Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ySnJGOn8QQ_pHDr-TU3LKwbbKos.roa
File: ySnJGOn8QQ_pHDr-TU3LKwbbKos.roa (raw, json)
Hash identifier: 8l/bw+QEnMWSzNR0IT39qNY05wPSQDjx3OyHW6bTEnY=
Subject key identifier: C9:29:C9:18:E9:FC:41:0F:E9:1C:3A:FE:4D:4D:CB:2B:06:DB:2A:8B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01924FAC0EDE34C110BAF1C2DACFFC9A1F30
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ySnJGOn8QQ_pHDr-TU3LKwbbKos.roa
Signing time: Wed 02 Oct 2024 23:58:48 +0000
ROA not before: Wed 02 Oct 2024 23:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.222.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
82.163.23.0/24 maxlen: 24
89.213.41.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.63.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.229.0/24 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.16.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 16:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4f:ac:0e:de:34:c1:10:ba:f1:c2:da:cf:fc:9a:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 2 23:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c929c918e9fc410fe91c3afe4d4dcb2b06db2a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:66:be:e3:75:da:61:bf:fa:f6:1b:06:ce:
c3:13:18:4e:d1:74:f8:93:34:f1:d0:d3:3f:5b:15:
9c:e9:46:1b:25:eb:cc:d1:68:48:a4:7e:ec:6a:fd:
c8:08:82:04:67:b8:d1:89:2b:a1:e7:d0:ca:c3:f2:
7c:97:b9:c7:a1:01:6f:13:08:bc:35:cc:16:26:eb:
0d:77:85:1d:b9:a9:29:0c:76:b3:d3:e2:b7:75:a6:
13:5c:e9:8d:81:9f:b1:6c:67:1f:fc:5e:b8:8c:12:
bc:9e:71:1d:a4:ba:d5:8c:03:7b:a7:ac:1e:8d:c4:
c0:43:40:15:c7:fa:65:1f:17:e5:50:c5:d0:5e:af:
2f:9f:df:2b:7d:18:3d:71:43:6c:8e:21:ab:6d:10:
53:c9:59:97:b5:94:99:bc:12:06:ed:af:6a:c1:d3:
aa:4e:4d:cf:22:5d:b4:d0:89:84:b4:60:38:8c:ca:
2f:ba:79:38:79:48:86:4c:5a:85:4c:66:b7:8a:99:
d9:45:00:1c:b1:3b:27:aa:57:d6:73:a5:46:d6:ec:
f7:5d:8a:91:1c:37:d4:e0:2e:80:97:5d:d8:7d:43:
a5:6f:b7:5b:e5:a8:9e:23:a7:42:cb:f1:f8:86:68:
5d:40:d6:cd:54:6c:56:6e:22:25:86:73:ed:09:6f:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:29:C9:18:E9:FC:41:0F:E9:1C:3A:FE:4D:4D:CB:2B:06:DB:2A:8B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ySnJGOn8QQ_pHDr-TU3LKwbbKos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.153.222.0/24
82.153.243.0/24
82.163.23.0/24
89.213.41.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.63.0/24
