213.5.0/24
89.213.44.0/23
89.213.133.0-89.213.134.255
89.213.136.0/24
89.213.139.0-89.213.141.255
89.213.146.0/24
89.213.148.0-89.213.155.255
89.213.157.0-89.213.160.255
89.213.162.0-89.213.164.255
89.213.168.0/23
89.213.172.0-89.213.189.255
109.176.211.0/24
109.176.216.0/21
109.176.240.0/24
109.176.242.0/23
109.176.245.0-109.176.246.255
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2c:a9:c7:81:c4:0c:6f:b9:4c:d7:75:47:e7:1e:6c:8e:7a:
0c:12:87:53:0e:7e:55:5e:81:70:31:6e:d9:82:8e:88:92:6f:
2d:87:6c:01:a4:ba:dc:43:79:6d:42:40:38:fe:2e:a5:b6:4b:
f9:a2:21:20:1c:6f:71:20:31:62:2d:1d:dc:c6:e2:f5:51:b1:
70:fa:e5:a4:4c:50:d7:96:cc:03:05:69:ba:10:96:0d:c6:fe:
c3:ff:e7:bf:a4:c8:aa:8d:a8:76:40:5a:ec:75:fd:80:41:32:
e4:52:0d:0b:99:d1:9e:d5:c5:cf:15:30:0b:56:65:ad:a5:3f:
0d:5c:ed:70:6e:7a:c2:f0:94:4b:95:bb:ba:4b:40:6e:83:b3:
de:53:b4:64:44:4b:b3:9a:a5:63:6b:35:29:c0:83:b6:8e:eb:
0e:63:0b:b8:4d:a1:96:c1:37:c8:89:35:31:d8:c1:c7:e2:32:
f1:35:12:79:3a:d1:c7:e2:e3:bf:bd:a9:39:3a:5c:ae:87:90:
3a:ff:2f:62:2d:58:eb:6c:5a:92:8c:06:21:57:5c:17:c1:8e:
ee:1c:e2:55:1f:74:e9:3c:10:b0:9b:fd:36:bb:f1:91:21:5f:
65:ab:c7:f1:b7:fe:7b:8c:d4:59:f4:1d:5e:0d:fb:75:20:7a:
1e:a0:78:be
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISAYoHcCPtAzOPir1eFR77/TcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODE4MDY1ODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzgzNWRlZTk1ZjJkZDgyNzc5NWMwMzQ0MmU0YjViYzk1ZWI0MjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t917VP7sksvuMRLNyVcaChdJYcZ
xEinouuuUNzF+1iI6C4R0W5pz+Xq4OYWnnG564p06+et2J+G6F/SfKo401yVBX9d
AzdwEDzpgGBxCIwBmXgsiFYWJ9+n8nqMo3CPdmgarvdrJXhF3JaS0uMs8KGAHbJk
e7hDNFLoTZk/5I3yNsl1iV5U3N4tO2cauT8JgknB1DmNAgP1foppe+qU0Ld/eFKB
cOdPEdePU8Bz6i5QBjFTK/lp8z/JsXoVWde3ToMulUPtzJUdMWE4IfZ51Pq8MTsv
r63OSwR/aDFh5VbSe27K+lD4WdqCHzW04aYelCKnu35mZSKwpcLLFuKEsQIDAQAB
o4IDSTCCA0UwHQYDVR0OBBYEFMeDXe6V8t2Cd5XANELktbyV60IIMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEveDROZDdwWHkzWUozbGNBMFF1UzF2SlhyUWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCAUQEAgABMIIB
PAMEAFEFnAMEAFGoKQMEAFGodAMEAFGodwMEAFGoewMEAFKYbwMEAVKY/AMEAFKY
/wMEAFKZAQMEAFKZSQMEAFKZTjAMAwQDUpmIAwQAUpmMAwQAUpndAwQAUpnfAwQA
UpnhAwQAUpnjAwQAUpnwMAwDBABSmfkDBABSmfoDBABZ1QUDBAFZ1SwwDAMEAFnV
hQMEAFnVhgMEAFnViDAMAwQAWdWLAwQBWdWMAwQAWdWSMAwDBAJZ1ZQDBAJZ1Zgw
DAMEAFnVnQMEAFnVoDAMAwQBWdWiAwQAWdWkAwQBWdWoMAwDBAJZ1awDBAFZ1bwD
BABtsNMDBANtsNgDBABtsPADBAFtsPIwDAMEAG2w9QMEAG2w9jAMAwQDbbD4AwQA
bbD6MAwDBAC5MX0DBAe5MQADBADVmCoDBADVmD0wDQYJKoZIhvcNAQELBQADggEB
AEAsqceBxAxvuUzXdUfnHmyOegwSh1MOflVegXAxbtmCjoiSby2HbAGkutxDeW1C
QDj+LqW2S/miISAcb3EgMWItHdzG4vVRsXD65aRMUNeWzAMFaboQlg3G/sP/57+k
yKqNqHZAWux1/YBBMuRSDQuZ0Z7Vxc8VMAtWZa2lPw1c7XBuesLwlEuVu7pLQG6D
s95TtGRES7OapWNrNSnAg7aO6w5jC7hNoZbBN8iJNTHYwcfiMvE1Enk60cfi47+9
qTk6XK6HkDr/L2ItWOtsWpKMBiFXXBfBju4c4lUfdOk8ELCb/Ta78ZEhX2Wrx/G3
/nuM1Fn0HV4N+3Ugeh6geL4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org