Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/3KFEm4jXJX59MU4UseN6nIO7S4c.roa
File: 3KFEm4jXJX59MU4UseN6nIO7S4c.roa (raw, json)
Hash identifier: 5p0IvA8BLWYVPyaGsvy9P5w3Po1UBM6IHzNgF+Kl70U=
Subject key identifier: DC:A1:44:9B:88:D7:25:7E:7D:31:4E:14:B1:E3:7A:9C:83:BB:4B:87
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0188191FB92CBBB2C544BB6433433FEBA9F6
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/3KFEm4jXJX59MU4UseN6nIO7S4c.roa
Signing time: Sun 14 May 2023 07:18:09 +0000
ROA not before: Sun 14 May 2023 07:18:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 92.114.40.0/22 maxlen: 24
130.255.64.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 09:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:1f:b9:2c:bb:b2:c5:44:bb:64:33:43:3f:eb:a9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 14 07:18:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dca1449b88d7257e7d314e14b1e37a9c83bb4b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:40:96:c2:08:11:de:92:59:ab:bf:02:fc:
16:cd:b3:c0:1e:72:fd:e7:0f:f8:5b:e3:1a:21:5d:
e8:0b:11:ca:6c:d8:cd:91:16:07:6e:08:47:08:21:
c6:95:4c:42:a7:64:7c:22:01:5f:7f:ae:a4:e5:fa:
ec:ee:20:52:24:e5:20:41:c3:42:9c:de:0e:de:8e:
c8:42:17:52:73:4b:b6:dc:41:98:d8:b6:a1:d2:7d:
93:c4:d3:66:6f:74:87:16:8d:ba:1a:f2:4d:77:d8:
ec:a3:db:96:57:61:d1:fe:39:f8:8f:d8:ae:60:57:
b0:18:52:fe:1f:90:3f:b0:4a:b3:e3:4c:8a:c0:8b:
7b:96:0f:59:bd:c8:a9:49:74:06:20:39:5e:1f:f4:
99:c7:a8:d0:c3:af:df:fd:f1:a9:b7:13:00:79:c4:
a3:d5:cb:e1:e8:a7:73:57:85:d5:c1:b1:52:fb:f3:
27:cb:a9:55:6a:40:ac:4d:b4:cd:ef:d1:3d:d8:36:
77:0b:2c:43:32:ea:ec:08:5c:a7:eb:34:d0:cd:ca:
10:bd:40:3a:6a:ca:3d:6b:e9:34:f5:1a:c4:ec:94:
bb:69:4a:35:1e:7d:2d:e0:0d:1b:e8:18:56:1e:2b:
b7:b6:56:6e:e9:40:91:ac:80:18:eb:e6:a2:41:2c:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:44:9B:88:D7:25:7E:7D:31:4E:14:B1:E3:7A:9C:83:BB:4B:87
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/3KFEm4jXJX59MU4UseN6nIO7S4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.224.0/22
92.114.40.0/22
130.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
79:23:1a:1f:78:a0:b9:84:f5:7d:59:83:87:98:cf:f6:f0:65:
c3:84:d4:02:0b:5a:7e:83:b0:15:4d:76:16:21:f9:ef:d8:08:
ac:ae:d7:53:a7:cb:38:b4:6e:7e:1e:dd:6d:2a:98:5b:1f:ac:
84:29:2c:fd:e1:0b:4c:ed:55:d0:91:8b:bb:25:6d:48:7b:04:
29:21:77:6f:16:25:5d:18:2a:9a:30:ac:d6:2a:42:07:eb:bb:
dc:57:1e:ad:84:51:51:5a:84:74:2f:d7:9f:18:4a:62:6d:a8:
7a:19:35:bd:4d:c5:3b:a7:79:ee:62:82:ba:ca:29:7d:46:d5:
98:99:6f:1a:5b:ed:25:85:80:10:cf:18:3a:d9:5d:56:c0:34:
01:a8:81:d3:b8:7a:ca:62:8f:57:2a:d2:a6:f2:58:16:42:3a:
78:22:05:1e:04:00:64:65:2c:de:9b:98:4b:4d:24:31:21:71:
de:9c:a8:cf:27:fe:83:e8:18:c2:c6:88:8d:1d:72:9d:68:d3:
69:a1:61:96:de:92:08:ad:54:51:9d:22:75:ef:6d:7b:c1:e3:
9f:cc:c6:0c:b0:86:9f:59:e0:82:3e:d2:ef:e6:de:1b:7d:9e:
9b:e8:cd:3a:69:2c:65:d0:86:2e:8e:be:76:94:87:00:4f:62:
c0:95:55:33
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYgZH7ksu7LFRLtkM0M/66n2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjMwNTE0MDcxODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2ExNDQ5Yjg4ZDcyNTdlN2QzMTRlMTRiMWUzN2E5YzgzYmI0Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn5AlsIIEd6SWau/AvwWzbPAHnL9
5w/4W+MaIV3oCxHKbNjNkRYHbghHCCHGlUxCp2R8IgFff66k5frs7iBSJOUgQcNC
nN4O3o7IQhdSc0u23EGY2Lah0n2TxNNmb3SHFo26GvJNd9jso9uWV2HR/jn4j9iu
YFewGFL+H5A/sEqz40yKwIt7lg9ZvcipSXQGIDleH/SZx6jQw6/f/fGptxMAecSj
1cvh6KdzV4XVwbFS+/Mny6lVakCsTbTN79E92DZ3CyxDMursCFyn6zTQzcoQvUA6
aso9a+k09RrE7JS7aUo1Hn0t4A0b6BhWHiu3tlZu6UCRrIAY6+aiQSxtYQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNyhRJuI1yV+fTFOFLHjepyDu0uHMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvM0tGRW00alhKWDU5TVU0VXNlTjZuSU83UzRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUqPgAwQC
XHIoAwQCgv9AMA0GCSqGSIb3DQEBCwUAA4IBAQB5IxofeKC5hPV9WYOHmM/28GXD
hNQCC1p+g7AVTXYWIfnv2AisrtdTp8s4tG5+Ht1tKphbH6yEKSz94QtM7VXQkYu7
JW1IewQpIXdvFiVdGCqaMKzWKkIH67vcVx6thFFRWoR0L9efGEpibah6GTW9TcU7
p3nuYoK6yil9RtWYmW8aW+0lhYAQzxg62V1WwDQBqIHTuHrKYo9XKtKm8lgWQjp4
IgUeBABkZSzem5hLTSQxIXHenKjPJ/6D6BjCxoiNHXKdaNNpoWGW3pIIrVRRnSJ1
7217weOfzMYMsIafWeCCPtLv5t4bfZ6b6M06aSxl0IYujr52lIcAT2LAlVUz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org