Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/314cwKvgbLIc8HeNaNuNovF58Ms.roa
File: 314cwKvgbLIc8HeNaNuNovF58Ms.roa (raw, json)
Hash identifier: F675MUEmqmA3Uh1c5X5k5oQmMDWrTxszGtd+zhTXMw4=
Subject key identifier: DF:5E:1C:C0:AB:E0:6C:B2:1C:F0:77:8D:68:DB:8D:A2:F1:79:F0:CB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192533006ADA0898CA81FFE9DC20062C583
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/314cwKvgbLIc8HeNaNuNovF58Ms.roa
Signing time: Thu 03 Oct 2024 16:21:49 +0000
ROA not before: Thu 03 Oct 2024 16:21:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 82.152.98.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
82.153.222.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.50.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
213.218.234.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 17:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:30:06:ad:a0:89:8c:a8:1f:fe:9d:c2:00:62:c5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 3 16:21:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df5e1cc0abe06cb21cf0778d68db8da2f179f0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:43:e8:12:6b:e1:ee:de:4b:91:44:66:93:
c2:69:e8:6c:94:3e:25:4d:94:81:b5:cb:e4:bf:9d:
51:ad:57:d5:eb:62:3c:4c:42:35:ff:7f:e9:a4:16:
51:ab:a0:a6:07:ca:59:1d:ea:eb:2a:72:e8:6b:f4:
5f:2a:36:f7:1d:fa:72:ab:89:7b:74:d3:b8:c1:3c:
ac:ff:b2:b1:d4:c1:b6:be:c2:f9:93:62:7c:3e:07:
ff:8d:82:af:0b:c2:ab:e9:07:7c:ca:c8:8b:f5:b8:
6e:df:ce:99:b5:11:76:5c:db:7e:e0:74:c0:63:82:
88:ab:63:bf:cf:0e:2b:4d:5e:e1:9d:f2:63:3f:6f:
05:e6:3b:51:a2:7d:5d:9c:4b:81:b0:5e:b4:0b:de:
7d:2c:a0:01:8d:d4:01:89:78:04:16:3e:a3:6c:a2:
b8:bc:3c:96:03:16:e6:b3:7e:9a:a7:38:85:42:1c:
6f:a5:ea:a2:33:b3:6a:17:7e:ff:eb:47:cf:9e:3c:
01:83:6b:c3:78:95:e2:5a:f3:74:07:13:20:ae:6e:
c5:1a:e8:b3:2d:ab:58:25:f0:7f:7d:e4:37:cf:64:
6f:12:f8:bd:3e:56:00:fc:de:ad:fd:a3:41:9e:12:
05:62:60:c1:ac:a7:70:30:0b:6b:87:24:4d:4e:2f:
a4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:1C:C0:AB:E0:6C:B2:1C:F0:77:8D:68:DB:8D:A2:F1:79:F0:CB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/314cwKvgbLIc8HeNaNuNovF58Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.98.0/24
82.153.205.0/24
82.153.222.0/24
82.153.243.0/24
89.213.50.0/24
109.176.244.0/24
213.218.234.0/24
217.145.68.0/24
Signature Algorithm: sha256WithRSAEncryption
30:82:25:fe:54:54:1a:2a:07:db:c2:88:39:cd:81:60:56:dd:
db:ea:77:e0:dc:22:bc:fe:c8:7a:7f:f2:92:1b:66:bc:2f:5e:
e8:ae:4f:ca:2e:27:cc:f8:af:4d:cd:43:38:b7:bd:d2:77:30:
9a:d2:b2:26:0b:75:53:b6:fc:66:bb:5f:51:67:a3:7b:c2:0c:
30:8f:59:13:bf:4a:2e:79:1e:f5:44:42:e5:af:6e:50:2b:68:
31:36:2f:5d:19:d3:87:a2:da:df:11:15:65:47:7d:bb:9e:d2:
25:b9:79:4f:16:8a:a6:33:ac:cd:0f:95:14:e3:c4:12:d1:9e:
8f:c5:a4:71:a8:eb:92:06:b1:66:fa:ad:aa:89:f8:9b:87:6a:
fb:2a:8c:be:74:34:b8:da:f9:e7:2d:dd:80:5d:28:ef:d0:14:
fc:0b:fe:cc:68:6a:2b:06:c9:ad:2a:a0:10:05:6d:e5:34:6b:
b5:0e:3f:80:c5:9a:12:ca:31:b1:f9:e8:41:38:ab:fa:de:86:
3e:8a:54:d3:66:40:ab:bf:ac:db:79:c8:9d:ac:5c:96:3f:8a:
f9:4e:42:bc:ad:c6:7c:60:2f:e1:41:8d:c8:f1:50:ce:15:e0:
3e:4a:0a:38:08:7b:aa:4f:b7:b3:2a:fc:4b:61:cd:c7:87:ed:
74:94:4a:ad
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZJTMAatoImMqB/+ncIAYsWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMDAzMTYyMTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjVlMWNjMGFiZTA2Y2IyMWNmMDc3OGQ2OGRiOGRhMmYxNzlmMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4FD6BJr4e7eS5FEZpPCaehslD4l
TZSBtcvkv51RrVfV62I8TEI1/3/ppBZRq6CmB8pZHerrKnLoa/RfKjb3Hfpyq4l7
dNO4wTys/7Kx1MG2vsL5k2J8Pgf/jYKvC8Kr6Qd8ysiL9bhu386ZtRF2XNt+4HTA
Y4KIq2O/zw4rTV7hnfJjP28F5jtRon1dnEuBsF60C959LKABjdQBiXgEFj6jbKK4
vDyWAxbms36apziFQhxvpeqiM7NqF37/60fPnjwBg2vDeJXiWvN0BxMgrm7FGuiz
LatYJfB/feQ3z2RvEvi9PlYA/N6t/aNBnhIFYmDBrKdwMAtrhyRNTi+k5QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFN9eHMCr4GyyHPB3jWjbjaLxefDLMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMzE0Y3dLdmdiTEljOEhlTmFOdU5vdkY1OE1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAUphiAwQA
UpnNAwQAUpneAwQAUpnzAwQAWdUyAwQAbbD0AwQA1drqAwQA2ZFEMA0GCSqGSIb3
DQEBCwUAA4IBAQAwgiX+VFQaKgfbwog5zYFgVt3b6nfg3CK8/sh6f/KSG2a8L17o
rk/KLifM+K9NzUM4t73SdzCa0rImC3VTtvxmu19RZ6N7wgwwj1kTv0oueR71RELl
r25QK2gxNi9dGdOHotrfERVlR327ntIluXlPFoqmM6zND5UU48QS0Z6PxaRxqOuS
BrFm+q2qifibh2r7Koy+dDS42vnnLd2AXSjv0BT8C/7MaGorBsmtKqAQBW3lNGu1
Dj+AxZoSyjGx+ehBOKv63oY+ilTTZkCrv6zbecidrFyWP4r5TkK8rcZ8YC/hQY3I
8VDOFeA+Sgo4CHuqT7ezKvxLYc3Hh+10lEqt
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:26:35 2025 by rpki-client