Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eM2P1VVISVju9c-cWBNqDEnD9eQ.roa
File: eM2P1VVISVju9c-cWBNqDEnD9eQ.roa (raw, json)
Hash identifier: NHOOuzB6ckm87H/u/mdrtTEdPyWleVK0AY3Kk+Oqe98=
Subject key identifier: 78:CD:8F:D5:55:48:49:58:EE:F5:CF:9C:58:13:6A:0C:49:C3:F5:E4
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018F3C3F5D3FC025013C5D4A8556BBAEFE1B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eM2P1VVISVju9c-cWBNqDEnD9eQ.roa
Signing time: Fri 03 May 2024 02:18:56 +0000
ROA not before: Fri 03 May 2024 02:18:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30860
IP address blocks: 82.115.0.0/24 maxlen: 24
82.115.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 10:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:3f:5d:3f:c0:25:01:3c:5d:4a:85:56:bb:ae:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 3 02:18:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78cd8fd555484958eef5cf9c58136a0c49c3f5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:4c:05:80:9a:55:4b:e3:78:be:e5:c3:cf:
68:92:4b:8f:0a:48:23:39:6a:42:be:e4:5c:fc:eb:
c3:ea:de:22:05:ba:8f:90:d4:76:11:ce:ff:f7:c6:
9d:b5:0c:b5:1b:5a:ab:b1:d1:9c:49:b3:1a:20:ee:
0f:d0:16:ae:15:0c:8c:97:1c:3f:77:c8:28:1f:7e:
85:bc:9d:36:f2:79:66:38:6e:05:b9:56:98:4c:0c:
95:db:62:d6:d7:d0:87:12:48:22:a9:a4:eb:a0:ff:
ce:8a:9d:21:6e:e4:0f:84:a0:ca:02:e5:03:ae:6a:
a5:77:3c:d5:5c:f9:2c:f0:e0:af:04:b6:ac:9d:fc:
66:b5:ff:32:43:16:1c:ff:ae:83:97:01:15:32:b8:
61:7c:5a:6b:a5:03:58:95:cd:c8:bc:db:b6:39:8e:
97:49:70:c1:21:a7:56:c1:53:e5:a4:9e:96:f1:d0:
20:f1:a8:20:49:44:2d:6e:5e:f7:99:fa:df:30:13:
75:3b:ae:1a:46:9a:2c:2a:b0:28:10:32:b7:ff:d7:
20:24:a1:98:65:ac:41:53:12:2b:95:e7:0f:e6:fc:
ee:e5:4f:73:b0:01:69:7c:5e:14:2c:f7:f3:ce:5c:
90:27:e7:7d:8f:b0:8e:58:b6:57:07:e8:e3:f9:c0:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CD:8F:D5:55:48:49:58:EE:F5:CF:9C:58:13:6A:0C:49:C3:F5:E4
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eM2P1VVISVju9c-cWBNqDEnD9eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/24
82.115.8.0/24
Signature Algorithm: sha256WithRSAEncryption
33:84:51:e5:f6:b2:8c:47:6b:20:29:a8:56:15:ae:94:e3:d3:
a6:ee:90:a3:74:be:4f:50:71:72:05:1e:30:ce:da:8b:2d:30:
0a:e4:98:53:e2:25:83:fe:51:2b:fe:7d:b5:0d:df:48:2e:fa:
32:73:83:f9:fc:ec:78:09:7e:54:c0:b9:90:2f:e7:8e:cb:78:
09:d4:31:4f:12:a7:bc:84:8f:43:f3:3c:f5:3b:71:e9:39:21:
cc:7b:f2:09:72:e7:32:e1:0a:32:bc:bf:69:2b:61:8c:32:72:
23:e6:43:3a:37:81:8c:5b:b6:b6:f7:2f:37:34:68:a6:fa:e4:
dc:0b:18:89:2c:22:68:06:e9:aa:de:65:96:ca:fd:48:a5:4e:
ce:d9:42:4e:5c:ca:db:64:f2:4f:13:17:26:cb:b7:4b:00:cc:
33:46:65:37:b4:79:15:bd:3c:25:89:b4:8a:bd:92:51:89:7c:
ca:1e:c2:7e:f3:fe:de:6d:7d:36:7c:e7:3c:08:bf:ed:60:5a:
d7:55:74:84:84:31:a5:22:e1:6a:45:14:15:13:e6:3e:79:00:
df:d6:d5:c7:24:39:ab:3a:cc:49:ae:ee:4d:2e:79:d9:c3:05:
6c:c6:87:1f:dd:e7:40:0c:18:8a:c7:ff:0c:ae:b9:df:be:e6:
7d:4c:fc:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY88P10/wCUBPF1KhVa7rv4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwNTAzMDIxODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGNkOGZkNTU1NDg0OTU4ZWVmNWNmOWM1ODEzNmEwYzQ5YzNmNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrFMBYCaVUvjeL7lw89okkuPCkgj
OWpCvuRc/OvD6t4iBbqPkNR2Ec7/98adtQy1G1qrsdGcSbMaIO4P0BauFQyMlxw/
d8goH36FvJ028nlmOG4FuVaYTAyV22LW19CHEkgiqaTroP/Oip0hbuQPhKDKAuUD
rmqldzzVXPks8OCvBLasnfxmtf8yQxYc/66DlwEVMrhhfFprpQNYlc3IvNu2OY6X
SXDBIadWwVPlpJ6W8dAg8aggSUQtbl73mfrfMBN1O64aRposKrAoEDK3/9cgJKGY
ZaxBUxIrlecP5vzu5U9zsAFpfF4ULPfzzlyQJ+d9j7COWLZXB+jj+cCZ4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHjNj9VVSElY7vXPnFgTagxJw/XkMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvZU0yUDFWVklTVmp1OWMtY1dCTnFERW5EOWVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUnMAAwQA
UnMIMA0GCSqGSIb3DQEBCwUAA4IBAQAzhFHl9rKMR2sgKahWFa6U49Om7pCjdL5P
UHFyBR4wztqLLTAK5JhT4iWD/lEr/n21Dd9ILvoyc4P5/Ox4CX5UwLmQL+eOy3gJ
1DFPEqe8hI9D8zz1O3HpOSHMe/IJcucy4QoyvL9pK2GMMnIj5kM6N4GMW7a29y83
NGim+uTcCxiJLCJoBumq3mWWyv1IpU7O2UJOXMrbZPJPExcmy7dLAMwzRmU3tHkV
vTwlibSKvZJRiXzKHsJ+8/7ebX02fOc8CL/tYFrXVXSEhDGlIuFqRRQVE+Y+eQDf
1tXHJDmrOsxJru5NLnnZwwVsxocf3edADBiKx/8MrrnfvuZ9TPxd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org