Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/PAPGaGxJdsZ6eNAMt0Xd2Ee6zyg.roa
File: PAPGaGxJdsZ6eNAMt0Xd2Ee6zyg.roa (raw, json)
Hash identifier: dodOgnXvLPYFMWKMiGZNoMNRKXMWGGUCdzvoEdG30wo=
Subject key identifier: 3C:03:C6:68:6C:49:76:C6:7A:78:D0:0C:B7:45:DD:D8:47:BA:CF:28
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 019593BB232739B4C6FB3F85CB0B2A8776D0
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/PAPGaGxJdsZ6eNAMt0Xd2Ee6zyg.roa
Signing time: Fri 14 Mar 2025 08:17:49 +0000
ROA not before: Fri 14 Mar 2025 08:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272809
IP address blocks: 82.86.64.0/22 maxlen: 22
82.86.64.0/24 maxlen: 24
82.86.65.0/24 maxlen: 24
82.86.66.0/24 maxlen: 24
82.86.67.0/24 maxlen: 24
82.86.68.0/22 maxlen: 22
82.86.68.0/24 maxlen: 24
82.86.69.0/24 maxlen: 24
82.86.70.0/24 maxlen: 24
82.86.71.0/24 maxlen: 24
82.86.72.0/22 maxlen: 22
82.86.72.0/24 maxlen: 24
82.86.73.0/24 maxlen: 24
82.86.74.0/24 maxlen: 24
82.86.75.0/24 maxlen: 24
82.86.76.0/22 maxlen: 22
82.86.76.0/24 maxlen: 24
82.86.77.0/24 maxlen: 24
82.86.78.0/24 maxlen: 24
82.86.79.0/24 maxlen: 24
82.86.80.0/22 maxlen: 22
82.86.80.0/24 maxlen: 24
82.86.81.0/24 maxlen: 24
82.86.82.0/24 maxlen: 24
82.86.83.0/24 maxlen: 24
82.86.84.0/22 maxlen: 22
82.86.84.0/24 maxlen: 24
82.86.85.0/24 maxlen: 24
82.86.86.0/24 maxlen: 24
82.86.87.0/24 maxlen: 24
82.86.88.0/22 maxlen: 22
82.86.88.0/24 maxlen: 24
82.86.89.0/24 maxlen: 24
82.86.90.0/24 maxlen: 24
82.86.91.0/24 maxlen: 24
82.86.92.0/22 maxlen: 22
82.86.92.0/24 maxlen: 24
82.86.93.0/24 maxlen: 24
82.86.94.0/24 maxlen: 24
82.86.95.0/24 maxlen: 24
82.86.96.0/22 maxlen: 22
82.86.96.0/24 maxlen: 24
82.86.97.0/24 maxlen: 24
82.86.98.0/24 maxlen: 24
82.86.99.0/24 maxlen: 24
82.86.100.0/22 maxlen: 22
82.86.100.0/24 maxlen: 24
82.86.101.0/24 maxlen: 24
82.86.102.0/24 maxlen: 24
82.86.103.0/24 maxlen: 24
82.86.128.0/22 maxlen: 22
82.86.128.0/24 maxlen: 24
82.86.129.0/24 maxlen: 24
82.86.130.0/24 maxlen: 24
82.86.131.0/24 maxlen: 24
82.86.132.0/22 maxlen: 22
82.86.132.0/24 maxlen: 24
82.86.133.0/24 maxlen: 24
82.86.134.0/24 maxlen: 24
82.86.135.0/24 maxlen: 24
82.86.136.0/22 maxlen: 22
82.86.136.0/24 maxlen: 24
82.86.137.0/24 maxlen: 24
82.86.138.0/24 maxlen: 24
82.86.139.0/24 maxlen: 24
82.86.140.0/22 maxlen: 22
82.86.140.0/24 maxlen: 24
82.86.141.0/24 maxlen: 24
82.86.142.0/24 maxlen: 24
