Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nWOV_qEz_uP6IpsqKExxSDLALgs.roa
File: nWOV_qEz_uP6IpsqKExxSDLALgs.roa (raw, json)
Hash identifier: Yo8QYqbpzJEL+GshKEkcLppz2Rp62BtCMHIsrd7hFC8=
Subject key identifier: 9D:63:95:FE:A1:33:FE:E3:FA:22:9B:2A:28:4C:71:48:32:C0:2E:0B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196D344E882998465AC5B81B3DF22E0EA6E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nWOV_qEz_uP6IpsqKExxSDLALgs.roa
Signing time: Thu 15 May 2025 09:27:10 +0000
ROA not before: Thu 15 May 2025 09:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:44:e8:82:99:84:65:ac:5b:81:b3:df:22:e0:ea:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 15 09:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d6395fea133fee3fa229b2a284c714832c02e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:d0:bf:fe:03:15:d1:d5:62:03:78:59:62:
a9:c9:fe:ed:0f:51:97:57:fd:d3:01:e5:44:d0:37:
17:ea:28:6f:21:c2:a1:1d:b4:36:4e:66:ed:e5:56:
75:50:74:a3:f8:1e:78:68:e4:bb:8c:7a:d9:93:39:
e2:fe:5d:4f:5b:bb:7a:c0:e4:11:e0:9e:78:22:31:
b5:ee:5f:3a:55:9b:f1:7c:35:0b:23:39:b4:7c:0a:
aa:a9:cd:5d:89:84:e1:6a:d5:d5:4a:0f:37:14:d6:
48:ef:9a:60:47:e8:17:b8:03:04:59:f0:83:7d:70:
c9:a1:ea:34:5f:e0:e9:62:e2:a3:18:6d:50:e4:e9:
61:a1:2b:ae:2a:4b:2e:5e:2b:cf:a3:77:c2:f0:df:
73:18:55:5d:e0:c9:4a:b9:2d:02:a6:ed:a5:b8:5e:
6d:21:71:9e:73:7e:ba:d3:1a:75:9f:c5:7b:dd:ed:
a8:7e:1a:9d:d2:31:81:49:f1:fb:8c:57:8b:dc:0f:
eb:c0:a0:41:bb:47:f2:5e:d5:b1:ae:24:47:de:40:
9f:9c:8d:96:62:1c:5f:ea:6f:df:72:12:78:d8:d6:
2e:4c:7a:35:8a:f1:be:95:ce:7a:c8:07:27:b7:45:
46:9b:57:24:37:43:c4:b0:c9:84:c7:f2:8f:8f:a8:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:63:95:FE:A1:33:FE:E3:FA:22:9B:2A:28:4C:71:48:32:C0:2E:0B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nWOV_qEz_uP6IpsqKExxSDLALgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.224.0/24
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.239.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
35:5a:c7:5c:92:73:17:b9:4a:6b:1f:cb:68:19:b4:d2:4e:a7:
92:67:eb:05:f6:c9:a3:95:f3:9e:3c:4e:43:88:a3:0d:ac:4f:
93:2e:09:93:d6:16:41:9f:88:f9:97:45:8d:98:c3:ff:06:22:
00:37:57:3f:c3:c8:4e:ce:46:12:0d:22:86:fb:4a:aa:46:c4:
92:8f:5e:fc:f2:cc:af:48:d4:70:4a:eb:be:58:b1:8a:57:b2:
