Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4f8eSWRJp3e8ZE0sdWpA9jijdf8.roa
File: 4f8eSWRJp3e8ZE0sdWpA9jijdf8.roa (raw, json)
Hash identifier: EBcHbyt4C3XcCFKSUshiAaOYXxKc61Ejhc1RyXLx1Pc=
Subject key identifier: E1:FF:1E:49:64:49:A7:77:BC:64:4D:2C:75:6A:40:F6:38:A3:75:FF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F82A9E387B60603C8555923D94DB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4f8eSWRJp3e8ZE0sdWpA9jijdf8.roa
Signing time: Sun 01 Jan 2023 13:25:12 +0000
ROA not before: Sun 01 Jan 2023 13:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60849
IP address blocks: 82.115.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f8:2a:9e:38:7b:60:60:3c:85:55:92:3d:94:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1ff1e496449a777bc644d2c756a40f638a375ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:b7:be:2a:af:96:08:20:b5:06:be:17:ce:
19:3e:ec:30:b5:fe:08:f9:a2:da:8b:8b:93:4a:69:
11:12:39:23:10:81:8a:79:cb:84:90:ed:65:e1:4c:
ca:23:12:41:a2:92:06:d9:a1:d0:12:66:27:f4:26:
8e:62:44:8b:9a:e8:92:57:67:56:f1:df:6f:bc:46:
f4:c5:f9:a8:63:b5:36:5b:de:4b:0d:31:c0:3f:d0:
bf:49:e4:b6:5a:2d:98:9e:b4:1b:12:18:0a:f5:21:
23:7a:27:95:55:bc:28:66:6d:ed:8a:fd:6a:e8:6f:
0d:85:31:d5:2b:95:2f:88:5b:92:87:9b:e9:cc:27:
ae:1f:2f:a1:5f:79:e0:88:03:83:50:cf:f3:6f:3f:
e3:61:3d:d5:23:5e:75:2b:c5:6b:5f:b5:f4:ae:38:
27:37:3a:c0:fa:a2:6d:9d:e7:cf:e8:31:52:09:7c:
8c:71:ce:32:64:72:db:35:89:5c:00:a6:94:ae:4c:
5b:67:36:1e:c4:83:da:35:c4:99:5d:15:43:2e:17:
85:1e:52:29:bd:95:e2:7d:46:d1:f7:74:b0:b5:11:
1f:55:77:9e:c6:18:3a:b9:31:22:f2:a1:2d:9d:26:
ac:f5:12:4f:c7:30:f6:5b:0f:21:16:1b:6d:62:1b:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:1E:49:64:49:A7:77:BC:64:4D:2C:75:6A:40:F6:38:A3:75:FF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4f8eSWRJp3e8ZE0sdWpA9jijdf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.208.0/24
Signature Algorithm: sha256WithRSAEncryption
60:29:f7:a5:09:36:f6:fb:1f:38:be:e5:c1:68:72:63:f7:d2:
4b:25:81:ef:96:39:7c:26:d1:44:ce:3b:51:c4:b5:bb:dc:85:
93:52:ca:73:21:d7:e5:30:22:66:30:e9:f7:02:a3:45:de:e9:
04:c0:06:ea:12:38:9a:61:ca:11:cd:9d:26:1d:e6:6a:61:4a:
55:93:5f:52:ad:8d:5c:4f:fe:7d:4b:e9:81:8b:1b:08:d3:7a:
17:22:5a:dc:52:45:22:a8:e1:d6:94:f0:72:1f:f2:50:bf:52:
5e:e6:05:38:b7:ad:15:3d:7d:a6:f2:61:c6:44:d5:65:22:1d:
15:dd:3b:88:20:aa:7f:90:47:d0:46:15:3b:dd:c4:14:e2:50:
af:31:91:0c:e1:57:40:ef:55:05:c9:27:85:b5:f6:50:46:4b:
2e:7f:2e:76:74:d6:a6:8d:c9:06:2c:65:3d:2f:9e:d6:d6:62:
bf:22:19:d0:26:0f:75:a7:e9:60:9c:b9:b6:59:b2:ea:4e:e9:
57:37:6a:fb:7f:97:28:6c:dc:84:0a:33:94:5d:c6:5e:95:db:
cb:34:11:df:f0:9c:45:48:af:f0:72:c6:48:e5:a4:ae:1c:a0:
b1:05:39:d6:79:4a:df:3a:67:63:5a:78:c8:9e:47:cf:fa:09:
5b:c6:74:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgfgqnjh7YGA8hVWSPZTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWZmMWU0OTY0NDlhNzc3YmM2NDRkMmM3NTZhNDBmNjM4YTM3NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopm3viqvlgggtQa+F84ZPuwwtf4I
+aLai4uTSmkREjkjEIGKecuEkO1l4UzKIxJBopIG2aHQEmYn9CaOYkSLmuiSV2dW
8d9vvEb0xfmoY7U2W95LDTHAP9C/SeS2Wi2YnrQbEhgK9SEjeieVVbwoZm3tiv1q
6G8NhTHVK5UviFuSh5vpzCeuHy+hX3ngiAODUM/zbz/jYT3VI151K8VrX7X0rjgn
NzrA+qJtnefP6DFSCXyMcc4yZHLbNYlcAKaUrkxbZzYexIPaNcSZXRVDLheFHlIp
vZXifUbR93SwtREfVXeexhg6uTEi8qEtnSas9RJPxzD2Ww8hFhttYhtdKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOH/HklkSad3vGRNLHVqQPY4o3X/MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNGY4ZVNXUkpwM2U4WkUwc2RXcEE5amlqZGY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnPQMA0G
CSqGSIb3DQEBCwUAA4IBAQBgKfelCTb2+x84vuXBaHJj99JLJYHvljl8JtFEzjtR
xLW73IWTUspzIdflMCJmMOn3AqNF3ukEwAbqEjiaYcoRzZ0mHeZqYUpVk19SrY1c
T/59S+mBixsI03oXIlrcUkUiqOHWlPByH/JQv1Je5gU4t60VPX2m8mHGRNVlIh0V
3TuIIKp/kEfQRhU73cQU4lCvMZEM4VdA71UFySeFtfZQRksufy52dNamjckGLGU9
L57W1mK/IhnQJg91p+lgnLm2WbLqTulXN2r7f5cobNyECjOUXcZeldvLNBHf8JxF
SK/wcsZI5aSuHKCxBTnWeUrfOmdjWnjInkfP+glbxnR8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org