82.86.143.0/24 maxlen: 24
82.86.144.0/22 maxlen: 22
82.86.144.0/24 maxlen: 24
82.86.145.0/24 maxlen: 24
82.86.146.0/24 maxlen: 24
82.86.147.0/24 maxlen: 24
82.86.148.0/22 maxlen: 22
82.86.148.0/24 maxlen: 24
82.86.149.0/24 maxlen: 24
82.86.150.0/24 maxlen: 24
82.86.151.0/24 maxlen: 24
82.86.152.0/22 maxlen: 22
82.86.152.0/24 maxlen: 24
82.86.153.0/24 maxlen: 24
82.86.154.0/24 maxlen: 24
82.86.155.0/24 maxlen: 24
82.86.156.0/22 maxlen: 22
82.86.156.0/24 maxlen: 24
82.86.157.0/24 maxlen: 24
82.86.158.0/24 maxlen: 24
82.86.159.0/24 maxlen: 24
82.86.160.0/22 maxlen: 22
82.86.160.0/24 maxlen: 24
82.86.161.0/24 maxlen: 24
82.86.162.0/24 maxlen: 24
82.86.163.0/24 maxlen: 24
82.86.164.0/22 maxlen: 22
82.86.164.0/24 maxlen: 24
82.86.165.0/24 maxlen: 24
82.86.166.0/24 maxlen: 24
82.86.167.0/24 maxlen: 24
82.86.249.0/24 maxlen: 24
82.86.250.0/24 maxlen: 24
82.86.251.0/24 maxlen: 24
82.86.252.0/24 maxlen: 24
82.86.253.0/24 maxlen: 24
82.86.254.0/24 maxlen: 24
82.86.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 08:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:bb:23:27:39:b4:c6:fb:3f:85:cb:0b:2a:87:76:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Mar 14 08:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c03c6686c4976c67a78d00cb745ddd847bacf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:57:4b:ef:e8:5d:7e:6f:fa:1f:71:ce:ff:
3a:36:2c:d4:59:ba:2a:56:10:38:77:2e:b0:57:44:
eb:0f:42:8c:aa:03:23:c9:7c:39:9d:90:eb:58:6c:
c8:0d:dc:6c:7c:4b:f7:7c:d1:8e:e0:19:cf:f6:7e:
14:40:74:d3:6c:ec:96:89:30:7e:1d:62:4a:62:27:
ee:d8:4e:e0:40:7d:65:7b:ee:b3:45:42:f6:65:27:
fe:e0:c9:3c:b3:20:1e:47:d7:a1:bf:9b:42:88:79:
41:2e:4f:33:04:10:4d:1f:23:7b:a2:30:dc:cf:c8:
c2:b9:2b:39:b6:08:91:b9:5c:63:c9:f2:2f:e3:a5:
8e:cb:24:74:e3:96:fa:8d:69:fb:cb:bc:b4:66:16:
05:c3:5e:68:53:76:f2:20:1d:8b:26:34:84:31:9f:
c1:72:fd:39:83:a2:af:e9:ac:a1:12:b3:67:60:a7:
de:97:43:94:fa:2e:a8:85:63:e9:a4:91:76:27:a7:
e6:dc:a8:92:61:97:90:71:bf:7d:19:80:08:3a:b3:
38:9a:78:2d:37:63:e2:69:ee:03:53:c9:f8:f3:89:
aa:d2:5a:61:b2:85:c3:f8:4e:44:21:13:91:1f:2c:
30:ff:05:e2:5d:3d:e2:c6:e9:78:fc:68:42:10:59:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:03:C6:68:6C:49:76:C6:7A:78:D0:0C:B7:45:DD:D8:47:BA:CF:28
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/PAPGaGxJdsZ6eNAMt0Xd2Ee6zyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.64.0-82.86.103.255
