Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UBEbGzzq2yzfMQPfmC1cr15gSgk.roa
File: UBEbGzzq2yzfMQPfmC1cr15gSgk.roa (raw, json)
Hash identifier: HB+u/TjpCO+7TtJvDaSF9DDPiOfwRR1/4QUH0obKRxg=
Subject key identifier: 50:11:1B:1B:3C:EA:DB:2C:DF:31:03:DF:98:2D:5C:AF:5E:60:4A:09
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019614758C34191F56354E61A65720213DFE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UBEbGzzq2yzfMQPfmC1cr15gSgk.roa
Signing time: Tue 08 Apr 2025 08:12:50 +0000
ROA not before: Tue 08 Apr 2025 08:12:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.216.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.153.218.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.210.62.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 16:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:75:8c:34:19:1f:56:35:4e:61:a6:57:20:21:3d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 8 08:12:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50111b1b3ceadb2cdf3103df982d5caf5e604a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:5a:02:17:4f:4b:c4:56:a7:a8:6d:cd:a4:
5e:d3:59:26:a3:da:bb:3f:37:43:8f:08:df:7c:43:
d5:aa:1d:ce:b5:53:8b:4a:5f:a5:e8:e7:e1:a7:0e:
ec:dc:4c:70:bf:7b:06:f2:61:56:e4:4c:99:bb:44:
ca:77:05:33:22:42:c5:47:d1:aa:a3:03:f8:0c:47:
0f:85:91:08:50:37:ea:67:39:b0:29:a9:67:32:8e:
01:1f:bf:f3:fe:cc:29:a7:59:6d:26:b3:be:de:2e:
4c:05:a2:75:fd:ab:b2:81:99:12:8c:10:3b:b4:c9:
b8:7c:2b:f2:e0:47:76:c1:c1:9f:cb:7d:ad:38:17:
fe:ad:cb:2b:2c:a2:82:c3:e5:64:8a:18:e2:85:af:
6e:4b:40:1e:6e:e1:dc:d4:df:eb:fe:24:e1:29:a8:
3a:63:23:4f:87:d5:42:12:15:fc:1e:cd:7c:51:dc:
6a:c8:ef:b9:5b:b7:17:fb:c5:b2:f6:9d:2b:16:49:
eb:8c:db:13:fa:05:e3:11:50:4e:3a:46:c4:0d:17:
ea:3c:f6:6f:ec:ab:e4:df:e1:c5:de:a2:1b:14:95:
2a:74:36:d6:67:2e:4f:6a:db:54:ec:ec:1b:00:20:
42:be:ea:4a:32:90:a7:24:e4:21:bf:41:b1:e8:26:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:1B:1B:3C:EA:DB:2C:DF:31:03:DF:98:2D:5C:AF:5E:60:4A:09
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UBEbGzzq2yzfMQPfmC1cr15gSgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.131.0/24
82.152.176.0/23
82.153.50.0/24
82.153.69.0/24
82.153.136.0/22
82.153.216.0-82.153.218.255
82.153.243.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.193.0/24
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.210.62.0/24
213.218.211.0/24
213.218.226.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
83:ac:6b:2f:7b:64:a0:ba:6c:a7:01:05:1e:6d:1f:2c:ca:35:
98:22:de:d3:63:91:ee:0d:2b:46:fb:de:b6:92:16:bc:fe:bb:
