Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/82qroqZLDX-JU8PwIo_vbQhsUoo.roa
File: 82qroqZLDX-JU8PwIo_vbQhsUoo.roa (raw, json)
Hash identifier: e1JY+CDRe+YSOksaVZsErsUeZc3xfGouxI3KHmHPhw8=
Subject key identifier: F3:6A:AB:A2:A6:4B:0D:7F:89:53:C3:F0:22:8F:EF:6D:08:6C:52:8A
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 0194A849A68C6F9F885F7F039924B5102BA4
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/82qroqZLDX-JU8PwIo_vbQhsUoo.roa
Signing time: Mon 27 Jan 2025 15:03:06 +0000
ROA not before: Mon 27 Jan 2025 15:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5411
IP address blocks: 82.196.160.0/19 maxlen: 19
82.196.160.0/20 maxlen: 20
82.196.176.0/20 maxlen: 20
185.222.176.0/22 maxlen: 22
185.222.176.0/23 maxlen: 23
185.222.178.0/23 maxlen: 23
193.8.32.0/22 maxlen: 22
193.8.32.0/23 maxlen: 23
193.8.34.0/23 maxlen: 23
193.41.168.0/23 maxlen: 23
193.41.168.0/24 maxlen: 24
193.41.169.0/24 maxlen: 24
193.192.54.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 28 Jan 2025 09:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:49:a6:8c:6f:9f:88:5f:7f:03:99:24:b5:10:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 27 15:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f36aaba2a64b0d7f8953c3f0228fef6d086c528a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:05:66:f2:49:7b:2d:f2:23:83:90:88:4a:
53:82:df:e8:0a:8c:18:ae:e8:0a:e4:e3:4b:d9:43:
4e:28:24:16:96:c7:be:cf:ee:2b:b9:09:99:86:aa:
7f:43:05:66:aa:57:87:50:9f:c5:51:79:a1:7f:82:
c9:4e:1d:d0:6a:51:14:3c:31:96:fa:ac:8b:60:88:
05:f8:e7:61:fe:36:a6:7e:c4:ee:37:e1:92:0d:a8:
84:ca:45:cc:db:41:ae:d8:f9:b7:33:5e:21:ae:fa:
91:c1:a6:fd:3b:c5:f0:07:32:5a:26:46:0a:d3:8d:
82:77:e8:cd:04:ae:76:81:f0:d0:4d:ec:c2:a9:ee:
26:bc:d7:61:23:ff:b8:58:1c:ef:2c:16:00:cc:ff:
fd:2d:9f:54:45:d5:eb:e1:bd:b4:b3:bd:e2:81:5c:
90:fe:dd:c6:26:eb:73:c7:31:92:72:46:26:78:d7:
c9:d1:55:20:6f:bc:2c:63:06:f7:7e:48:e1:31:4d:
34:49:c1:24:c9:88:10:c4:76:83:8a:7f:ed:b8:7c:
d3:72:9d:8c:a5:a5:ce:53:87:1f:cb:03:71:d2:79:
3c:a4:a3:8e:f6:16:49:d5:aa:c9:f4:97:2a:cf:a4:
b5:ce:18:57:83:4c:a5:18:35:2e:5a:54:6e:99:96:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6A:AB:A2:A6:4B:0D:7F:89:53:C3:F0:22:8F:EF:6D:08:6C:52:8A
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/82qroqZLDX-JU8PwIo_vbQhsUoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.160.0/19
185.222.176.0/22
193.8.32.0/22
193.41.168.0/23
193.192.54.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:50:7a:3f:15:08:b7:22:52:14:f9:59:a8:11:86:26:fb:c4:
f4:34:79:00:6a:f0:9e:92:75:6e:51:8b:68:c0:4f:4b:8c:22:
15:55:e7:a3:fa:40:ba:b9:b7:3f:d8:f0:3b:bc:37:13:57:46:
9b:c8:0e:4a:60:82:d6:51:cc:7a:d0:a6:7a:41:d5:8d:99:e2:
0b:46:1c:2b:22:43:46:4c:da:9d:1b:40:09:ee:c0:00:0d:0c:
88:24:34:57:e4:e5:c8:4f:12:b3:c5:32:d2:c5:41:a0:1a:74:
ef:ab:32:d8:ca:e6:5a:aa:7a:ff:ae:ea:1f:bd:6a:ae:07:22:
75:1b:7c:39:29:bf:73:75:37:8d:d7:db:1d:40:f3:c2:97:60:
ae:0a:22:5c:2f:5d:6d:5b:a4:ec:e2:45:3b:bb:03:fb:b4:84:
84:4b:00:38:aa:ea:9f:f9:5c:42:88:72:29:e7:87:3c:37:3d:
c0:23:43:7e:bf:7c:e6:76:a1:50:1c:e0:3e:ca:ed:cb:62:56:
63:45:03:d2:95:5b:17:7b:aa:ba:0a:0d:8f:e7:68:d4:81:b1:
95:36:49:83:fa:e5:ab:82:e6:2e:ca:ce:e3:46:5b:94:64:db:
7d:b2:10:d9:b2:33:50:2e:ab:b4:30:68:3e:a2:63:1f:8a:ff:
71:42:1f:7b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZSoSaaMb5+IX38DmSS1ECukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh
NWQ0ZjgwHhcNMjUwMTI3MTUwMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzZhYWJhMmE2NGIwZDdmODk1M2MzZjAyMjhmZWY2ZDA4NmM1MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna0FZvJJey3yI4OQiEpTgt/oCowY
rugK5ONL2UNOKCQWlse+z+4ruQmZhqp/QwVmqleHUJ/FUXmhf4LJTh3QalEUPDGW
+qyLYIgF+Odh/jamfsTuN+GSDaiEykXM20Gu2Pm3M14hrvqRwab9O8XwBzJaJkYK
042Cd+jNBK52gfDQTezCqe4mvNdhI/+4WBzvLBYAzP/9LZ9URdXr4b20s73igVyQ
/t3GJutzxzGSckYmeNfJ0VUgb7wsYwb3fkjhMU00ScEkyYgQxHaDin/tuHzTcp2M
paXOU4cfywNx0nk8pKOO9hZJ1arJ9Jcqz6S1zhhXg0ylGDUuWlRumZZ+sQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPNqq6KmSw1/iVPD8CKP720IbFKKMB8GA1UdIwQY
MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt
MjFjZjU2Y2JjZTEyLzEvODJxcm9xWkxEWC1KVThQd0lvX3ZiUWhzVW9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy
LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFUsSgAwQC
ud6wAwQCwQggAwQBwSmoAwQBwcA2MA0GCSqGSIb3DQEBCwUAA4IBAQCzUHo/FQi3
IlIU+VmoEYYm+8T0NHkAavCeknVuUYtowE9LjCIVVeej+kC6ubc/2PA7vDcTV0ab
yA5KYILWUcx60KZ6QdWNmeILRhwrIkNGTNqdG0AJ7sAADQyIJDRX5OXITxKzxTLS
xUGgGnTvqzLYyuZaqnr/ruofvWquByJ1G3w5Kb9zdTeN19sdQPPCl2CuCiJcL11t
W6Ts4kU7uwP7tISESwA4quqf+VxCiHIp54c8Nz3AI0N+v3zmdqFQHOA+yu3LYlZj
RQPSlVsXe6q6Cg2P52jUgbGVNkmD+uWrguYuys7jRluUZNt9shDZsjNQLqu0MGg+
omMfiv9xQh97
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:52:47 2025 by rpki-client