Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VHJJmJrQaZ9z1NtHzkjCbl6SD3E.roa
File: VHJJmJrQaZ9z1NtHzkjCbl6SD3E.roa (raw, json)
Hash identifier: FiFtvUPZXgNalEuwUCh4A1AfLnXN2JHuDvlFBO/oFjU=
Subject key identifier: 54:72:49:98:9A:D0:69:9F:73:D4:DB:47:CE:48:C2:6E:5E:92:0F:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ADFAEF71DEE86B55902B88B8B49318ACA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VHJJmJrQaZ9z1NtHzkjCbl6SD3E.roa
Signing time: Fri 29 Sep 2023 06:45:00 +0000
ROA not before: Fri 29 Sep 2023 06:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60849
IP address blocks: 82.115.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:ae:f7:1d:ee:86:b5:59:02:b8:8b:8b:49:31:8a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 06:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=547249989ad0699f73d4db47ce48c26e5e920f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:21:68:b0:ca:3e:63:df:4a:6d:a4:bd:d3:
d7:69:5d:b1:72:e5:b3:f8:96:e8:2a:96:de:f4:56:
81:9d:e5:c4:42:0c:29:00:87:ad:86:bb:90:9f:f4:
5b:c0:17:db:e6:3b:3b:a0:58:91:f2:e5:7a:57:cd:
c6:66:38:63:92:c9:bd:94:9a:24:87:9e:0c:8c:82:
78:dc:f1:67:53:c5:3b:be:96:27:44:c1:ef:41:11:
05:6b:57:d3:6b:02:40:3e:af:9c:a5:a6:28:da:a0:
1f:d6:cd:98:0b:ef:48:78:f8:49:4d:a4:85:56:a1:
98:92:22:80:bd:30:77:f7:f2:f3:e4:e6:23:ba:11:
57:89:3c:ba:60:3a:f8:4e:9b:63:b8:ca:4d:3c:e2:
2b:0e:bf:4b:e7:73:25:0e:b4:18:c6:3c:3e:17:2a:
a3:f1:18:90:ae:f9:75:c7:d1:84:32:9b:a1:f6:64:
df:26:69:94:ee:cc:26:34:76:0f:83:ab:dc:03:b7:
d8:75:d8:45:11:6e:79:76:e4:04:40:4d:cf:86:86:
55:4e:ef:db:ad:97:43:ff:92:aa:fe:56:ef:ee:f7:
36:9a:70:ec:ca:90:58:21:a1:9c:06:fd:65:ee:49:
01:9f:2b:bb:a3:b7:7a:06:6a:3a:1a:6c:00:fe:2c:
10:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:72:49:98:9A:D0:69:9F:73:D4:DB:47:CE:48:C2:6E:5E:92:0F:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VHJJmJrQaZ9z1NtHzkjCbl6SD3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d5:39:56:6a:0f:13:1b:ed:be:ff:e5:97:a1:9d:da:bb:1f:
0a:c8:e9:bf:a0:9c:f9:d5:26:28:e4:a0:bb:ee:e4:e7:7a:b3:
93:d3:70:b6:a5:fa:e6:63:ec:5f:2f:d3:46:a0:37:b2:c9:1d:
84:7d:f3:7c:83:c1:a3:61:d6:b0:6b:d3:aa:89:0e:d6:fc:72:
03:eb:50:2f:f4:4e:5d:4f:d2:7f:98:f0:34:42:7e:e9:50:50:
58:8d:a4:6d:50:d6:91:37:4d:c8:84:6d:57:36:61:63:48:e3:
8f:53:d4:39:c8:5f:4e:72:17:31:34:4a:cc:66:d0:97:13:3d:
04:10:1f:d3:8d:88:9e:cf:aa:e3:3f:7a:2d:8a:4a:3c:2c:4c:
6b:c4:1f:7f:56:9a:30:07:39:8a:0f:22:e3:4f:09:e5:58:89:
2b:b4:0a:93:c0:7c:cc:7c:69:ae:9f:84:18:e8:d7:2c:e7:3a:
2e:7b:08:c3:6e:37:b8:b3:93:1e:93:95:28:40:07:36:07:9f:
c1:d1:13:37:9b:d8:a0:f9:8a:ec:d1:8b:6b:24:e5:0b:31:b9:
9c:6a:e7:d3:b4:fa:2f:13:32:c1:eb:e6:f9:a3:86:0f:18:ca:
c8:92:c2:62:19:4b:84:62:d7:a5:77:9f:4c:7e:41:18:24:21:
63:9d:2e:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrfrvcd7oa1WQK4i4tJMYrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwOTI5MDY0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDcyNDk5ODlhZDA2OTlmNzNkNGRiNDdjZTQ4YzI2ZTVlOTIwZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx0haLDKPmPfSm2kvdPXaV2xcuWz
+JboKpbe9FaBneXEQgwpAIethruQn/RbwBfb5js7oFiR8uV6V83GZjhjksm9lJok
h54MjIJ43PFnU8U7vpYnRMHvQREFa1fTawJAPq+cpaYo2qAf1s2YC+9IePhJTaSF
VqGYkiKAvTB39/Lz5OYjuhFXiTy6YDr4TptjuMpNPOIrDr9L53MlDrQYxjw+Fyqj
8RiQrvl1x9GEMpuh9mTfJmmU7swmNHYPg6vcA7fYddhFEW55duQEQE3PhoZVTu/b
rZdD/5Kq/lbv7vc2mnDsypBYIaGcBv1l7kkBnyu7o7d6Bmo6GmwA/iwQJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFRySZia0Gmfc9TbR85Iwm5ekg9xMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVkhKSm1KclFhWjl6MU50SHprakNibDZTRDNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnPQMA0G
CSqGSIb3DQEBCwUAA4IBAQBs1TlWag8TG+2+/+WXoZ3aux8KyOm/oJz51SYo5KC7
7uTnerOT03C2pfrmY+xfL9NGoDeyyR2EffN8g8GjYdawa9OqiQ7W/HID61Av9E5d
T9J/mPA0Qn7pUFBYjaRtUNaRN03IhG1XNmFjSOOPU9Q5yF9OchcxNErMZtCXEz0E
EB/TjYiez6rjP3otiko8LExrxB9/VpowBzmKDyLjTwnlWIkrtAqTwHzMfGmun4QY
6Ncs5zouewjDbje4s5Mek5UoQAc2B5/B0RM3m9ig+Yrs0YtrJOULMbmcaufTtPov
EzLB6+b5o4YPGMrIksJiGUuEYteld59MfkEYJCFjnS6h
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:34 2024 by rpki-client on console-ams.rpki-client.org