Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/E1qSxGXwEyoG8wh2SJqhYwsdFk8.roa
File: E1qSxGXwEyoG8wh2SJqhYwsdFk8.roa (raw, json)
Hash identifier: qC4NcCLmFbVRYq+qg0KQHUKF+VhpeRQ6iBBx9yeuDNA=
Subject key identifier: 13:5A:92:C4:65:F0:13:2A:06:F3:08:76:48:9A:A1:63:0B:1D:16:4F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0186DB44A3AD06457E4F9DD8EAA8B580EEFE
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/E1qSxGXwEyoG8wh2SJqhYwsdFk8.roa
Signing time: Mon 13 Mar 2023 13:59:14 +0000
ROA not before: Mon 13 Mar 2023 13:59:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
2a12:bec0:7002::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Mar 2023 16:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:44:a3:ad:06:45:7e:4f:9d:d8:ea:a8:b5:80:ee:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 13 13:59:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=135a92c465f0132a06f30876489aa1630b1d164f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:2c:19:c8:ad:15:9f:0d:c0:03:c6:a9:dd:
f6:7d:e2:81:f3:ef:fc:d9:a9:b8:63:e1:f1:63:62:
5e:ca:73:7f:62:22:9c:65:ae:d1:90:84:c3:0c:08:
fc:db:1b:af:db:37:8d:b4:14:e3:77:ef:0b:0c:de:
20:af:c7:9f:56:f3:9f:ba:3f:b1:8d:cc:8a:58:e5:
b2:b7:93:62:ef:fb:81:17:4f:b2:53:80:f3:a8:de:
58:92:7a:b0:0d:9f:1f:9f:76:97:6a:23:9e:ac:7b:
e9:21:e9:c0:7f:e2:52:d8:4f:83:cf:25:7f:e1:81:
b8:6d:ee:5d:0b:49:f8:e0:09:02:65:aa:10:37:54:
89:66:af:a1:a5:45:d9:2e:0e:2f:5e:02:56:6b:f9:
45:ca:e0:bc:ba:fe:de:44:69:85:da:cc:4e:d1:24:
95:43:14:5c:43:6e:e3:c0:26:04:49:32:c6:c5:22:
77:7c:a6:74:51:db:8a:7e:17:b5:e4:46:f0:07:be:
66:5c:bd:96:89:df:8f:8c:7f:9d:3b:76:62:3b:8a:
b5:b8:1f:58:24:1b:94:0b:b4:5f:e2:99:69:27:0a:
51:16:1f:c0:8a:22:0d:7b:8c:c2:6c:28:02:fa:54:
01:f6:b1:03:f5:84:25:c3:80:32:fa:18:21:49:ce:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5A:92:C4:65:F0:13:2A:06:F3:08:76:48:9A:A1:63:0B:1D:16:4F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/E1qSxGXwEyoG8wh2SJqhYwsdFk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:7000::-2a12:bec0:7002:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
0b:39:0a:b3:9d:fb:a7:90:91:24:43:7c:a6:61:43:bf:6f:ee:
55:63:bc:24:7d:03:0a:ab:c8:42:61:06:c7:6c:3e:f1:fc:4d:
1b:44:6c:6c:f9:29:90:4a:90:f1:4c:36:92:8b:a8:fc:09:af:
3a:a5:a9:03:01:ca:20:36:43:8b:24:d4:14:d4:c7:b6:7c:40:
ad:c1:0e:c3:23:16:94:cb:8c:bc:ad:cf:dc:b2:83:52:9f:23:
74:bc:ea:a6:36:56:f3:d2:d3:1b:c2:6e:14:8e:e8:cc:4b:d9:
1f:86:21:90:7f:d3:79:c6:f6:2f:ac:7d:4c:66:5a:91:8e:75:
9b:7b:51:41:1d:05:2a:1d:b0:ac:a7:f1:c5:72:62:8a:69:ff:
56:10:d3:2c:7f:d3:72:77:1a:4d:51:ad:64:0f:53:84:d6:be:
0c:67:6c:b2:55:fc:22:e3:d9:3a:21:29:0f:40:b4:cc:00:c3:
a9:0a:e3:ad:5e:0c:9f:6a:bc:36:c4:c5:ad:fc:e9:be:d5:b8:
43:3f:a8:fc:4c:39:e1:00:44:90:b4:a2:18:b0:e4:02:ac:60:
bd:9d:26:bd:ad:33:d1:0c:95:c5:90:19:a9:09:89:42:e3:95:
9b:59:95:3a:7f:3f:38:27:d9:b7:30:9d:5b:a8:90:0f:f0:c6:
aa:67:10:76
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYbbRKOtBkV+T53Y6qi1gO7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwMzEzMTM1OTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzVhOTJjNDY1ZjAxMzJhMDZmMzA4NzY0ODlhYTE2MzBiMWQxNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbgsGcitFZ8NwAPGqd32feKB8+/8
2am4Y+HxY2JeynN/YiKcZa7RkITDDAj82xuv2zeNtBTjd+8LDN4gr8efVvOfuj+x
jcyKWOWyt5Ni7/uBF0+yU4DzqN5YknqwDZ8fn3aXaiOerHvpIenAf+JS2E+DzyV/
4YG4be5dC0n44AkCZaoQN1SJZq+hpUXZLg4vXgJWa/lFyuC8uv7eRGmF2sxO0SSV
QxRcQ27jwCYESTLGxSJ3fKZ0UduKfhe15EbwB75mXL2Wid+PjH+dO3ZiO4q1uB9Y
JBuUC7Rf4plpJwpRFh/AiiINe4zCbCgC+lQB9rED9YQlw4Ay+hghSc6FGQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFBNaksRl8BMqBvMIdkiaoWMLHRZPMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvRTFxU3hHWHdFeW9HOHdoMlNKcWhZd3NkRms4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAMBAIAATAGAwQAUtdAMDQE
AgACMC4DBwQqEr7AANAwEQMGBCoSvsBwAwcAKhK+wHACAwcAKhK+wLALAwcAKhK+
wbALMA0GCSqGSIb3DQEBCwUAA4IBAQALOQqznfunkJEkQ3ymYUO/b+5VY7wkfQMK
q8hCYQbHbD7x/E0bRGxs+SmQSpDxTDaSi6j8Ca86pakDAcogNkOLJNQU1Me2fECt
wQ7DIxaUy4y8rc/csoNSnyN0vOqmNlbz0tMbwm4UjujMS9kfhiGQf9N5xvYvrH1M
ZlqRjnWbe1FBHQUqHbCsp/HFcmKKaf9WENMsf9NydxpNUa1kD1OE1r4MZ2yyVfwi
49k6ISkPQLTMAMOpCuOtXgyfarw2xMWt/Om+1bhDP6j8TDnhAESQtKIYsOQCrGC9
nSa9rTPRDJXFkBmpCYlC45WbWZU6fz84J9m3MJ1bqJAP8MaqZxB2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org