89.213.129.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:7d:00:d6:10:8e:b5:58:35:57:c2:55:60:a4:8b:b2:d3:9d:
dd:c0:35:4b:00:98:4f:2b:26:4a:b4:30:34:91:39:74:7c:d5:
bd:a3:20:be:83:70:e0:19:d2:58:92:dc:81:86:89:f2:10:cf:
71:18:50:fc:8e:4a:d4:bd:de:57:60:d5:96:d8:31:7c:88:83:
2c:dc:32:cf:3f:86:b8:63:63:3b:65:0f:bb:7d:ca:2c:29:11:
4d:54:45:83:9b:86:b7:9d:55:6a:cd:05:e2:16:51:c7:e0:5e:
02:14:da:9e:4e:6b:f8:af:9a:c1:16:d4:f9:fd:36:0a:b6:4a:
ce:57:c6:1e:ed:90:27:4b:a4:18:76:d5:c7:07:5b:46:fa:5b:
00:6a:f4:a7:55:c6:47:5f:c3:b9:12:64:19:17:49:45:28:b3:
e7:32:24:26:e0:14:30:63:ed:ca:23:95:f0:36:2d:db:2d:dd:
88:1c:0d:d8:98:2e:f0:67:30:d3:9f:44:ef:72:ef:7a:19:2d:
a6:42:cb:01:90:54:79:7e:dc:6b:90:eb:2b:3d:75:f5:b1:4a:
cf:58:c8:06:13:c3:30:c6:8e:de:0f:a7:99:a5:fb:02:f2:49:
c0:f2:4a:21:d2:f7:7e:20:a5:f1:4f:dd:be:84:ee:86:fd:dc:
1b:91:c7:97
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgISAZJPrA7eNMEQuvHC2s/8mh8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMDAyMjM1ODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTI5YzkxOGU5ZmM0MTBmZTkxYzNhZmU0ZDRkY2IyYjA2ZGIyYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PFmvuN12mG/+vYbBs7DExhO0XT4
kzTx0NM/WxWc6UYbJevM0WhIpH7sav3ICIIEZ7jRiSuh59DKw/J8l7nHoQFvEwi8
NcwWJusNd4UduakpDHaz0+K3daYTXOmNgZ+xbGcf/F64jBK8nnEdpLrVjAN7p6we
jcTAQ0AVx/plHxflUMXQXq8vn98rfRg9cUNsjiGrbRBTyVmXtZSZvBIG7a9qwdOq
Tk3PIl200ImEtGA4jMovunk4eUiGTFqFTGa3ipnZRQAcsTsnqlfWc6VG1uz3XYqR
HDfU4C6Al13YfUOlb7db5aieI6dCy/H4hmhdQNbNVGxWbiIlhnPtCW9VHwIDAQAB
o4IC0jCCAs4wHQYDVR0OBBYEFMkpyRjp/EEP6Rw6/k1NyysG2yqLMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEveVNuSkdPbjhRUV9wSERyLVRVM0xLd2JiS29zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCB0QQCAAEwgcoDBAFS
mLADBAJSmYgDBABSmd4DBABSmfMDBABSoxcDBABZ1SkDBAFZ1SwDBAFZ1TIDBAJZ
1TgDBABZ1T8DBABZ1YEDBABZ1YswDAMEAFnVkQMEAFnVkjAMAwQCWdWUAwQFWdWA
AwQAWdWnAwQCWdWsMAwDBAJZ1cQDBARZ1cAwDAMEAlnV5AMEBFnV4AMEA22wEAME
Am2wzAMEAW2w8gMEAbkxfgMEBMJpUAMEAdQmWAMEANXa0zAMAwQA2ZFBAwQA2ZFC
AwQD2ZFIMA0GCSqGSIb3DQEBCwUAA4IBAQBvfQDWEI61WDVXwlVgpIuy053dwDVL
AJhPKyZKtDA0kTl0fNW9oyC+g3DgGdJYktyBhonyEM9xGFD8jkrUvd5XYNWW2DF8
iIMs3DLPP4a4Y2M7ZQ+7fcosKRFNVEWDm4a3nVVqzQXiFlHH4F4CFNqeTmv4r5rB
FtT5/TYKtkrOV8Ye7ZAnS6QYdtXHB1tG+lsAavSnVcZHX8O5EmQZF0lFKLPnMiQm
4BQwY+3KI5XwNi3bLd2IHA3YmC7wZzDTn0Tvcu96GS2mQssBkFR5ftxrkOsrPXX1
sUrPWMgGE8Mwxo7eD6eZpfsC8knA8koh0vd+IKXxT92+hO6G/dwbkceX
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:28:16 2025 by rpki-client