Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LSf3BdGR0pC5QwAuFOoaOBDnM7c.roa
File: LSf3BdGR0pC5QwAuFOoaOBDnM7c.roa (raw, json)
Hash identifier: vQP4E1ma8l5MIr+4ZT8A+bNXU7kzmHHbgvqQBQb8vKI=
Subject key identifier: 2D:27:F7:05:D1:91:D2:90:B9:43:00:2E:14:EA:1A:38:10:E7:33:B7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E865F2131C3B4BB94AD5B3D04F22EBC86
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LSf3BdGR0pC5QwAuFOoaOBDnM7c.roa
Signing time: Thu 28 Mar 2024 18:42:45 +0000
ROA not before: Thu 28 Mar 2024 18:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 82.153.255.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 17:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:5f:21:31:c3:b4:bb:94:ad:5b:3d:04:f2:2e:bc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 28 18:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d27f705d191d290b943002e14ea1a3810e733b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:9a:4f:6d:88:42:b9:e3:b9:aa:a6:60:12:
e6:d2:39:83:92:ac:07:24:da:8f:11:e0:d0:a8:f0:
05:45:9a:80:8b:f5:1a:9e:b0:80:60:c9:8a:e5:a7:
75:82:b4:e8:46:5c:af:99:22:94:48:55:05:5d:fc:
8c:45:ca:7c:9c:6c:db:f0:6c:fc:53:a0:e5:27:46:
fe:81:39:0c:65:f1:f9:45:07:ed:5e:39:f8:ff:ba:
8a:e7:fd:43:48:7c:40:07:75:9a:cd:ae:a2:c8:cb:
13:b6:28:02:41:03:5e:45:92:ac:27:3a:54:eb:52:
98:47:97:8c:64:6a:71:68:d0:18:94:af:ce:de:53:
6b:b7:03:6b:2c:5b:07:be:3b:9c:4f:f9:01:ec:29:
19:a9:d3:29:a6:26:87:d7:d6:34:17:17:f0:8c:4d:
0c:4b:2a:94:73:6d:af:51:ee:17:29:00:76:97:a1:
f0:2d:d2:a8:75:44:ec:cf:84:07:8e:b5:8b:c5:a9:
cf:7d:6d:db:d1:2b:e4:07:20:a6:fb:20:69:76:f7:
5c:fd:1c:8e:c6:f7:d6:9e:64:60:a6:8a:8c:ef:5e:
f4:68:a2:e5:5e:28:18:e6:a7:a0:59:1a:a5:c7:b2:
a1:8c:19:bb:3b:11:ba:45:11:71:ae:27:4c:ba:ea:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:27:F7:05:D1:91:D2:90:B9:43:00:2E:14:EA:1A:38:10:E7:33:B7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LSf3BdGR0pC5QwAuFOoaOBDnM7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.255.0/24
109.176.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a3:6d:c0:a5:3c:b2:15:a4:1e:6b:28:1e:91:62:2d:b1:9b:
b1:76:f2:c5:a8:67:78:15:53:8f:27:a2:66:e3:23:96:d7:a8:
8f:47:8b:fa:68:97:53:51:6d:e9:90:f9:52:09:20:f6:08:53:
e9:5f:ce:a2:46:34:fb:19:8e:17:3f:1b:3f:14:e2:f2:0f:0a:
28:60:67:4d:9e:16:91:d4:a0:21:82:fc:c1:2d:a3:6c:a2:d4:
3c:c8:88:5e:1b:84:b1:44:4f:ea:2c:4e:b9:f2:af:30:28:13:
89:67:0c:ea:d5:9a:e2:90:10:0d:36:50:12:72:1f:bc:8f:d1:
23:60:7d:c7:48:ec:17:68:5a:df:41:72:f7:22:b1:aa:df:54:
87:02:ac:ef:6b:a7:04:e1:ca:9d:d5:72:a2:0a:ac:d1:98:4f:
20:f0:f5:04:44:4f:0c:54:b0:2d:80:35:33:75:15:5a:37:61:
a6:eb:00:db:fc:5c:f1:3c:9b:11:89:4e:c6:c5:bb:3f:dd:69:
c2:1b:e1:9e:0c:84:49:5e:f2:ca:46:77:69:ad:1f:d3:08:cc:
13:ac:81:c5:f5:b3:e7:bb:14:b1:c4:95:3f:37:aa:10:3f:ae:
db:c5:56:1e:64:be:dd:fa:a7:ec:8f:b4:92:21:a4:3c:c7:b6:
5c:41:25:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY6GXyExw7S7lK1bPQTyLryGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMzI4MTg0MjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDI3ZjcwNWQxOTFkMjkwYjk0MzAwMmUxNGVhMWEzODEwZTczM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdaaT22IQrnjuaqmYBLm0jmDkqwH
JNqPEeDQqPAFRZqAi/UanrCAYMmK5ad1grToRlyvmSKUSFUFXfyMRcp8nGzb8Gz8
U6DlJ0b+gTkMZfH5RQftXjn4/7qK5/1DSHxAB3Waza6iyMsTtigCQQNeRZKsJzpU
61KYR5eMZGpxaNAYlK/O3lNrtwNrLFsHvjucT/kB7CkZqdMppiaH19Y0FxfwjE0M
SyqUc22vUe4XKQB2l6HwLdKodUTsz4QHjrWLxanPfW3b0SvkByCm+yBpdvdc/RyO
xvfWnmRgpoqM7170aKLlXigY5qegWRqlx7KhjBm7OxG6RRFxridMuup5fwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC0n9wXRkdKQuUMALhTqGjgQ5zO3MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTFNmM0JkR1IwcEM1UXdBdUZPb2FPQkRuTTdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpn/AwQA
bbAeMA0GCSqGSIb3DQEBCwUAA4IBAQAao23ApTyyFaQeaygekWItsZuxdvLFqGd4
FVOPJ6Jm4yOW16iPR4v6aJdTUW3pkPlSCSD2CFPpX86iRjT7GY4XPxs/FOLyDwoo
YGdNnhaR1KAhgvzBLaNsotQ8yIheG4SxRE/qLE658q8wKBOJZwzq1ZrikBANNlAS
ch+8j9EjYH3HSOwXaFrfQXL3IrGq31SHAqzva6cE4cqd1XKiCqzRmE8g8PUERE8M
VLAtgDUzdRVaN2Gm6wDb/FzxPJsRiU7Gxbs/3WnCG+GeDIRJXvLKRndprR/TCMwT
rIHF9bPnuxSxxJU/N6oQP67bxVYeZL7d+qfsj7SSIaQ8x7ZcQSVT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org