Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/o1FSKdZ_LTvQiHjCgT2tg8iuI9I.roa
File: o1FSKdZ_LTvQiHjCgT2tg8iuI9I.roa (raw, json)
Hash identifier: 1+j9J2j1hdxPFrUvMIfuzzUqgCllvO97bI42Ur21Yqk=
Subject key identifier: A3:51:52:29:D6:7F:2D:3B:D0:88:78:C2:81:3D:AD:83:C8:AE:23:D2
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 018C104855BBC7341B1D119E1E374CFF4638
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/o1FSKdZ_LTvQiHjCgT2tg8iuI9I.roa
Signing time: Mon 27 Nov 2023 10:17:05 +0000
ROA not before: Mon 27 Nov 2023 10:17:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198218
IP address blocks: 82.205.202.0/23 maxlen: 24
82.205.204.0/22 maxlen: 24
82.205.208.0/20 maxlen: 24
82.205.224.0/19 maxlen: 24
82.205.128.0/22 maxlen: 24
82.205.132.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:48:55:bb:c7:34:1b:1d:11:9e:1e:37:4c:ff:46:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Nov 27 10:17:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3515229d67f2d3bd08878c2813dad83c8ae23d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:f7:77:c1:f5:07:46:cb:ce:d6:09:38:df:
88:3a:5f:cd:48:f2:00:02:9f:1b:e4:b7:10:89:3b:
d4:15:79:91:59:e2:99:5a:7f:ee:77:5c:65:42:b0:
3d:6e:bd:87:d6:34:f6:f1:69:bc:85:80:a6:b9:c7:
4f:4e:1f:37:f8:67:78:1b:e6:e7:94:74:e9:ea:2e:
0a:c0:e4:7e:a6:31:a7:f9:7a:54:65:ea:f1:89:7f:
86:6f:14:16:86:b3:47:b2:6a:fd:db:15:91:75:f3:
1b:10:c0:e8:5f:99:fb:44:35:a3:41:6c:c1:62:1d:
3a:14:f0:5d:4a:ee:7c:1e:a2:52:4f:8c:e6:4e:40:
bb:48:c3:5d:8a:d4:55:4d:f8:a4:7a:e7:3a:5e:01:
8e:89:62:54:ac:31:76:7d:82:7f:e9:14:ec:be:73:
3a:bf:3c:a8:98:39:9d:bd:a7:fd:1d:1f:3b:78:23:
2b:09:b8:81:47:94:c5:da:95:c8:c5:1f:9f:50:d1:
4b:ff:c1:61:d7:fa:df:f7:29:f8:af:df:b8:6b:49:
38:47:16:16:53:5b:a3:6d:a6:70:6d:37:6f:13:6b:
7a:88:2c:6f:99:4d:7d:f8:71:84:6f:8f:a6:6b:fb:
65:a9:b6:36:77:76:ad:45:a4:8c:3b:16:b5:36:4f:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:51:52:29:D6:7F:2D:3B:D0:88:78:C2:81:3D:AD:83:C8:AE:23:D2
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/o1FSKdZ_LTvQiHjCgT2tg8iuI9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.205.128.0-82.205.133.255
82.205.202.0-82.205.255.255
Signature Algorithm: sha256WithRSAEncryption
16:1e:d7:9b:b1:0a:40:8b:80:c5:c2:47:01:e9:4d:7e:f6:9e:
60:9b:7b:2b:f2:b9:e7:6d:50:33:98:c6:b0:3e:61:05:27:1d:
70:57:c0:6f:85:c8:1a:0d:94:be:9d:a4:71:d7:07:71:35:9f:
1b:88:34:ef:08:24:53:09:80:7c:25:27:9e:2d:06:f8:47:c4:
45:f3:ae:fa:c5:76:70:a8:a0:be:7b:17:d2:0d:e4:6f:d4:19:
6b:de:38:c7:43:06:54:bb:0b:2e:a6:b1:97:e6:33:00:6d:dd:
3b:8b:46:05:2a:99:ae:e5:04:bd:67:23:93:e2:ac:ee:e3:f6:
dc:58:59:3d:7e:18:38:0d:86:3c:ca:28:0c:bf:23:b9:32:7b:
2f:5c:6c:6a:3a:8e:42:ee:50:05:c5:71:3b:87:af:31:2d:b5:
ca:07:fb:bd:5c:00:90:4f:f4:62:0e:df:8c:9c:4a:ae:4c:11:
0f:ff:43:98:76:1c:16:f1:98:bf:39:9c:2c:ba:34:58:38:78:
64:04:f6:04:af:1e:11:1c:20:0c:74:f8:49:7f:77:6f:86:83:
87:9f:ad:47:67:16:70:3a:25:51:93:c0:7b:95:1b:70:ac:0d:
dd:04:94:9d:c0:92:0d:9b:7e:a6:9a:12:c6:1c:bc:0e:f6:71:
45:bb:46:8d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYwQSFW7xzQbHRGeHjdM/0Y4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWQ2ZjFmMWI3MzBjN2EwMTZiNTYyYzEyYjMxYmVjYzRi
M2UxZmEwHhcNMjMxMTI3MTAxNzA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzUxNTIyOWQ2N2YyZDNiZDA4ODc4YzI4MTNkYWQ4M2M4YWUyM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcL3d8H1B0bLztYJON+IOl/NSPIA
Ap8b5LcQiTvUFXmRWeKZWn/ud1xlQrA9br2H1jT28Wm8hYCmucdPTh83+Gd4G+bn
lHTp6i4KwOR+pjGn+XpUZerxiX+GbxQWhrNHsmr92xWRdfMbEMDoX5n7RDWjQWzB
Yh06FPBdSu58HqJST4zmTkC7SMNditRVTfikeuc6XgGOiWJUrDF2fYJ/6RTsvnM6
vzyomDmdvaf9HR87eCMrCbiBR5TF2pXIxR+fUNFL/8Fh1/rf9yn4r9+4a0k4RxYW
U1ujbaZwbTdvE2t6iCxvmU19+HGEb4+ma/tlqbY2d3atRaSMOxa1Nk/PqQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKNRUinWfy070Ih4woE9rYPIriPSMB8GA1UdIwQY
MBaAFEWtbx8bcwx6AWtWLBKzG+zEs+H6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDkt
MzI0NDljZTZjZjg5LzEvbzFGU0tkWl9MVHZRaUhqQ2dUMnRnOGl1STlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDktMzI0NDljZTZjZjg5
LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBAdSzYAD
BAFSzYQwCwMEAVLNygMDAVLMMA0GCSqGSIb3DQEBCwUAA4IBAQAWHtebsQpAi4DF
wkcB6U1+9p5gm3sr8rnnbVAzmMawPmEFJx1wV8BvhcgaDZS+naRx1wdxNZ8biDTv
CCRTCYB8JSeeLQb4R8RF8676xXZwqKC+exfSDeRv1Blr3jjHQwZUuwsuprGX5jMA
bd07i0YFKpmu5QS9ZyOT4qzu4/bcWFk9fhg4DYY8yigMvyO5MnsvXGxqOo5C7lAF
xXE7h68xLbXKB/u9XACQT/RiDt+MnEquTBEP/0OYdhwW8Zi/OZwsujRYOHhkBPYE
rx4RHCAMdPhJf3dvhoOHn61HZxZwOiVRk8B7lRtwrA3dBJSdwJINm36mmhLGHLwO
9nFFu0aN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:37 2024 by rpki-client on console-fra.rpki-client.org