Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IVpxDFfeUXPscWEx294F_oVo8wk.roa
File: IVpxDFfeUXPscWEx294F_oVo8wk.roa (raw, json)
Hash identifier: /HCB8+67OH3TS5XJXhdzXArbDPQWR+2TQzhOkngZqZw=
Subject key identifier: 21:5A:71:0C:57:DE:51:73:EC:71:61:31:DB:DE:05:FE:85:68:F3:09
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0186E9B2FE32E20F002D416E54FC26C26D3C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IVpxDFfeUXPscWEx294F_oVo8wk.roa
Signing time: Thu 16 Mar 2023 09:14:27 +0000
ROA not before: Thu 16 Mar 2023 09:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 82.153.136.0/22 maxlen: 22
82.153.248.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 07:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:b2:fe:32:e2:0f:00:2d:41:6e:54:fc:26:c2:6d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 16 09:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=215a710c57de5173ec716131dbde05fe8568f309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:36:1e:94:89:98:e9:37:62:32:e8:43:65:
b8:0b:f0:a0:97:57:cb:db:46:7f:00:0a:76:38:22:
f3:27:85:d3:aa:4d:36:59:f6:88:ce:4c:cd:53:a0:
57:d5:70:04:24:9d:36:00:0d:6c:77:9c:6d:aa:85:
2a:c6:cb:5a:2f:25:17:23:f3:36:cf:08:d0:0f:c9:
54:9b:2b:75:bf:47:7a:ae:31:e1:b7:dd:b0:40:af:
e6:46:9b:50:6d:17:27:00:3e:cf:cb:d8:21:85:15:
61:d4:fe:b2:56:52:68:44:99:11:af:ec:31:02:2d:
3c:6c:2a:93:07:d0:6c:a2:76:f7:2c:9e:87:6f:53:
cf:38:7f:26:5e:50:d2:32:33:1d:39:be:b5:69:fa:
c4:97:17:16:87:2e:62:73:3c:10:d8:47:f9:56:20:
20:fb:c8:90:51:be:1f:b6:9a:50:49:a0:52:02:04:
77:9f:27:06:d3:49:c0:25:6c:72:ca:77:8d:9a:47:
4a:12:ae:a0:09:f7:5c:76:2b:76:1a:c3:fb:e7:81:
42:a8:12:44:85:c0:1d:cd:9c:bf:34:5b:e9:86:4b:
8e:78:eb:f9:a1:0f:c1:8c:e1:56:43:0f:82:bb:8a:
f3:46:22:17:1f:ca:ad:12:87:8d:7d:eb:0c:cf:b5:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5A:71:0C:57:DE:51:73:EC:71:61:31:DB:DE:05:FE:85:68:F3:09
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IVpxDFfeUXPscWEx294F_oVo8wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.73.0/24
82.153.136.0/22
82.153.248.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d2:a3:76:26:9e:ee:4e:17:02:dc:32:2b:3c:c8:ee:db:7f:
13:5c:6f:b6:de:a7:76:12:96:5b:8e:3a:6f:6e:ad:b7:87:2a:
8b:32:eb:1d:21:b1:a8:9a:da:74:70:02:b8:ec:bf:74:e0:fd:
6c:14:7f:29:23:f4:66:6e:1d:fb:13:2b:60:0c:9e:74:43:39:
dd:04:fa:89:06:6f:43:74:d5:7d:81:8b:79:76:a6:b8:80:90:
05:14:bc:3b:90:ec:b5:5b:f5:a5:7b:8f:85:3f:63:a2:ba:7f:
1c:c6:01:a8:d0:70:0e:15:9a:86:68:d7:78:c1:dc:e1:a8:f3:
35:71:15:f2:e5:5e:e6:38:f5:fa:c9:63:eb:1a:29:43:80:d9:
59:11:2a:65:ed:51:2d:82:b2:d6:c9:c3:b9:7e:04:52:4b:0e:
1f:7b:8c:2c:a4:d9:af:2b:4b:01:9e:a9:ef:46:43:fb:c7:fb:
77:46:cc:2d:c1:d9:de:28:16:8d:f1:63:54:66:75:03:bb:1a:
f0:9a:e7:d6:16:e7:fa:41:88:eb:eb:40:d8:21:3a:78:ba:3e:
23:1a:dd:ef:29:e0:38:b3:2d:44:2f:32:f8:90:29:dc:82:eb:
fc:86:04:7d:e2:2e:6c:52:b3:9c:38:8c:42:ff:0c:a0:fe:72:
a0:71:2f:7f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYbpsv4y4g8ALUFuVPwmwm08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwMzE2MDkxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTVhNzEwYzU3ZGU1MTczZWM3MTYxMzFkYmRlMDVmZTg1NjhmMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Y2HpSJmOk3YjLoQ2W4C/Cgl1fL
20Z/AAp2OCLzJ4XTqk02WfaIzkzNU6BX1XAEJJ02AA1sd5xtqoUqxstaLyUXI/M2
zwjQD8lUmyt1v0d6rjHht92wQK/mRptQbRcnAD7Py9ghhRVh1P6yVlJoRJkRr+wx
Ai08bCqTB9Bsonb3LJ6Hb1PPOH8mXlDSMjMdOb61afrElxcWhy5iczwQ2Ef5ViAg
+8iQUb4ftppQSaBSAgR3nycG00nAJWxyyneNmkdKEq6gCfdcdit2GsP754FCqBJE
hcAdzZy/NFvphkuOeOv5oQ/BjOFWQw+Cu4rzRiIXH8qtEoeNfesMz7WCvQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCFacQxX3lFz7HFhMdveBf6FaPMJMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSVZweERGZmVVWFBzY1dFeDI5NEZfb1ZvOHdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUplJAwQC
UpmIAwQAUpn4MA0GCSqGSIb3DQEBCwUAA4IBAQB40qN2Jp7uThcC3DIrPMju238T
XG+23qd2EpZbjjpvbq23hyqLMusdIbGomtp0cAK47L904P1sFH8pI/Rmbh37Eytg
DJ50QzndBPqJBm9DdNV9gYt5dqa4gJAFFLw7kOy1W/Wle4+FP2Oiun8cxgGo0HAO
FZqGaNd4wdzhqPM1cRXy5V7mOPX6yWPrGilDgNlZESpl7VEtgrLWycO5fgRSSw4f
e4wspNmvK0sBnqnvRkP7x/t3RswtwdneKBaN8WNUZnUDuxrwmufWFuf6QYjr60DY
ITp4uj4jGt3vKeA4sy1ELzL4kCncguv8hgR94i5sUrOcOIxC/wyg/nKgcS9/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org