Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5YeY7ECqss3p5W5_r5-_8VP6jOQ.roa
File: 5YeY7ECqss3p5W5_r5-_8VP6jOQ.roa (raw, json)
Hash identifier: HygHjIf+6uzao7uPQPK+1JjShQHvCBdKrFuI8jR8tL4=
Subject key identifier: E5:87:98:EC:40:AA:B2:CD:E9:E5:6E:7F:AF:9F:BF:F1:53:FA:8C:E4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01887B239F3C6D9CDD4EBC32978878D65F69
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5YeY7ECqss3p5W5_r5-_8VP6jOQ.roa
Signing time: Fri 02 Jun 2023 08:05:12 +0000
ROA not before: Fri 02 Jun 2023 08:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 82.153.240.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 13:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:23:9f:3c:6d:9c:dd:4e:bc:32:97:88:78:d6:5f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 2 08:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e58798ec40aab2cde9e56e7faf9fbff153fa8ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:c0:d4:86:5c:4f:01:92:2e:3b:fd:5d:ea:
7e:1e:0f:c5:9a:17:39:81:ee:b7:99:ad:0f:b2:09:
c9:76:f6:bf:7c:85:fe:41:23:6d:23:7a:78:36:3e:
7d:d8:7e:68:56:c6:df:53:bc:25:60:0c:f4:39:23:
a9:37:4c:7a:08:52:a1:f7:17:bd:f2:e8:4d:16:89:
ad:20:04:fc:de:82:78:18:60:59:40:c4:94:56:4a:
32:41:e9:d0:c1:fa:cd:52:3d:d1:86:70:0f:05:f2:
0d:fe:01:1f:12:e5:14:e2:b1:62:cd:db:d1:df:6d:
27:e3:8f:43:44:12:40:d2:4f:7f:4d:4d:eb:5a:dc:
d3:27:7c:bd:16:40:1f:f4:9e:3f:df:d6:4c:a9:51:
f9:bf:17:68:e2:82:e5:d4:bb:39:a4:a1:54:5a:46:
7a:95:51:a0:04:eb:2d:0b:ba:83:9a:d2:ea:5f:57:
c8:82:51:1e:ae:fd:03:50:2c:81:c5:56:be:54:5e:
2e:17:34:2f:f5:34:72:bc:82:3e:e3:e7:4f:e7:cc:
c5:7f:1d:4e:0c:e6:db:41:fe:0c:02:f1:73:f3:e2:
fc:9d:69:f7:06:10:a5:44:98:f9:03:e8:e7:da:76:
2d:03:a2:44:92:ce:a1:bb:86:e6:68:c5:8c:32:7b:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:87:98:EC:40:AA:B2:CD:E9:E5:6E:7F:AF:9F:BF:F1:53:FA:8C:E4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5YeY7ECqss3p5W5_r5-_8VP6jOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.178.0/24
82.153.221.0/24
82.153.240.0/24
82.153.250.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b8:02:d2:f2:fc:a8:cb:32:8c:c1:c7:1c:ba:1e:bb:69:69:
b8:67:88:b3:0f:d3:96:15:fc:d2:5a:a0:42:99:83:68:f1:28:
be:ef:2a:c5:ae:94:d4:f5:60:a5:68:05:e1:b8:fd:70:06:17:
41:65:fc:62:fd:22:f9:09:27:b3:2e:f3:79:d3:41:91:4f:25:
a9:8b:66:ef:03:50:07:bf:75:47:2d:1c:8e:19:31:e5:0d:7d:
92:0b:82:d8:d5:6f:a8:f9:1e:af:cd:9c:7b:14:e2:e1:44:c7:
b9:5d:05:3b:2d:28:a5:7a:a8:21:78:72:b9:c8:45:ce:21:7f:
6e:f3:97:6e:0e:69:55:a4:70:b2:ad:14:ad:3d:c1:7d:95:c4:
19:ea:3d:f1:a7:ab:f4:b8:19:c2:72:21:16:cf:14:ed:a3:cd:
de:df:09:dd:98:cd:66:72:fa:9b:51:47:45:5b:89:7e:5b:81:
5d:21:09:00:23:aa:81:18:2e:75:62:7b:83:59:64:97:10:02:
1f:b5:53:a0:0d:d6:f7:14:6b:b9:df:14:27:e1:cd:4e:3e:2d:
8f:92:7d:a3:50:10:4b:bc:2f:42:c1:03:89:d3:b1:32:ce:88:
4a:60:ac:ce:5e:b6:95:68:3d:dd:85:62:50:47:2f:57:93:0c:
7c:e3:dd:b3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYh7I588bZzdTrwyl4h41l9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwNjAyMDgwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTg3OThlYzQwYWFiMmNkZTllNTZlN2ZhZjlmYmZmMTUzZmE4Y2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmHA1IZcTwGSLjv9Xep+Hg/Fmhc5
ge63ma0PsgnJdva/fIX+QSNtI3p4Nj592H5oVsbfU7wlYAz0OSOpN0x6CFKh9xe9
8uhNFomtIAT83oJ4GGBZQMSUVkoyQenQwfrNUj3RhnAPBfIN/gEfEuUU4rFizdvR
320n449DRBJA0k9/TU3rWtzTJ3y9FkAf9J4/39ZMqVH5vxdo4oLl1Ls5pKFUWkZ6
lVGgBOstC7qDmtLqX1fIglEerv0DUCyBxVa+VF4uFzQv9TRyvII+4+dP58zFfx1O
DObbQf4MAvFz8+L8nWn3BhClRJj5A+jn2nYtA6JEks6hu4bmaMWMMnvMwQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOWHmOxAqrLN6eVuf6+fv/FT+ozkMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNVllWTdFQ3FzczNwNVc1X3I1LV84VlA2ak9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUpiyAwQA
UpndAwQAUpnwAwQAUpn6MA0GCSqGSIb3DQEBCwUAA4IBAQCYuALS8vyoyzKMwccc
uh67aWm4Z4izD9OWFfzSWqBCmYNo8Si+7yrFrpTU9WClaAXhuP1wBhdBZfxi/SL5
CSezLvN500GRTyWpi2bvA1AHv3VHLRyOGTHlDX2SC4LY1W+o+R6vzZx7FOLhRMe5
XQU7LSileqgheHK5yEXOIX9u85duDmlVpHCyrRStPcF9lcQZ6j3xp6v0uBnCciEW
zxTto83e3wndmM1mcvqbUUdFW4l+W4FdIQkAI6qBGC51YnuDWWSXEAIftVOgDdb3
FGu53xQn4c1OPi2Pkn2jUBBLvC9CwQOJ07EyzohKYKzOXraVaD3dhWJQRy9Xkwx8
492z
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:20 2024 by rpki-client on console-ams.rpki-client.org