Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197746.roa
File: AS197746.roa (raw, json)
Hash identifier: YYl1mNoIl3zVyiRJQG4Kj3h8Z7+xnYPr1xZQLkucwmc=
Subject key identifier: B8:4A:13:A8:F9:77:24:EA:62:AA:38:CF:D1:FC:B9:AB:2D:8A:F4:4F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 50672881E98A5A92A4A5F6E2B0D1BE75A177E59F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197746.roa
Signing time: Thu 13 Feb 2025 12:01:19 +0000
ROA not before: Thu 13 Feb 2025 11:56:19 +0000
ROA not after: Thu 12 Feb 2026 12:01:19 +0000
asID: 197746
IP address blocks: 82.21.247.0/24 maxlen: 24
82.21.248.0/24 maxlen: 24
82.22.248.0/24 maxlen: 24
82.23.238.0/24 maxlen: 24
82.24.248.0/24 maxlen: 24
82.25.248.0/24 maxlen: 24
82.26.248.0/24 maxlen: 24
82.26.249.0/24 maxlen: 24
82.27.248.0/24 maxlen: 24
82.27.249.0/24 maxlen: 24
82.29.247.0/24 maxlen: 24
82.29.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 08:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:67:28:81:e9:8a:5a:92:a4:a5:f6:e2:b0:d1:be:75:a1:77:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 13 11:56:19 2025 GMT
Not After : Feb 12 12:01:19 2026 GMT
Subject: CN=B84A13A8F97724EA62AA38CFD1FCB9AB2D8AF44F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:ff:33:e3:e4:b0:c6:ee:3d:ba:94:b0:13:
4b:7d:87:52:2c:49:15:c2:0b:00:3a:13:da:25:d2:
30:48:7e:53:a7:ca:8b:05:0d:bf:b1:63:40:82:c0:
76:bc:cc:74:8c:9b:11:b1:55:98:89:0d:f4:95:c4:
42:47:c5:6a:44:ce:73:2e:2f:77:8c:21:74:b7:b0:
67:16:1c:19:ab:44:bb:f8:f3:f2:3c:a4:2f:73:c3:
3b:d0:49:36:c8:53:ea:0e:24:98:01:2d:ce:dd:fa:
2e:93:d4:08:34:67:a3:ca:20:a3:25:9b:a2:ab:fd:
c0:98:77:44:89:bf:9b:c4:c7:cb:db:83:bf:37:53:
cd:5c:80:77:59:6f:27:ec:c2:2a:02:cf:de:e5:7d:
44:65:61:3e:33:92:bb:ed:f5:57:98:5b:4e:85:ce:
f3:02:6c:0a:4f:3c:55:2b:85:21:c7:ce:9b:44:c2:
40:a9:02:39:9f:bc:b0:27:e8:cb:e9:bc:eb:be:a4:
ee:c9:62:9c:c1:6b:89:2b:6c:98:8a:74:b6:6a:21:
ab:77:cf:48:d2:4b:bf:4a:c2:05:00:20:ba:e5:26:
73:a1:79:6b:f2:ce:2a:9e:52:f8:7c:d1:79:f6:cd:
55:56:bc:d0:3b:47:b7:bf:5e:0a:c3:6a:e0:69:46:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:13:A8:F9:77:24:EA:62:AA:38:CF:D1:FC:B9:AB:2D:8A:F4:4F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.247.0-82.21.248.255
82.22.248.0/24
82.23.238.0/24
82.24.248.0/24
82.25.248.0/24
