Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DdLo8RgiyDagHJaBOgfki3FXn14.roa
File: DdLo8RgiyDagHJaBOgfki3FXn14.roa (raw, json)
Hash identifier: EMOCXU8EqLONtGTjDKf9SZIk7T3Ur7h28OOJqiWGnIg=
Subject key identifier: 0D:D2:E8:F1:18:22:C8:36:A0:1C:96:81:3A:07:E4:8B:71:57:9F:5E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01865E96A92AFAD873DF33D8AB7D3A163B51
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DdLo8RgiyDagHJaBOgfki3FXn14.roa
Signing time: Fri 17 Feb 2023 08:56:17 +0000
ROA not before: Fri 17 Feb 2023 08:56:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 82.153.245.0/24 maxlen: 24
82.153.64.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
81.168.126.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 07:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:96:a9:2a:fa:d8:73:df:33:d8:ab:7d:3a:16:3b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 17 08:56:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dd2e8f11822c836a01c96813a07e48b71579f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:b5:5e:86:f6:06:a5:b7:99:b6:58:ef:94:
dd:77:d0:51:32:71:cc:79:7d:5f:10:55:92:68:0b:
8e:88:76:d8:85:e9:1f:10:17:ea:66:34:2a:97:5d:
43:ab:f0:28:78:ec:6e:2e:56:6f:0b:11:e6:b3:0a:
1e:1e:40:e2:cd:f6:20:32:61:d0:79:bc:20:93:db:
50:12:1b:9f:b1:3c:0b:64:06:df:2a:0b:82:dc:53:
c2:79:fe:cb:0f:ed:ec:39:f3:f5:24:69:75:d2:fb:
da:a2:e1:0f:1b:4d:2e:a1:ac:7f:be:f8:3b:19:6e:
7a:3b:c3:dc:a7:e9:ef:1f:f3:6e:05:13:52:ae:ea:
ed:a9:27:a1:d5:22:5f:c0:c5:b0:e0:ab:96:e3:2d:
93:45:0c:7a:15:41:b4:9b:15:91:51:99:81:31:fb:
c6:e4:c8:8b:1e:c9:8b:d6:76:be:62:73:8b:43:68:
d9:22:c7:b3:28:a8:60:f6:27:fd:ee:39:b6:c7:77:
82:76:46:8f:51:94:ed:d0:20:2e:59:14:19:83:71:
ea:c7:e5:59:d4:e3:57:4c:c3:60:95:48:50:04:06:
c0:6b:9b:30:7c:95:79:52:3e:63:e9:99:7f:3f:b0:
3e:f8:a2:f4:6c:8f:ef:ef:49:03:01:ed:f5:3a:a7:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D2:E8:F1:18:22:C8:36:A0:1C:96:81:3A:07:E4:8B:71:57:9F:5E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DdLo8RgiyDagHJaBOgfki3FXn14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0-81.168.120.255
81.168.123.0/24
81.168.126.0/24
82.153.1.0/24
82.153.64.0/24
82.153.72.0/24
82.153.78.0/24
82.153.245.0/24
Signature Algorithm: sha256WithRSAEncryption
21:66:4a:46:d3:be:17:ff:03:be:e7:cf:7c:13:35:1a:bf:77:
d8:5c:c1:4d:90:46:ef:26:59:23:7c:87:5c:b7:4e:ef:7f:c7:
50:6f:b9:0f:ac:5b:f6:26:05:6a:7f:23:8f:1f:a7:c8:8b:1e:
0c:2e:7a:c2:bc:8f:f3:65:14:48:df:b7:6e:b8:21:81:65:ea:
ea:d8:c9:ef:e2:71:d5:17:62:95:bb:f4:96:dc:1e:70:da:0a:
c2:14:fb:4c:5b:86:07:c2:f1:0c:8f:59:71:a2:34:73:ce:42:
b2:de:3f:dc:5f:98:ca:e1:ac:df:40:a5:08:9c:be:f5:d3:08:
0a:b6:3a:27:51:a7:80:22:3d:78:8a:6a:b0:7a:10:72:50:13:
bf:41:1c:74:fa:c8:4b:f5:56:c9:d1:03:b5:37:66:3e:63:6e:
2b:f4:f0:28:f9:d0:85:53:fa:52:31:91:f2:42:70:3d:2e:9a:
7d:33:e6:96:4c:a6:e7:36:69:85:32:a4:cd:5d:0d:6d:89:1b:
82:28:dd:a0:4a:4e:0e:f3:1a:73:77:7b:a1:58:bd:6b:c8:80:
16:c2:4e:02:ce:98:1d:8e:61:27:f1:5a:de:51:2b:3c:85:95:
4c:91:5b:3f:b1:0a:f8:70:76:dd:6a:89:ed:5f:2f:90:4f:df:
15:2b:6c:9e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYZelqkq+thz3zPYq306FjtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwMjE3MDg1NjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGQyZThmMTE4MjJjODM2YTAxYzk2ODEzYTA3ZTQ4YjcxNTc5ZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlta1Xob2BqW3mbZY75Tdd9BRMnHM
eX1fEFWSaAuOiHbYhekfEBfqZjQql11Dq/AoeOxuLlZvCxHmswoeHkDizfYgMmHQ
ebwgk9tQEhufsTwLZAbfKguC3FPCef7LD+3sOfP1JGl10vvaouEPG00uoax/vvg7
GW56O8Pcp+nvH/NuBRNSrurtqSeh1SJfwMWw4KuW4y2TRQx6FUG0mxWRUZmBMfvG
5MiLHsmL1na+YnOLQ2jZIsezKKhg9if97jm2x3eCdkaPUZTt0CAuWRQZg3Hqx+VZ
1ONXTMNglUhQBAbAa5swfJV5Uj5j6Zl/P7A++KL0bI/v70kDAe31Oqf2VQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFA3S6PEYIsg2oByWgToH5ItxV59eMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRGRMbzhSZ2l5RGFnSEphQk9nZmtpM0ZYbjE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBABRqHcD
BABRqHgDBABRqHsDBABRqH4DBABSmQEDBABSmUADBABSmUgDBABSmU4DBABSmfUw
DQYJKoZIhvcNAQELBQADggEBACFmSkbTvhf/A77nz3wTNRq/d9hcwU2QRu8mWSN8
h1y3Tu9/x1BvuQ+sW/YmBWp/I48fp8iLHgwuesK8j/NlFEjft264IYFl6urYye/i
cdUXYpW79JbcHnDaCsIU+0xbhgfC8QyPWXGiNHPOQrLeP9xfmMrhrN9ApQicvvXT
CAq2OidRp4AiPXiKarB6EHJQE79BHHT6yEv1VsnRA7U3Zj5jbiv08Cj50IVT+lIx
kfJCcD0umn0z5pZMpuc2aYUypM1dDW2JG4Io3aBKTg7zGnN3e6FYvWvIgBbCTgLO
mB2OYSfxWt5RKzyFlUyRWz+xCvhwdt1qie1fL5BP3xUrbJ4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org