Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/3VJG00G01kMNGN5sd1t180GcWGI.roa
File: 3VJG00G01kMNGN5sd1t180GcWGI.roa (raw, json)
Hash identifier: JjXeuClZPud5BTRo7Ci1RhjNDs9W4/2klOhNpJYdRuk=
Subject key identifier: DD:52:46:D3:41:B4:D6:43:0D:18:DE:6C:77:5B:75:F3:41:9C:58:62
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 01856D385BC7D548AE7F376BA1DDB838900C
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/3VJG00G01kMNGN5sd1t180GcWGI.roa
Signing time: Sun 01 Jan 2023 12:04:48 +0000
ROA not before: Sun 01 Jan 2023 12:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31225
IP address blocks: 83.219.224.0/19 maxlen: 19
83.219.227.0/24 maxlen: 24
83.219.228.0/24 maxlen: 24
83.219.233.0/24 maxlen: 24
83.219.231.0/24 maxlen: 24
83.219.232.0/24 maxlen: 24
83.219.229.0/24 maxlen: 24
83.219.234.0/24 maxlen: 24
83.219.235.0/24 maxlen: 24
83.219.238.0/24 maxlen: 24
83.219.239.0/24 maxlen: 24
83.219.236.0/24 maxlen: 24
83.219.237.0/24 maxlen: 24
83.219.241.0/24 maxlen: 24
83.219.242.0/24 maxlen: 24
83.219.246.0/24 maxlen: 24
83.219.244.0/24 maxlen: 24
83.219.248.0/24 maxlen: 24
83.219.249.0/24 maxlen: 24
83.219.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jul 2023 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:5b:c7:d5:48:ae:7f:37:6b:a1:dd:b8:38:90:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Jan 1 12:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd5246d341b4d6430d18de6c775b75f3419c5862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:05:0e:96:da:6e:84:ff:68:6d:51:75:f2:
9b:67:43:ad:50:cf:c7:79:c1:87:d9:45:a5:32:12:
df:63:dd:3e:87:0a:98:d3:1f:70:8a:2b:2a:58:99:
16:04:1b:a6:ae:6f:c9:2b:cf:83:7e:42:7e:4d:61:
d6:76:4c:e1:c4:49:a9:18:e8:2c:bb:25:99:98:52:
33:eb:d8:ca:cb:c7:54:58:55:e6:4b:f1:dd:97:bf:
b3:b3:c1:a6:7c:d5:d4:c1:fe:9f:fb:84:d7:8f:c0:
87:f1:79:80:39:b0:58:94:e3:26:df:63:eb:11:2f:
f2:47:ca:67:de:7f:32:59:f2:63:6e:a3:8e:f7:80:
db:c5:6f:3b:d6:3b:80:93:a1:1a:13:cc:b8:b2:a4:
aa:42:47:a6:2b:81:b2:06:66:fb:de:74:e2:2f:b3:
7c:49:60:9f:0f:7d:73:ab:3c:5b:ac:69:62:73:ff:
36:2d:3e:95:a4:60:f8:8a:f9:d5:50:e6:e0:52:60:
99:71:6c:2d:1d:f7:73:8a:98:19:78:d8:51:12:ad:
d6:5a:9b:36:02:e1:92:c1:04:27:61:50:c9:d2:2e:
53:7d:67:61:2c:55:a0:81:b1:fb:2e:6b:e3:29:7e:
68:6c:ce:2d:d3:a5:94:81:f0:a7:50:0b:f2:6f:5e:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:46:D3:41:B4:D6:43:0D:18:DE:6C:77:5B:75:F3:41:9C:58:62
