Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1wR-qlsCMSTsR7RKfG-iSzJEfkc.roa
File: 1wR-qlsCMSTsR7RKfG-iSzJEfkc.roa (raw, json)
Hash identifier: eXUGargAm5pDxhN+JpHKRN6Pp1uOhS+uT2Drne+nvQc=
Subject key identifier: D7:04:7E:AA:5B:02:31:24:EC:47:B4:4A:7C:6F:A2:4B:32:44:7E:47
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DB1256B91732BB99D798F9A1BC4DBF46C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1wR-qlsCMSTsR7RKfG-iSzJEfkc.roa
Signing time: Fri 16 Feb 2024 09:00:35 +0000
ROA not before: Fri 16 Feb 2024 09:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147186
IP address blocks: 82.115.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 07:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:25:6b:91:73:2b:b9:9d:79:8f:9a:1b:c4:db:f4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 16 09:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7047eaa5b023124ec47b44a7c6fa24b32447e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:3a:fd:9e:85:3d:60:a9:23:8e:9e:70:2e:
01:96:af:0c:53:58:44:be:3a:44:75:29:88:c7:12:
de:1e:51:ad:4b:c0:f3:57:68:76:bf:d8:9c:94:ac:
22:c8:08:9b:9d:dd:27:9a:11:f1:9b:89:78:34:6d:
13:70:6c:8b:e5:17:a1:9d:78:c8:4f:86:19:6e:00:
4d:7b:e5:62:c7:8b:be:30:6f:c2:b4:0a:2f:16:46:
24:5c:e2:9e:a9:8b:77:aa:14:91:cf:3f:b5:3d:b0:
59:cd:78:e2:86:f7:61:b7:33:98:12:d4:db:5d:7a:
76:04:fc:6d:05:33:b1:4b:74:12:56:f0:8f:ee:25:
ec:14:47:b2:23:57:71:c6:58:f3:57:e9:12:3c:58:
e1:08:fc:c6:bd:13:9a:3c:fb:77:25:7f:98:23:29:
3c:1b:c4:a7:c6:ab:f5:5a:3e:51:29:3b:3f:2d:23:
c9:fe:b3:31:7e:fc:29:0a:ca:a1:11:ac:e4:ef:ae:
bc:10:15:66:d4:7e:87:9c:73:ee:be:24:23:e3:42:
fc:9a:25:be:02:7f:1e:66:6c:e4:90:08:55:e4:50:
55:22:d0:90:09:6c:85:cf:ba:0f:d6:3a:ef:4d:76:
31:6f:fc:c9:ca:a5:d0:06:fa:44:a4:8c:c3:4a:3a:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:04:7E:AA:5B:02:31:24:EC:47:B4:4A:7C:6F:A2:4B:32:44:7E:47
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1wR-qlsCMSTsR7RKfG-iSzJEfkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e6:c4:ed:87:3c:c4:d5:ca:f7:bb:74:98:ac:49:e3:df:a3:
ed:f3:d7:5f:fd:6c:e6:30:16:b9:c2:92:62:99:55:dd:5b:a8:
90:97:f2:33:7a:9e:23:67:4c:35:af:f1:ee:99:a5:68:d4:d5:
4d:50:0d:11:1f:ce:4d:49:61:d3:79:c9:b9:98:d9:81:73:20:
d0:42:54:86:04:67:88:02:fa:96:a5:06:0d:ff:88:7f:31:f2:
3b:60:5f:c0:e9:32:5c:6b:42:53:17:5a:6d:17:22:c4:6a:70:
8e:6e:36:aa:49:3c:b7:a9:de:42:6c:f0:e1:b1:dd:c5:2a:2c:
97:b8:1a:39:47:70:b1:2c:0d:12:c7:30:5c:e9:6b:37:f2:01:
a4:a8:08:b3:e2:60:a6:a4:7a:58:52:76:c9:9d:e0:42:2d:82:
a2:eb:6c:b4:40:40:d4:d0:45:9b:aa:49:34:e3:b4:67:fa:aa:
2f:3a:9a:c7:66:ce:df:41:9f:8f:66:d8:b0:cf:9e:36:d8:cc:
1b:d9:84:f7:d4:65:b0:36:2c:59:e6:c9:c8:ca:7c:f6:db:83:
54:92:19:d3:71:9a:5c:e4:6f:05:84:db:84:4f:8a:4f:ec:12:
55:fe:a1:8f:27:a6:5b:6b:ce:6f:c2:5e:97:15:e8:7e:47:cb:
02:5a:c0:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2xJWuRcyu5nXmPmhvE2/RsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjE2MDkwMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzA0N2VhYTViMDIzMTI0ZWM0N2I0NGE3YzZmYTI0YjMyNDQ3ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4M6/Z6FPWCpI46ecC4Blq8MU1hE
vjpEdSmIxxLeHlGtS8DzV2h2v9iclKwiyAibnd0nmhHxm4l4NG0TcGyL5RehnXjI
T4YZbgBNe+Vix4u+MG/CtAovFkYkXOKeqYt3qhSRzz+1PbBZzXjihvdhtzOYEtTb
XXp2BPxtBTOxS3QSVvCP7iXsFEeyI1dxxljzV+kSPFjhCPzGvROaPPt3JX+YIyk8
G8Snxqv1Wj5RKTs/LSPJ/rMxfvwpCsqhEazk7668EBVm1H6HnHPuviQj40L8miW+
An8eZmzkkAhV5FBVItCQCWyFz7oP1jrvTXYxb/zJyqXQBvpEpIzDSjrHdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNcEfqpbAjEk7Ee0SnxvoksyRH5HMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMXdSLXFsc0NNU1RzUjdSS2ZHLWlTekpFZmtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnPQMA0G
CSqGSIb3DQEBCwUAA4IBAQCM5sTthzzE1cr3u3SYrEnj36Pt89df/WzmMBa5wpJi
mVXdW6iQl/Izep4jZ0w1r/HumaVo1NVNUA0RH85NSWHTecm5mNmBcyDQQlSGBGeI
AvqWpQYN/4h/MfI7YF/A6TJca0JTF1ptFyLEanCObjaqSTy3qd5CbPDhsd3FKiyX
uBo5R3CxLA0SxzBc6Ws38gGkqAiz4mCmpHpYUnbJneBCLYKi62y0QEDU0EWbqkk0
47Rn+qovOprHZs7fQZ+PZtiwz5422Mwb2YT31GWwNixZ5snIynz224NUkhnTcZpc
5G8FhNuET4pP7BJV/qGPJ6Zba85vwl6XFeh+R8sCWsAD
-----END CERTIFICATE-----
Generated at Wed Mar 6 11:26:29 2024 by rpki-client on console-ams.rpki-client.org