82.86.128.0-82.86.167.255
82.86.249.0-82.86.255.255
Signature Algorithm: sha256WithRSAEncryption
8e:ca:0b:50:90:db:0c:aa:f2:eb:d8:33:98:85:a2:1e:8d:5c:
91:f3:ae:89:b6:bc:ce:08:ad:d4:aa:f4:23:8d:d7:f0:c5:48:
a0:13:74:64:56:62:19:6a:85:83:dc:3a:7d:9f:4d:76:e3:b4:
08:36:04:c9:e6:74:d7:4a:07:d1:b3:e1:7f:cb:9b:7b:67:2c:
4b:d5:79:5c:c5:a0:81:db:39:f3:d9:54:8e:0c:b2:3d:30:84:
8a:36:11:18:46:c3:a2:d2:e4:26:3a:23:db:c1:0f:6f:7d:2d:
b2:71:73:91:e8:0f:ed:15:53:7a:77:25:16:56:09:fb:bd:55:
80:1d:58:d7:84:bb:65:0e:2b:97:c5:97:d9:c5:8c:00:33:6f:
66:46:7b:f1:12:19:d2:c8:9d:8b:85:e1:b3:ee:6b:69:22:b1:
19:d2:23:6e:c9:dd:40:69:9a:5b:82:d9:be:3e:0b:f3:d7:ba:
e4:c4:96:9e:fc:86:c1:3b:18:66:98:10:d5:24:56:c9:38:01:
a4:63:bc:92:91:a0:5f:94:86:27:56:44:92:8f:43:a7:c8:1d:
92:66:43:25:85:67:d3:de:96:07:3d:d2:42:f7:34:d6:02:33:
41:d1:d6:59:85:47:a8:e8:3d:38:15:67:db:33:87:b1:da:84:
8a:df:09:12
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZWTuyMnObTG+z+Fywsqh3bQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4
NzQzZTUwHhcNMjUwMzE0MDgxNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzAzYzY2ODZjNDk3NmM2N2E3OGQwMGNiNzQ1ZGRkODQ3YmFjZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspFXS+/oXX5v+h9xzv86NizUWboq
VhA4dy6wV0TrD0KMqgMjyXw5nZDrWGzIDdxsfEv3fNGO4BnP9n4UQHTTbOyWiTB+
HWJKYifu2E7gQH1le+6zRUL2ZSf+4Mk8syAeR9ehv5tCiHlBLk8zBBBNHyN7ojDc
z8jCuSs5tgiRuVxjyfIv46WOyyR045b6jWn7y7y0ZhYFw15oU3byIB2LJjSEMZ/B
cv05g6Kv6ayhErNnYKfel0OU+i6ohWPppJF2J6fm3KiSYZeQcb99GYAIOrM4mngt
N2Piae4DU8n484mq0lphsoXD+E5EIRORHyww/wXiXT3ixul4/GhCEFmxZQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFDwDxmhsSXbGenjQDLdF3dhHus8oMB8GA1UdIwQY
MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut
ODIyZWE0M2RjMThkLzEvUEFQR2FHeEpkc1o2ZU5BTXQwWGQyRWU2enlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk
LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAvBAIAATApMAwDBAZSVkAD
BANSVmAwDAMEB1JWgAMEA1JWoDALAwQAUlb5AwMAUlYwDQYJKoZIhvcNAQELBQAD
ggEBAI7KC1CQ2wyq8uvYM5iFoh6NXJHzrom2vM4IrdSq9CON1/DFSKATdGRWYhlq
hYPcOn2fTXbjtAg2BMnmdNdKB9Gz4X/Lm3tnLEvVeVzFoIHbOfPZVI4Msj0whIo2
ERhGw6LS5CY6I9vBD299LbJxc5HoD+0VU3p3JRZWCfu9VYAdWNeEu2UOK5fFl9nF
jAAzb2ZGe/ESGdLInYuF4bPua2kisRnSI27J3UBpmluC2b4+C/PXuuTElp78hsE7
GGaYENUkVsk4AaRjvJKRoF+UhidWRJKPQ6fIHZJmQyWFZ9Pelgc90kL3NNYCM0HR
1lmFR6joPTgVZ9szh7HahIrfCRI=
-----END CERTIFICATE-----
Generated at Sat May 10 11:20:58 2025 by rpki-client