Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_4QRInB0GuVo84UMkz4SjkYdzIA.roa
File: _4QRInB0GuVo84UMkz4SjkYdzIA.roa (raw, json)
Hash identifier: AdvYgt+JAXEEPhwYEkXqy9w0Wlb7witCA0qy6WIW0CM=
Subject key identifier: FF:84:11:22:70:74:1A:E5:68:F3:85:0C:93:3E:12:8E:46:1D:CC:80
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D6990D887EC6FCB8DEBA37B8398517F66
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_4QRInB0GuVo84UMkz4SjkYdzIA.roa
Signing time: Fri 02 Feb 2024 11:25:16 +0000
ROA not before: Fri 02 Feb 2024 11:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
89.213.133.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 18:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:90:d8:87:ec:6f:cb:8d:eb:a3:7b:83:98:51:7f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 2 11:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff84112270741ae568f3850c933e128e461dcc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bd:73:e8:ec:35:0a:0f:0e:23:0d:6c:7f:6a:
37:ec:7e:3b:e9:d8:9a:46:d0:30:7e:c2:18:30:44:
71:d3:96:78:71:32:af:73:18:ad:29:22:5f:7a:4b:
c4:b9:55:db:72:5b:0c:da:b7:2b:19:78:11:a3:aa:
8c:03:fc:66:40:bc:de:f6:27:cb:c9:67:fb:cf:40:
ac:14:4c:47:b7:8a:4c:c5:f0:20:af:ec:91:f5:9f:
d9:0b:3d:18:df:6c:df:b2:d3:96:98:f6:fb:20:22:
60:7d:58:e3:c1:81:a8:22:b5:97:68:1e:91:c9:7b:
53:85:3d:3c:c7:27:ed:7e:f5:14:d7:bf:01:56:22:
a0:bf:ba:92:22:4c:25:c6:84:11:d1:43:e9:49:39:
35:a5:48:76:f5:25:29:d1:cf:78:ef:92:0e:7f:0d:
0e:3e:a9:da:b6:30:e7:91:2e:5c:56:86:e5:1b:d1:
5d:de:0e:56:c2:b6:f0:47:34:e8:73:d5:0c:02:52:
71:dd:76:7d:1f:58:e0:f8:f0:32:ac:ba:76:a9:4f:
b4:4e:1c:4f:f3:cd:8c:1b:86:af:43:8d:7e:92:74:
fb:ca:1c:ea:32:71:86:66:76:69:95:76:3a:ed:dd:
89:4d:b3:22:f7:d6:0a:39:d0:06:97:cf:e4:0b:76:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:11:22:70:74:1A:E5:68:F3:85:0C:93:3E:12:8E:46:1D:CC:80
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_4QRInB0GuVo84UMkz4SjkYdzIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.136.0/22
89.213.133.0/24
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2b:fe:36:cf:1c:f4:3f:6f:41:a5:99:42:c4:8b:f0:b3:d9:
21:20:1a:e5:d2:03:45:45:9d:fa:05:b0:01:f3:01:fb:3f:86:
ad:f2:7f:be:9b:66:d1:23:26:16:79:8c:6e:46:59:3a:cf:41:
bf:a1:de:f8:97:1c:a6:cf:b4:e0:cd:2f:69:28:56:6b:dc:79:
3e:44:e1:5c:aa:75:4a:ef:27:f7:de:31:17:93:04:f6:c4:35:
9a:f4:79:c9:56:7e:e7:c1:2f:13:71:a4:e5:10:15:2e:5c:24:
12:6b:0e:7d:14:29:a5:57:38:65:b7:a2:9d:f8:2b:59:82:db:
f1:a7:34:15:91:4b:fa:a1:8e:96:f3:46:fb:46:51:04:df:da:
c7:b6:2f:8d:e7:e7:97:fa:43:3e:c3:1c:e5:53:31:59:b7:4a:
84:e8:dd:5a:42:70:da:c6:dc:56:a8:c6:6f:60:f7:da:d7:ba:
ab:34:4a:4d:90:0a:5d:40:57:7a:6c:d2:d3:c3:f3:0f:c8:59:
df:e3:5d:50:a1:8c:27:19:e9:7f:eb:65:49:1b:7e:2d:e9:70:
db:78:34:67:4e:01:c6:d6:06:9b:f8:59:43:90:27:dd:98:ad:
96:a9:bb:1f:f4:f7:2b:01:42:c3:ef:cf:2a:27:ef:e3:d7:df:
d6:11:80:7c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAY1pkNiH7G/Ljeuje4OYUX9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMjAyMTEyNTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjg0MTEyMjcwNzQxYWU1NjhmMzg1MGM5MzNlMTI4ZTQ2MWRjYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib1z6Ow1Cg8OIw1sf2o37H476dia
RtAwfsIYMERx05Z4cTKvcxitKSJfekvEuVXbclsM2rcrGXgRo6qMA/xmQLze9ifL
yWf7z0CsFExHt4pMxfAgr+yR9Z/ZCz0Y32zfstOWmPb7ICJgfVjjwYGoIrWXaB6R
yXtThT08xyftfvUU178BViKgv7qSIkwlxoQR0UPpSTk1pUh29SUp0c9475IOfw0O
PqnatjDnkS5cVoblG9Fd3g5WwrbwRzToc9UMAlJx3XZ9H1jg+PAyrLp2qU+0ThxP
882MG4avQ41+knT7yhzqMnGGZnZplXY67d2JTbMi99YKOdAGl8/kC3Zy2wIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFP+EESJwdBrlaPOFDJM+Eo5GHcyAMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvXzRRUkluQjBHdVZvODRVTWt6NFNqa1lkeklBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCUpmIAwQA
WdWFMAwDBAJZ1ZQDBAVZ1YADBABZ1aUDBAJZ1awDBABZ1bQDBAG5MX4DBADVmCow
DQYJKoZIhvcNAQELBQADggEBAKUr/jbPHPQ/b0GlmULEi/Cz2SEgGuXSA0VFnfoF
sAHzAfs/hq3yf76bZtEjJhZ5jG5GWTrPQb+h3viXHKbPtODNL2koVmvceT5E4Vyq
dUrvJ/feMReTBPbENZr0eclWfufBLxNxpOUQFS5cJBJrDn0UKaVXOGW3op34K1mC
2/GnNBWRS/qhjpbzRvtGUQTf2se2L43n55f6Qz7DHOVTMVm3SoTo3VpCcNrG3Fao
xm9g99rXuqs0Sk2QCl1AV3ps0tPD8w/IWd/jXVChjCcZ6X/rZUkbfi3pcNt4NGdO
AcbWBpv4WUOQJ92YrZapux/09ysBQsPvzyon7+PX39YRgHw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org