Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ItF61i26mqq9YRtaHfYwl7knXVI.roa
File: ItF61i26mqq9YRtaHfYwl7knXVI.roa (raw, json)
Hash identifier: vP8uBKmf/QKahdbReqTSkmc+pKhzYU7+W4qzOuAi7cI=
Subject key identifier: 22:D1:7A:D6:2D:BA:9A:AA:BD:61:1B:5A:1D:F6:30:97:B9:27:5D:52
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EEB23E8D9D1E5B4E78D474EB0F87E14E1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ItF61i26mqq9YRtaHfYwl7knXVI.roa
Signing time: Wed 17 Apr 2024 08:19:42 +0000
ROA not before: Wed 17 Apr 2024 08:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 82.153.65.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
213.218.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:23:e8:d9:d1:e5:b4:e7:8d:47:4e:b0:f8:7e:14:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 17 08:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22d17ad62dba9aaabd611b5a1df63097b9275d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:f0:ca:69:e2:4f:ae:4a:86:28:23:3e:fa:
d2:de:bb:b3:5c:2e:c2:0d:b6:42:76:c8:33:b3:48:
b9:50:31:84:e2:f6:8a:97:5f:6c:b1:bf:c2:8b:23:
c5:a9:c8:11:06:8e:01:73:53:05:8c:f2:87:a9:98:
b9:9b:87:9d:12:53:e8:ee:f1:35:c8:b3:84:2d:72:
43:db:f9:8d:cf:04:be:b2:f9:4e:4b:82:0b:c1:f1:
db:89:84:c4:2e:f7:f1:cd:7f:64:d2:09:a0:3d:ba:
16:4d:bd:c9:dc:5d:b2:6b:6b:87:b4:cc:a6:f1:8f:
22:63:04:a0:f1:6e:9e:27:62:35:72:ca:c5:c0:ca:
b3:63:5c:11:d8:fe:5b:20:f2:65:60:8e:af:bf:7e:
4f:f4:03:30:ba:c9:f0:92:9e:4c:f8:09:af:02:6a:
11:9c:d4:56:7c:d0:10:69:21:19:5f:6e:98:a8:cf:
ff:f4:6b:6f:51:8c:df:a2:79:2c:58:1c:4a:d6:2a:
ac:52:70:4b:cc:60:39:d3:a6:4a:33:2a:37:9b:b1:
2e:36:df:88:70:41:91:93:fc:8b:bd:bf:31:f3:ac:
05:8b:55:ee:0e:f4:64:5f:33:eb:f5:3e:e7:70:66:
2e:73:05:f1:62:45:0b:3a:7c:bf:98:41:a3:74:35:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:7A:D6:2D:BA:9A:AA:BD:61:1B:5A:1D:F6:30:97:B9:27:5D:52
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ItF61i26mqq9YRtaHfYwl7knXVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.65.0/24
89.213.164.0/24
89.213.184.0/24
213.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
97:78:a3:e6:13:60:d1:1e:03:97:f9:fd:ce:28:35:6d:44:4d:
02:6a:f1:b2:fc:ac:a7:31:fc:cb:ca:24:d4:bf:79:82:33:3a:
94:f3:bc:a6:62:36:9e:7c:b1:49:70:e2:e9:da:db:2d:0e:14:
5d:db:82:46:e7:0d:18:7a:58:24:df:78:f4:ae:74:5a:a0:be:
c4:ef:9c:df:e5:7d:c5:e8:97:01:cd:ee:3e:2a:4b:19:4a:6d:
98:2e:67:d8:83:94:43:a8:09:ff:41:c1:16:a6:31:2b:bc:9a:
25:7c:0d:fd:8c:d9:dd:ea:50:49:03:ca:ef:e2:c7:01:6b:91:
bd:a4:f7:cc:d5:c6:75:e4:6b:e2:ff:9d:3c:cd:d6:22:29:19:
0d:85:d8:03:da:a1:8c:28:3b:cc:f7:83:fb:73:b6:06:71:d5:
c1:60:36:d6:d4:d3:4c:eb:84:35:da:bd:35:9d:12:90:1a:00:
f8:fd:ec:4f:c9:6f:4e:79:0a:3f:05:9c:a6:84:fa:c6:81:96:
e1:5e:55:5a:df:27:24:ff:ee:c5:1c:2d:ef:7f:0c:25:b9:bf:
09:48:cd:5c:80:84:72:50:54:cc:36:9f:b8:f7:fc:80:db:bb:
26:8e:8c:27:c6:0a:d8:72:a5:49:c3:68:00:93:32:b9:d8:1b:
8e:16:a4:be
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY7rI+jZ0eW0541HTrD4fhThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDE3MDgxOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQxN2FkNjJkYmE5YWFhYmQ2MTFiNWExZGY2MzA5N2I5Mjc1ZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSjwymniT65KhigjPvrS3ruzXC7C
DbZCdsgzs0i5UDGE4vaKl19ssb/CiyPFqcgRBo4Bc1MFjPKHqZi5m4edElPo7vE1
yLOELXJD2/mNzwS+svlOS4ILwfHbiYTELvfxzX9k0gmgPboWTb3J3F2ya2uHtMym
8Y8iYwSg8W6eJ2I1csrFwMqzY1wR2P5bIPJlYI6vv35P9AMwusnwkp5M+AmvAmoR
nNRWfNAQaSEZX26YqM//9GtvUYzfonksWBxK1iqsUnBLzGA506ZKMyo3m7EuNt+I
cEGRk/yLvb8x86wFi1XuDvRkXzPr9T7ncGYucwXxYkULOny/mEGjdDXF8QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCLRetYtupqqvWEbWh32MJe5J11SMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSXRGNjFpMjZtcXE5WVJ0YUhmWXdsN2tuWFZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUplBAwQA
WdWkAwQAWdW4AwQA1dr+MA0GCSqGSIb3DQEBCwUAA4IBAQCXeKPmE2DRHgOX+f3O
KDVtRE0CavGy/KynMfzLyiTUv3mCMzqU87ymYjaefLFJcOLp2tstDhRd24JG5w0Y
elgk33j0rnRaoL7E75zf5X3F6JcBze4+KksZSm2YLmfYg5RDqAn/QcEWpjErvJol
fA39jNnd6lBJA8rv4scBa5G9pPfM1cZ15Gvi/508zdYiKRkNhdgD2qGMKDvM94P7
c7YGcdXBYDbW1NNM64Q12r01nRKQGgD4/exPyW9OeQo/BZymhPrGgZbhXlVa3yck
/+7FHC3vfwwlub8JSM1cgIRyUFTMNp+49/yA27smjownxgrYcqVJw2gAkzK52BuO
FqS+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org