d8:ae:a6:34:57:ce:70:f4:d5:0a:19:b9:7a:d0:44:1e:f1:88:
bd:9a:f5:f3:d2:22:a0:89:10:b1:99:cc:c5:dc:d2:8b:f3:17:
57:d7:5d:ab:5c:1a:39:2b:ac:ab:9f:41:4a:bc:1c:e9:7d:95:
67:a4:f2:ed:4d:7b:81:37:9f:ee:d4:62:c2:07:24:44:db:13:
13:aa:93:4c:9a:23:63:9c:aa:fc:b4:94:ab:2b:7a:bd:e4:98:
21:09:39:10:13:c6:25:7c:40:7e:cf:2a:ae:f9:8c:f6:e7:d5:
ae:76:24:a3:ac:d0:5f:bf:4f:b2:e8:0d:95:ae:c6:da:4c:5d:
b7:3f:14:43:77:6a:ad:ff:a7:2a:2d:94:62:67:fb:15:49:0c:
15:91:7b:88:10:3d:7c:52:4c:91:3d:d0:17:54:52:f4:da:ef:
78:d4:82:84
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgISAZbTROiCmYRlrFuBs98i4OpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNTE1MDkyNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDYzOTVmZWExMzNmZWUzZmEyMjliMmEyODRjNzE0ODMyYzAyZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqbQv/4DFdHVYgN4WWKpyf7tD1GX
V/3TAeVE0DcX6ihvIcKhHbQ2Tmbt5VZ1UHSj+B54aOS7jHrZkzni/l1PW7t6wOQR
4J54IjG17l86VZvxfDULIzm0fAqqqc1diYThatXVSg83FNZI75pgR+gXuAMEWfCD
fXDJoeo0X+DpYuKjGG1Q5OlhoSuuKksuXivPo3fC8N9zGFVd4MlKuS0Cpu2luF5t
IXGec3660xp1n8V73e2ofhqd0jGBSfH7jFeL3A/rwKBBu0fyXtWxriRH3kCfnI2W
Yhxf6m/fchJ42NYuTHo1ivG+lc56yAcnt0VGm1ckN0PEsMmEx/KPj6hdqQIDAQAB
o4IDQTCCAz0wHQYDVR0OBBYEFJ1jlf6hM/7j+iKbKihMcUgywC4LMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbldPVl9xRXpfdVA2SXBzcUtFeHhTRExBTGdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVQYIKwYBBQUHAQcBAf8EggFEMIIBQDCCATwEAgABMIIB
NAMEAFKYCAMEAVKYsAMEAFKZRQMEAlKZiAMEAFKZ2QMEAFKZ/wMEAVnVLDAMAwQB
WdUyAwQCWdU4AwQAWdWBAwQAWdWEAwQAWdWLAwQAWdWPMAwDBABZ1ZEDBABZ1ZIw
DAMEAlnVlAMEBVnVgAMEAFnVogMEAFnVpAMEAFnVpwMEAFnVqTAMAwQAWdWrAwQA
WdWwAwQAWdW1AwQAWdW3AwQAWdW/MAwDBAJZ1cQDBARZ1cADBABZ1dQDBABZ1eAw
DAMEAlnV5AMEBFnV4AMEA22wEAMEAm2wzAMEAW2w8gMEAbkxfgMEALllLwMEBMJp
UAMEANQmTwMEAdQmWAMEAtWChAMEANWYKwMEAtXSNAMEANXa0wMEANXa7wMEAtXa
9DAMAwQA2ZFBAwQA2ZFCAwQD2ZFIMA0GCSqGSIb3DQEBCwUAA4IBAQA1WsdcknMX
uUprH8toGbTSTqeSZ+sF9smjlfOePE5DiKMNrE+TLgmT1hZBn4j5l0WNmMP/BiIA
N1c/w8hOzkYSDSKG+0qqRsSSj1788syvSNRwSuu+WLGKV7LYrqY0V85w9NUKGbl6
0EQe8Yi9mvXz0iKgiRCxmczF3NKL8xdX112rXBo5K6yrn0FKvBzpfZVnpPLtTXuB
N5/u1GLCByRE2xMTqpNMmiNjnKr8tJSrK3q95JghCTkQE8YlfEB+zyqu+Yz259Wu
diSjrNBfv0+y6A2VrsbaTF23PxRDd2qt/6cqLZRiZ/sVSQwVkXuIED18UkyRPdAX
VFL02u941IKE
-----END CERTIFICATE-----
Generated at Sat May 17 02:16:00 2025 by rpki-client