Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-qj7sVx3LSZ_GSTKAMmzO9w2yaA.roa
File: 1-qj7sVx3LSZ_GSTKAMmzO9w2yaA.roa (raw, json)
Hash identifier: UgM77xJx/wdpSGdc/Wk/li0yTSOIyrYjSzIN6emLLGE=
Subject key identifier: FA:A8:FB:B1:5C:77:2D:26:7F:19:24:CA:00:C9:B3:3B:DC:36:C9:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191D73743F6879CA2945CC60EAD0355BA87
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-qj7sVx3LSZ_GSTKAMmzO9w2yaA.roa
Signing time: Mon 09 Sep 2024 14:36:48 +0000
ROA not before: Mon 09 Sep 2024 14:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.98.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.152.178.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.244.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
217.145.78.0/24 maxlen: 24
217.145.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 13:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:37:43:f6:87:9c:a2:94:5c:c6:0e:ad:03:55:ba:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 9 14:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faa8fbb15c772d267f1924ca00c9b33bdc36c9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:1f:aa:56:d5:13:f9:51:bf:32:50:40:08:
8b:a9:93:85:c2:54:1e:91:d7:92:c0:30:b2:e3:1c:
fc:e8:eb:09:a9:d3:44:3c:16:92:f6:a4:b8:dd:35:
87:0f:03:da:5a:9d:38:db:03:a6:8e:aa:4c:c8:e5:
c5:b3:c4:93:c0:db:b5:82:24:7b:d9:9b:38:68:15:
99:71:3c:04:89:d7:df:28:20:a3:a9:b5:0b:17:0d:
8b:1a:b7:be:b2:e3:12:86:26:59:c2:4b:01:b0:f1:
b6:a2:e1:fb:c0:7b:06:64:f7:98:bd:4b:0b:07:2b:
8e:0c:a4:31:b8:30:12:dc:4d:ad:29:e7:92:53:8e:
73:28:7c:d2:cb:33:15:10:76:1e:7c:30:1d:a0:42:
e6:e1:c4:f0:2e:67:e6:01:0c:1f:ab:f8:f6:ae:9f:
f3:4d:d3:4b:27:77:f3:40:2e:eb:3a:f9:25:72:c1:
59:c9:24:0a:87:ec:68:18:32:d5:36:94:b9:d9:63:
6a:b3:90:34:61:6d:98:cb:4a:fa:70:0b:47:a5:bd:
35:9a:c2:eb:77:a5:2c:c0:b0:fa:4b:a0:6a:e3:c3:
5e:a3:bd:86:bd:b0:cd:be:0e:be:ac:0b:cf:43:d8:
86:9b:ab:f9:54:0c:e7:5c:9c:63:cc:aa:6f:4d:8f:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:FB:B1:5C:77:2D:26:7F:19:24:CA:00:C9:B3:3B:DC:36:C9:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-qj7sVx3LSZ_GSTKAMmzO9w2yaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.98.0/24
82.152.176.0-82.152.178.255
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.145.0/24
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.193.0/24
109.176.204.0/22
109.176.242.0-109.176.244.255
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:77:fc:ea:9e:5d:1b:f8:5e:d5:db:ac:31:06:ad:7a:a3:44:
cd:38:dd:a2:de:8c:92:bf:99:1b:e9:34:f7:31:16:18:dc:05:
66:20:94:bf:95:46:cd:f3:99:37:28:8b:79:df:89:18:69:3c:
6d:83:a7:00:2c:09:cb:b8:62:d4:ae:41:e4:2c:75:d8:c7:7d:
24:f0:e0:98:5d:be:4b:b2:ee:53:b6:bb:f5:44:34:1a:53:5e:
2e:31:6e:66:2e:1d:25:27:71:13:b6:c1:ec:ad:8e:d5:e1:2a:
c2:70:f2:c0:df:37:07:df:0c:24:a2:57:26:e7:56:cf:84:56:
22:68:1b:d6:e0:94:14:22:f8:ab:18:4b:3b:b9:7d:63:12:72:
62:43:b6:7d:d3:5a:8c:b3:be:14:15:d1:50:e7:9e:8e:e8:6b:
35:32:af:4e:e7:17:c5:03:5a:ce:2d:c0:78:ba:db:e8:2b:7b:
e7:84:ec:5c:07:cc:93:cd:e3:4a:7c:c6:79:dc:c1:91:57:c6:
63:f8:7b:8e:7c:83:f2:43:8f:14:7c:08:75:34:e1:4a:d3:41:
9c:ae:d5:30:e5:19:82:bb:f8:88:69:74:34:42:82:f7:2c:7d:
ab:98:b5:57:cb:02:46:a4:0c:c3:33:9c:31:d2:dd:fe:10:74:
de:43:6a:62
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAZHXN0P2h5yilFzGDq0DVbqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwOTA5MTQzNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWE4ZmJiMTVjNzcyZDI2N2YxOTI0Y2EwMGM5YjMzYmRjMzZjOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDMfqlbVE/lRvzJQQAiLqZOFwlQe
kdeSwDCy4xz86OsJqdNEPBaS9qS43TWHDwPaWp042wOmjqpMyOXFs8STwNu1giR7
2Zs4aBWZcTwEidffKCCjqbULFw2LGre+suMShiZZwksBsPG2ouH7wHsGZPeYvUsL
ByuODKQxuDAS3E2tKeeSU45zKHzSyzMVEHYefDAdoELm4cTwLmfmAQwfq/j2rp/z
TdNLJ3fzQC7rOvklcsFZySQKh+xoGDLVNpS52WNqs5A0YW2Yy0r6cAtHpb01msLr
d6UswLD6S6Bq48Neo72GvbDNvg6+rAvPQ9iGm6v5VAznXJxjzKpvTY+gQQIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFPqo+7Fcdy0mfxkkygDJszvcNsmgMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMS1xajdzVngzTFNaX0dTVEtBTW16Tzl3MnlhQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGEvNDlkYzAwLTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3
Yy8xL1A5TU5pbjRTX0h2Mkxnd1NIbnpDSnQ2bE81cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB3QYIKwYBBQUHAQcBAf8Egc0wgcowgccEAgABMIHAAwQA
UphiMAwDBARSmLADBABSmLIDBAJSmYgDBABSmfMDBAFZ1SwDBAFZ1TIDBAJZ1TgD
BABZ1YEDBABZ1ZEwDAMEAlnVlAMEBVnVgAMEAFnVpwMEAlnVrDAMAwQCWdXEAwQE
WdXAMAwDBAJZ1eQDBARZ1eADBANtsBADBABtsMEDBAJtsMwwDAMEAW2w8gMEAG2w
9AMEAbkxfgMEBMJpUAMEAdQmWAMEANXa0zAMAwQA2ZFBAwQA2ZFCAwQD2ZFIMA0G
CSqGSIb3DQEBCwUAA4IBAQB7d/zqnl0b+F7V26wxBq16o0TNON2i3oySv5kb6TT3
MRYY3AVmIJS/lUbN85k3KIt534kYaTxtg6cALAnLuGLUrkHkLHXYx30k8OCYXb5L
su5Ttrv1RDQaU14uMW5mLh0lJ3ETtsHsrY7V4SrCcPLA3zcH3wwkolcm51bPhFYi
aBvW4JQUIvirGEs7uX1jEnJiQ7Z901qMs74UFdFQ556O6Gs1Mq9O5xfFA1rOLcB4
utvoK3vnhOxcB8yTzeNKfMZ53MGRV8Zj+HuOfIPyQ48UfAh1NOFK00GcrtUw5RmC
u/iIaXQ0QoL3LH2rmLVXywJGpAzDM5wx0t3+EHTeQ2pi
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:05:33 2025 by rpki-client