Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/yNTYvd9yHKYkLSoGZi0dJmk_EQc.roa
File: yNTYvd9yHKYkLSoGZi0dJmk_EQc.roa (raw, json)
Hash identifier: P55m1SXHNTft+IIYMWtD/p+6Nsag8H2lp1Z6gL0rkK8=
Subject key identifier: C8:D4:D8:BD:DF:72:1C:A6:24:2D:2A:06:66:2D:1D:26:69:3F:11:07
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 018CC94E616D0A6826C9C613C68002BF25D9
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/yNTYvd9yHKYkLSoGZi0dJmk_EQc.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8280
IP address blocks: 185.82.36.0/24 maxlen: 32
185.82.38.0/24 maxlen: 32
185.82.36.0/22 maxlen: 24
185.82.37.0/24 maxlen: 32
185.82.39.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 May 2024 11:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:61:6d:0a:68:26:c9:c6:13:c6:80:02:bf:25:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d4d8bddf721ca6242d2a06662d1d26693f1107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:01:2d:c3:2a:fe:ed:9a:f7:bb:7e:66:6b:
31:f1:c1:5b:89:47:e2:f4:8b:26:66:56:f8:a9:bb:
79:a6:34:a9:9a:0b:2f:4c:1c:18:e1:a5:54:ab:fa:
91:55:42:95:7f:e7:f2:b7:9a:9f:c0:47:6f:62:6e:
95:1c:87:3f:5a:ab:34:8e:0e:74:0a:38:77:4e:3d:
6d:15:e1:19:53:21:e6:92:5a:b1:4e:85:ee:7f:f3:
32:ba:33:7f:e7:4a:6b:48:56:fe:75:50:b1:c6:fa:
f9:2f:d9:63:05:87:cc:77:f0:b5:7a:e7:d9:09:aa:
43:3a:2d:5f:54:d3:d5:bf:ac:8f:cd:02:ea:27:23:
aa:8d:84:fb:ad:0c:00:f7:87:24:a3:f1:53:7d:f2:
0b:f0:18:6f:13:1d:da:92:6b:d5:e2:d8:73:03:37:
b0:7b:63:21:55:a4:b0:61:27:be:15:8d:fc:66:fa:
1b:bb:eb:33:d5:b4:2c:39:66:bb:c8:0f:40:ea:ed:
9d:a3:bd:e1:0c:6a:bc:0a:82:95:01:c9:31:b9:7a:
c4:10:db:fb:4f:71:e2:93:3a:85:da:84:a4:1e:fe:
4b:76:7c:50:56:6f:2f:3a:9a:6c:78:ff:01:d3:96:
7b:32:28:92:76:95:b9:7b:53:57:b9:4e:5f:ae:7a:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D4:D8:BD:DF:72:1C:A6:24:2D:2A:06:66:2D:1D:26:69:3F:11:07
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/yNTYvd9yHKYkLSoGZi0dJmk_EQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.36.0/22
Signature Algorithm: sha256WithRSAEncryption
34:20:78:dc:71:2a:05:57:c9:26:92:22:88:01:1b:19:3e:21:
6e:38:f6:58:ba:a6:57:3c:bb:bc:c2:9d:af:a9:da:74:88:a1:
07:e2:39:f2:60:94:99:90:c8:47:51:68:f4:db:ec:66:d4:4d:
ea:9f:52:b9:b3:a5:75:12:55:9c:76:be:57:f4:b3:c2:d6:c1:
3d:fa:07:7e:e0:7a:fa:db:bb:6f:bb:8e:bd:58:57:9c:b6:54:
e6:51:31:d1:06:5d:55:8a:d2:80:65:95:69:b7:60:3c:fe:c7:
d3:1f:ed:a4:e5:c2:e6:e5:d2:81:18:79:87:88:a6:b1:6d:43:
8d:0f:5d:c7:0b:fc:b4:1b:cc:5d:cb:c0:df:33:d6:87:c6:e5:
2f:90:9a:43:e2:a4:9c:17:fe:26:21:82:0a:e5:2d:5a:6b:a4:
45:c1:ca:29:2b:d7:7b:84:1d:16:8f:96:13:64:6a:7d:fa:a1:
b3:5b:b2:9a:75:60:16:6b:ae:e3:31:cb:d8:0c:63:f5:dd:c2:
b6:03:7d:da:31:ca:85:f9:a5:b9:a4:07:a9:7d:fa:75:28:74:
9e:38:af:bf:dc:14:74:dc:43:16:c1:f8:57:1e:b0:20:a9:93:
fb:e6:e9:e7:a5:32:5d:18:82:dd:64:ee:f1:58:8a:53:30:2c:
e3:42:7b:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTmFtCmgmycYTxoACvyXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTIwNDIwZjcyMmY3ZDdmM2M0YjI1YTgwZTE3ZDcyOTAx
NzExODAwHhcNMjQwMTAyMDgzMzI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGQ0ZDhiZGRmNzIxY2E2MjQyZDJhMDY2NjJkMWQyNjY5M2YxMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt20BLcMq/u2a97t+Zmsx8cFbiUfi
9IsmZlb4qbt5pjSpmgsvTBwY4aVUq/qRVUKVf+fyt5qfwEdvYm6VHIc/Wqs0jg50
Cjh3Tj1tFeEZUyHmklqxToXuf/MyujN/50prSFb+dVCxxvr5L9ljBYfMd/C1eufZ
CapDOi1fVNPVv6yPzQLqJyOqjYT7rQwA94cko/FTffIL8BhvEx3akmvV4thzAzew
e2MhVaSwYSe+FY38Zvobu+sz1bQsOWa7yA9A6u2do73hDGq8CoKVAckxuXrEENv7
T3HikzqF2oSkHv5LdnxQVm8vOppseP8B05Z7MiiSdpW5e1NXuU5frnr9zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMjU2L3fchymJC0qBmYtHSZpPxEHMB8GA1UdIwQY
MBaAFGeSBCD3IvfX88SyWoDhfXKQFxGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUt
NWVkMDg5YzFhZmVkLzEveU5UWXZkOXlIS1lrTFNvR1ppMGRKbWtfRVFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUtNWVkMDg5YzFhZmVk
LzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVIkMA0G
CSqGSIb3DQEBCwUAA4IBAQA0IHjccSoFV8kmkiKIARsZPiFuOPZYuqZXPLu8wp2v
qdp0iKEH4jnyYJSZkMhHUWj02+xm1E3qn1K5s6V1ElWcdr5X9LPC1sE9+gd+4Hr6
27tvu469WFectlTmUTHRBl1VitKAZZVpt2A8/sfTH+2k5cLm5dKBGHmHiKaxbUON
D13HC/y0G8xdy8DfM9aHxuUvkJpD4qScF/4mIYIK5S1aa6RFwcopK9d7hB0Wj5YT
ZGp9+qGzW7KadWAWa67jMcvYDGP13cK2A33aMcqF+aW5pAepffp1KHSeOK+/3BR0
3EMWwfhXHrAgqZP75unnpTJdGILdZO7xWIpTMCzjQnvf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:07 2024 by rpki-client on console-fra.rpki-client.org