Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5-TtRkjLw6DEbxvgHKfMM2tk0ts.roa
File: 5-TtRkjLw6DEbxvgHKfMM2tk0ts.roa (raw, json)
Hash identifier: rSSiVtbLJPaam8962b5E1TvM8kKbvz6lqWFnuE2vk4M=
Subject key identifier: E7:E4:ED:46:48:CB:C3:A0:C4:6F:1B:E0:1C:A7:CC:33:6B:64:D2:DB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190BC637BC7295E46BB801BE59E04605D93
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5-TtRkjLw6DEbxvgHKfMM2tk0ts.roa
Signing time: Tue 16 Jul 2024 16:32:34 +0000
ROA not before: Tue 16 Jul 2024 16:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 82.152.49.0/24 maxlen: 24
82.153.228.0/23 maxlen: 24
89.213.129.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 16:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bc:63:7b:c7:29:5e:46:bb:80:1b:e5:9e:04:60:5d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 16 16:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7e4ed4648cbc3a0c46f1be01ca7cc336b64d2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f3:87:12:7a:1f:08:b1:af:53:f4:ba:26:9b:
12:cf:a7:d8:b7:ce:03:1d:b7:e3:26:9a:84:8f:a1:
94:75:96:01:5f:a9:b3:65:65:8f:5c:0b:1e:f6:d2:
71:57:fb:ed:5f:24:4b:32:94:f6:e6:ce:80:21:e2:
f9:53:f2:17:12:08:46:3e:a7:48:72:6a:7f:0f:fa:
7d:f4:1d:d1:6a:61:49:14:12:fd:8d:de:3e:92:a6:
67:48:97:57:aa:ee:4a:f5:cc:62:c3:c0:c4:fc:ca:
68:32:b4:9d:f0:03:d9:23:f6:c4:06:ca:e3:ac:08:
83:c5:e4:20:c7:97:43:54:a8:b4:11:ae:3f:40:ab:
cf:e0:98:b2:19:b8:64:fd:68:d1:2a:a5:73:ab:71:
d1:5e:60:ff:7c:d9:df:68:6e:ad:21:55:3e:dc:3f:
8d:a8:10:a9:0a:89:82:5b:4e:13:cc:54:ca:05:26:
12:70:1c:34:cc:71:fc:5e:b1:72:e6:b2:de:53:30:
91:5a:d6:bb:d8:89:85:1f:c5:64:d6:e2:16:0f:51:
25:3c:cd:54:1f:5b:d7:47:b9:68:46:c3:18:a0:a4:
48:ed:01:f3:30:a0:3f:3f:1e:b2:6f:39:a1:34:b8:
8a:af:46:3c:30:2d:ec:28:fd:45:25:91:74:c5:27:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E4:ED:46:48:CB:C3:A0:C4:6F:1B:E0:1C:A7:CC:33:6B:64:D2:DB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5-TtRkjLw6DEbxvgHKfMM2tk0ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.49.0/24
82.153.228.0/23
89.213.129.0/24
213.218.237.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0e:83:1e:46:36:34:c5:75:a2:5d:90:41:97:ca:05:6f:25:
2b:1d:76:59:d5:cd:f5:06:ea:f4:c6:f4:f1:22:0d:32:33:c4:
b8:bc:ef:59:33:15:30:26:00:e3:2a:20:da:50:6a:91:bf:28:
5b:b4:9d:73:47:ce:02:a5:89:b7:42:70:43:b9:29:3d:7f:00:
24:5e:12:5d:03:4d:41:4c:77:b2:9e:5e:12:53:66:f4:a0:cf:
a9:37:25:65:9b:cd:84:c8:0d:d5:29:fb:c4:14:f1:e9:6e:6b:
66:dd:1c:22:d6:15:ea:29:64:0c:29:a3:84:a2:be:bf:23:22:
d9:8f:e4:86:b7:1d:30:10:61:8c:cc:a3:e0:4c:73:28:71:a6:
37:f3:80:55:93:85:86:b9:5f:53:8b:ac:52:c6:c7:e8:6e:6d:
62:11:a2:c1:bb:8f:ad:37:d9:25:2d:9c:65:3a:46:5a:f4:fa:
94:a3:66:10:92:1d:26:ec:c2:ed:40:4c:06:f0:cb:66:80:5f:
b7:68:66:f0:99:7d:58:5a:05:e2:f8:0b:af:66:ef:a6:f7:62:
cd:3c:ed:f2:87:cf:cb:da:98:e6:d4:f6:75:e0:1f:b4:d3:a0:
86:35:ec:ce:d3:49:2c:5d:ad:8e:70:b4:53:e3:86:84:ea:91:
2a:d5:d1:2a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZC8Y3vHKV5Gu4Ab5Z4EYF2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNzE2MTYzMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2U0ZWQ0NjQ4Y2JjM2EwYzQ2ZjFiZTAxY2E3Y2MzMzZiNjRkMmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7POHEnofCLGvU/S6JpsSz6fYt84D
HbfjJpqEj6GUdZYBX6mzZWWPXAse9tJxV/vtXyRLMpT25s6AIeL5U/IXEghGPqdI
cmp/D/p99B3RamFJFBL9jd4+kqZnSJdXqu5K9cxiw8DE/MpoMrSd8APZI/bEBsrj
rAiDxeQgx5dDVKi0Ea4/QKvP4JiyGbhk/WjRKqVzq3HRXmD/fNnfaG6tIVU+3D+N
qBCpComCW04TzFTKBSYScBw0zHH8XrFy5rLeUzCRWta72ImFH8Vk1uIWD1ElPM1U
H1vXR7loRsMYoKRI7QHzMKA/Px6ybzmhNLiKr0Y8MC3sKP1FJZF0xSfQmQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOfk7UZIy8OgxG8b4BynzDNrZNLbMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNS1UdFJrakx3NkRFYnh2Z0hLZk1NMnRrMHRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUpgxAwQB
UpnkAwQAWdWBAwQA1drtMA0GCSqGSIb3DQEBCwUAA4IBAQARDoMeRjY0xXWiXZBB
l8oFbyUrHXZZ1c31Bur0xvTxIg0yM8S4vO9ZMxUwJgDjKiDaUGqRvyhbtJ1zR84C
pYm3QnBDuSk9fwAkXhJdA01BTHeynl4SU2b0oM+pNyVlm82EyA3VKfvEFPHpbmtm
3Rwi1hXqKWQMKaOEor6/IyLZj+SGtx0wEGGMzKPgTHMocaY384BVk4WGuV9Ti6xS
xsfobm1iEaLBu4+tN9klLZxlOkZa9PqUo2YQkh0m7MLtQEwG8MtmgF+3aGbwmX1Y
WgXi+AuvZu+m92LNPO3yh8/L2pjm1PZ14B+006CGNezO00ksXa2OcLRT44aE6pEq
1dEq
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:21:38 2025 by rpki-client