Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LiDjafFTjwYl6XPnDbEBHfkc5SQ.roa
File: LiDjafFTjwYl6XPnDbEBHfkc5SQ.roa (raw, json)
Hash identifier: XtwoT3ZQCA0KYgJe+29DUm4EID5mVipTf4cGA9ZWZ6Y=
Subject key identifier: 2E:20:E3:69:F1:53:8F:06:25:E9:73:E7:0D:B1:01:1D:F9:1C:E5:24
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3494BACA5D786E2A31BE214C7B0FB25
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LiDjafFTjwYl6XPnDbEBHfkc5SQ.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13649
IP address blocks: 82.153.71.0/24 maxlen: 24
82.153.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4b:ac:a5:d7:86:e2:a3:1b:e2:14:c7:b0:fb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e20e369f1538f0625e973e70db1011df91ce524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:80:a4:ff:48:ce:d1:97:ce:d2:e8:4c:24:
71:96:fe:6d:93:b5:3d:62:d4:a2:6d:e8:3b:0c:97:
4f:9f:46:5a:35:18:42:2d:3e:c9:30:8b:dd:7c:42:
0f:be:94:f9:f1:39:a4:2f:ed:f4:c6:62:02:0a:e9:
01:78:40:79:45:a8:58:28:79:2f:57:f8:8b:d6:15:
ca:42:26:90:cb:d7:3b:57:d0:80:08:1f:73:8b:60:
86:31:74:09:fd:5e:05:66:0d:33:bf:c1:50:7c:92:
df:31:e7:36:6c:00:70:46:b3:8a:68:e1:da:ee:54:
df:85:8f:b2:52:57:08:02:78:b5:96:ad:90:75:cf:
7d:b7:0c:87:0f:f1:6b:60:0c:84:bc:c1:e3:0a:29:
54:1f:92:2a:f1:6e:79:16:8b:6a:c4:c6:7b:38:b7:
72:a4:f2:6c:7a:a7:a1:88:77:9c:bf:eb:ed:2e:2e:
fa:3d:38:01:cc:8e:12:ea:3e:ca:59:d3:40:ee:be:
2d:ac:49:54:12:dc:e5:6f:ef:f2:78:d4:c4:74:ec:
c0:1d:85:56:45:c7:d9:9b:1b:89:ee:bf:bb:12:3c:
ef:99:01:01:cf:32:ac:35:55:71:72:cf:97:a2:d5:
3e:15:d0:d5:95:1d:56:ec:8c:09:27:5e:6c:72:6d:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:20:E3:69:F1:53:8F:06:25:E9:73:E7:0D:B1:01:1D:F9:1C:E5:24
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LiDjafFTjwYl6XPnDbEBHfkc5SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.68.0/24
82.153.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5e:db:b3:ba:19:97:c2:f1:68:cc:16:17:7b:7f:e8:2e:bb:
18:ec:34:7a:3a:c2:97:18:4f:fa:24:24:df:a2:1a:91:7f:3d:
7e:a3:09:73:5e:25:19:dd:7e:c9:82:5b:b2:b1:12:e9:b9:8b:
1c:c4:61:30:0d:8a:81:0b:a6:6c:ec:70:77:ce:cc:40:c6:da:
90:e9:5e:9b:56:c2:bd:61:b5:d5:ca:17:23:60:ec:bd:e5:10:
e5:fb:91:4d:d5:a3:c1:15:df:9e:6d:90:65:6c:e2:b1:c9:03:
7b:1a:85:e5:a1:14:91:6c:42:89:a0:fe:56:98:1b:32:80:79:
da:9c:ef:24:5a:fb:9b:73:2e:a0:b8:89:5a:4a:b8:9f:9f:54:
20:39:85:02:eb:c9:05:69:01:07:77:e9:59:f8:d1:f7:43:a5:
03:93:df:2f:40:e6:6c:65:5f:38:91:7f:45:ed:32:7e:ab:ac:
52:c4:a5:fa:61:ae:19:b1:0b:1e:c0:9a:04:a0:55:eb:c7:cb:
7c:32:53:4e:1e:c8:fe:2e:47:18:f2:d0:00:9c:0d:81:49:91:
0a:3e:80:4e:a5:16:1b:9f:d6:0b:f1:1d:80:39:c7:37:74:ed:
02:25:5e:e4:18:55:68:43:40:4e:87:fc:81:c5:a8:da:5d:a6:
43:79:1f:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDSUuspdeG4qMb4hTHsPslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMTAxMDQzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTIwZTM2OWYxNTM4ZjA2MjVlOTczZTcwZGIxMDExZGY5MWNlNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmGApP9IztGXztLoTCRxlv5tk7U9
YtSibeg7DJdPn0ZaNRhCLT7JMIvdfEIPvpT58TmkL+30xmICCukBeEB5RahYKHkv
V/iL1hXKQiaQy9c7V9CACB9zi2CGMXQJ/V4FZg0zv8FQfJLfMec2bABwRrOKaOHa
7lTfhY+yUlcIAni1lq2Qdc99twyHD/FrYAyEvMHjCilUH5Iq8W55FotqxMZ7OLdy
pPJseqehiHecv+vtLi76PTgBzI4S6j7KWdNA7r4trElUEtzlb+/yeNTEdOzAHYVW
RcfZmxuJ7r+7EjzvmQEBzzKsNVVxcs+XotU+FdDVlR1W7IwJJ15scm2VEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC4g42nxU48GJelz5w2xAR35HOUkMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTGlEamFmRlRqd1lsNlhQbkRiRUJIZmtjNVNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUplEAwQA
UplHMA0GCSqGSIb3DQEBCwUAA4IBAQB/XtuzuhmXwvFozBYXe3/oLrsY7DR6OsKX
GE/6JCTfohqRfz1+owlzXiUZ3X7JgluysRLpuYscxGEwDYqBC6Zs7HB3zsxAxtqQ
6V6bVsK9YbXVyhcjYOy95RDl+5FN1aPBFd+ebZBlbOKxyQN7GoXloRSRbEKJoP5W
mBsygHnanO8kWvubcy6guIlaSrifn1QgOYUC68kFaQEHd+lZ+NH3Q6UDk98vQOZs
ZV84kX9F7TJ+q6xSxKX6Ya4ZsQsewJoEoFXrx8t8MlNOHsj+LkcY8tAAnA2BSZEK
PoBOpRYbn9YL8R2AOcc3dO0CJV7kGFVoQ0BOh/yBxajaXaZDeR93
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org