82.26.248.0/23
82.27.248.0/23
82.29.247.0-82.29.248.255
Signature Algorithm: sha256WithRSAEncryption
79:32:cf:91:61:5b:93:88:53:60:17:97:2c:a5:de:b5:83:66:
43:af:cb:b6:c0:77:c5:8f:fd:38:e7:0c:58:ec:b1:b1:0f:23:
9e:44:97:89:3d:b9:2d:b9:e8:76:07:10:58:7f:31:b9:01:73:
54:73:d1:06:2f:f6:88:8f:36:f0:44:73:0d:62:75:8c:55:d7:
1f:71:9c:c2:8a:cb:e1:ea:51:91:04:de:f2:09:cc:65:5e:34:
75:c1:bb:10:ea:bd:16:84:15:5a:c4:54:f5:d6:dc:11:0b:ce:
5f:6c:2e:79:81:66:c5:ba:c8:46:cb:56:04:7d:48:61:4b:df:
a9:4f:7a:d3:41:c2:21:e4:14:2c:c3:dc:99:28:b5:54:bb:6f:
2d:10:f2:d1:75:43:ac:bb:14:d9:18:79:91:57:8f:6b:b9:ef:
97:37:ce:5b:c5:bd:a7:39:07:a7:2a:c5:6b:3a:12:fe:ea:74:
e9:d6:15:b7:72:01:9e:c3:f1:b1:1a:93:4c:95:ed:af:8a:d7:
cd:fc:25:74:e9:1b:f2:bb:20:87:84:e4:f0:c0:c1:ff:9c:79:
cc:6b:a5:3f:be:3e:63:ba:fc:44:32:fd:a8:d1:1e:f2:21:17:
1d:d3:75:3a:27:5b:08:3c:03:dc:75:72:41:e8:01:ce:31:82:
68:12:6c:c9
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUUGcogemKWpKkpfbisNG+daF35Z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAyMTMxMTU2MTlaFw0yNjAyMTIxMjAxMTlaMDMxMTAvBgNV
BAMTKEI4NEExM0E4Rjk3NzI0RUE2MkFBMzhDRkQxRkNCOUFCMkQ4QUY0NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lP8z4+Swxu49upSwE0t9h1Is
SRXCCwA6E9ol0jBIflOnyosFDb+xY0CCwHa8zHSMmxGxVZiJDfSVxEJHxWpEznMu
L3eMIXS3sGcWHBmrRLv48/I8pC9zwzvQSTbIU+oOJJgBLc7d+i6T1Ag0Z6PKIKMl
m6Kr/cCYd0SJv5vEx8vbg783U81cgHdZbyfswioCz97lfURlYT4zkrvt9VeYW06F
zvMCbApPPFUrhSHHzptEwkCpAjmfvLAn6MvpvOu+pO7JYpzBa4krbJiKdLZqIat3
z0jSS79KwgUAILrlJnOheWvyziqeUvh80Xn2zVVWvNA7R7e/XgrDauBpRi87AgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUuEoTqPl3JOpiqjjP0fy5qy2K9E8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk3NzQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBABS
FfcDBABSFfgDBABSFvgDBABSF+4DBABSGPgDBABSGfgDBAFSGvgDBAFSG/gwDAME
AFId9wMEAFId+DANBgkqhkiG9w0BAQsFAAOCAQEAeTLPkWFbk4hTYBeXLKXetYNm
Q6/LtsB3xY/9OOcMWOyxsQ8jnkSXiT25LbnodgcQWH8xuQFzVHPRBi/2iI828ERz
DWJ1jFXXH3GcworL4epRkQTe8gnMZV40dcG7EOq9FoQVWsRU9dbcEQvOX2wueYFm
xbrIRstWBH1IYUvfqU9600HCIeQULMPcmSi1VLtvLRDy0XVDrLsU2Rh5kVePa7nv
lzfOW8W9pzkHpyrFazoS/up06dYVt3IBnsPxsRqTTJXtr4rXzfwldOkb8rsgh4Tk
8MDB/5x5zGulP74+Y7r8RDL9qNEe8iEXHdN1OidbCDwD3HVyQegBzjGCaBJsyQ==
Generated at Tue Apr 1 11:04:44 2025 by rpki-client on console.sobornost.net