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/3VJG00G01kMNGN5sd1t180GcWGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:e1:b5:8f:bf:23:32:a8:5e:d8:0c:56:59:29:3b:e9:75:cc:
a2:9a:ff:cc:c4:b8:a2:5f:a6:9a:f1:ad:3c:22:ec:c6:15:ab:
5c:8a:72:36:7e:bc:10:d2:bf:3e:0e:3e:5c:c0:4a:5f:ff:87:
fe:58:6c:12:81:50:70:81:5d:74:4c:52:a2:c5:bf:75:bb:e4:
89:3f:ed:de:45:d0:6b:82:c5:b0:87:f5:6c:c8:0f:80:0a:0e:
6a:be:c2:e9:0f:d3:46:3d:ba:42:c2:0b:75:00:ab:d6:d0:44:
06:fe:6c:08:33:62:fd:9b:be:22:07:74:e2:a9:70:64:0d:89:
09:77:dc:57:93:08:cb:be:a2:15:bd:44:2a:29:95:db:35:25:
7d:bc:c6:f9:0a:1a:88:b8:d6:03:fb:d9:a6:af:e0:49:82:e6:
89:c3:78:51:eb:24:9e:e6:85:ba:d2:a7:b9:75:07:42:0d:59:
c0:36:30:6d:83:77:16:78:ba:87:8e:99:a0:ed:69:51:ee:f2:
ac:f7:0a:fa:13:6f:d5:52:41:f3:7f:fa:00:31:f1:e0:a3:0f:
e6:c1:15:0f:f0:cf:ae:df:4d:02:9a:b3:90:5d:26:a8:a8:77:
2a:5a:f1:5a:6f:67:19:41:4c:15:e3:aa:70:8c:68:49:d0:ed:
f2:6c:d4:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtOFvH1Uiufzdrod24OJAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjZhNDliY2MxMGRlMzQwZTM5ZDIwM2Y1NjY1OGJkN2Q2
NDhkZGYwHhcNMjMwMTAxMTIwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDUyNDZkMzQxYjRkNjQzMGQxOGRlNmM3NzViNzVmMzQxOWM1ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKIFDpbaboT/aG1RdfKbZ0OtUM/H
ecGH2UWlMhLfY90+hwqY0x9wiisqWJkWBBumrm/JK8+DfkJ+TWHWdkzhxEmpGOgs
uyWZmFIz69jKy8dUWFXmS/Hdl7+zs8GmfNXUwf6f+4TXj8CH8XmAObBYlOMm32Pr
ES/yR8pn3n8yWfJjbqOO94DbxW871juAk6EaE8y4sqSqQkemK4GyBmb73nTiL7N8
SWCfD31zqzxbrGlic/82LT6VpGD4ivnVUObgUmCZcWwtHfdzipgZeNhREq3WWps2
AuGSwQQnYVDJ0i5TfWdhLFWggbH7LmvjKX5obM4t06WUgfCnUAvyb15cVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN1SRtNBtNZDDRjebHdbdfNBnFhiMB8GA1UdIwQY
MBaAFLC2pJvMEN40DjnSA/VmWL19ZI3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2MzOWMtZGQ3Yi00ODkyLTk0YmYt
ZWU0NmFjMDE4NjAwLzEvM1ZKRzAwRzAxa01OR041c2QxdDE4MEdjV0dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85Y2MzOWMtZGQ3Yi00ODkyLTk0YmYtZWU0NmFjMDE4NjAw
LzEvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFU9vgMA0G
CSqGSIb3DQEBCwUAA4IBAQBv4bWPvyMyqF7YDFZZKTvpdcyimv/MxLiiX6aa8a08
IuzGFatcinI2frwQ0r8+Dj5cwEpf/4f+WGwSgVBwgV10TFKixb91u+SJP+3eRdBr
gsWwh/VsyA+ACg5qvsLpD9NGPbpCwgt1AKvW0EQG/mwIM2L9m74iB3TiqXBkDYkJ
d9xXkwjLvqIVvUQqKZXbNSV9vMb5ChqIuNYD+9mmr+BJguaJw3hR6ySe5oW60qe5
dQdCDVnANjBtg3cWeLqHjpmg7WlR7vKs9wr6E2/VUkHzf/oAMfHgow/mwRUP8M+u
300CmrOQXSaoqHcqWvFab2cZQUwV46pwjGhJ0O3ybNQv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:12 2024 by rpki-client on console-ams.rpki-client.org