56:ed:71:58:63:c2:c4:41:ef:aa:b3:8c:39:56:3d:cf:1f:26:
86:75:d8:9b:87:0d:bd:b5:d8:e6:5c:4d:53:65:7f:2d:2d:da:
53:be:84:8b:29:8b:6e:40:15:b0:e1:51:94:47:86:92:e3:4f:
13:24:9f:08:de:6b:33:5a:ef:62:a5:1e:c4:48:b0:b9:7e:27:
a2:7a:26:80:ea:27:27:93:f2:79:9c:c6:af:89:b7:cc:a3:8f:
97:8e:7d:68:2d:f7:0c:73:a4:dc:8c:e4:fd:5c:34:01:cb:e3:
6d:91:0d:00:71:16:7e:2c:82:36:42:28:a7:c3:a4:c2:ab:ee:
d1:1e:f6:56:1e:44:ad:65:13:02:5e:a7:7d:d1:48:da:9c:07:
4d:27:1d:52:7b:5d:40:4c:ee:82:3a:76:57:b7:a6:69:9d:83:
f4:ce:8d:39:38:7e:df:d7:04:20:02:32:81:3a:af:75:31:69:
ab:99:6e:48:1c:98:15:d2:a0:21:72:d6:ab:a2:c9:40:2d:df:
bb:e8:7f:88:33:65:84:62:98:8c:de:a5:a2:f6:0d:bc:af:01:
9f:9e:67:40
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgISAZYUdYw0GR9WNU5hplcgIT3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNDA4MDgxMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDExMWIxYjNjZWFkYjJjZGYzMTAzZGY5ODJkNWNhZjVlNjA0YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9FaAhdPS8RWp6htzaRe01kmo9q7
PzdDjwjffEPVqh3OtVOLSl+l6Ofhpw7s3Exwv3sG8mFW5EyZu0TKdwUzIkLFR9Gq
owP4DEcPhZEIUDfqZzmwKalnMo4BH7/z/swpp1ltJrO+3i5MBaJ1/auygZkSjBA7
tMm4fCvy4Ed2wcGfy32tOBf+rcsrLKKCw+Vkihjiha9uS0AebuHc1N/r/iThKag6
YyNPh9VCEhX8Hs18UdxqyO+5W7cX+8Wy9p0rFknrjNsT+gXjEVBOOkbEDRfqPPZv
7Kvk3+HF3qIbFJUqdDbWZy5PattU7OwbACBCvupKMpCnJOQhv0Gx6CY2cQIDAQAB
o4IDaTCCA2UwHQYDVR0OBBYEFFARGxs86tss3zED35gtXK9eYEoJMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvVUJFYkd6enEyeXpmTVFQZm1DMWNyMTVnU2drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBfQYIKwYBBQUHAQcBAf8EggFsMIIBaDCCAWQEAgABMIIB
XAMEAFKYCAMEAFKYgwMEAVKYsAMEAFKZMgMEAFKZRQMEAlKZiDAMAwQDUpnYAwQA
UpnaAwQAUpnzAwQBWdUsMAwDBAFZ1TIDBAJZ1TgDBABZ1X8DBABZ1YEDBABZ1YQD
BABZ1YsDBABZ1Y8wDAMEAFnVkQMEAFnVkjAMAwQCWdWUAwQFWdWAAwQAWdWiAwQA
WdWkAwQAWdWnAwQAWdWpMAwDBABZ1asDBABZ1bADBABZ1bUDBABZ1bcDBABZ1b8w
DAMEAlnVxAMEBFnVwDAMAwQCWdXkAwQEWdXgAwQDbbAQAwQAbbDBAwQCbbDMAwQB
bbDyAwQAbbD8AwQBuTF+AwQAuWUvAwQEwmlQAwQA1CZPAwQB1CZYAwQC1YKEAwQA
1ZgrAwQC1dI0AwQA1dI+AwQA1drTAwQA1driMAwDBALV2vQDBADV2vgwDAMEANmR
QQMEANmRQgMEA9mRSDANBgkqhkiG9w0BAQsFAAOCAQEAg6xrL3tkoLpspwEFHm0f
LMo1mCLe02OR7g0rRvvetpIWvP67Vu1xWGPCxEHvqrOMOVY9zx8mhnXYm4cNvbXY
5lxNU2V/LS3aU76EiymLbkAVsOFRlEeGkuNPEySfCN5rM1rvYqUexEiwuX4nonom
gOonJ5PyeZzGr4m3zKOPl459aC33DHOk3Izk/Vw0AcvjbZENAHEWfiyCNkIop8Ok
wqvu0R72Vh5ErWUTAl6nfdFI2pwHTScdUntdQEzugjp2V7emaZ2D9M6NOTh+39cE
IAIygTqvdTFpq5luSByYFdKgIXLWq6LJQC3fu+h/iDNlhGKYjN6lovYNvK8Bn55n
QA==
-----END CERTIFICATE-----
Generated at Fri May 2 06:08:32 2025 by rpki-client