Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cNdnnZkuHKkPRa-UEnWB9TltzbY.roa
File: cNdnnZkuHKkPRa-UEnWB9TltzbY.roa (raw, json)
Hash identifier: VX8PiV+R9Ey6sReSvlIRr1trDpYxYUFbHjklAAEcYFE=
Subject key identifier: 70:D7:67:9D:99:2E:1C:A9:0F:45:AF:94:12:75:81:F5:39:6D:CD:B6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0187FF9D448EF15E488FEBB1E10FF00B864D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cNdnnZkuHKkPRa-UEnWB9TltzbY.roa
Signing time: Tue 09 May 2023 08:25:09 +0000
ROA not before: Tue 09 May 2023 08:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 82.153.208.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:9d:44:8e:f1:5e:48:8f:eb:b1:e1:0f:f0:0b:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 9 08:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70d7679d992e1ca90f45af94127581f5396dcdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:f0:8c:ef:af:a4:53:e6:f8:cd:9a:52:d5:
57:01:3a:2d:eb:a7:ab:c1:ba:0b:be:f0:d1:95:cf:
2c:16:46:f1:aa:a9:3d:29:18:e5:fc:2f:25:6f:6c:
14:3b:90:8f:bd:28:a3:28:d9:61:d8:b6:2e:c2:08:
b9:bf:3e:3e:58:32:d7:f7:d5:2b:bc:17:f4:61:fa:
f2:e9:da:b1:6a:3b:19:5c:2d:01:91:22:e2:cc:cb:
f4:bd:4c:34:7d:38:6f:ec:28:a6:b8:85:bd:9b:5e:
86:69:8c:53:cb:d8:55:40:25:5b:2d:40:b0:40:60:
61:48:54:50:6d:18:4f:6a:63:aa:01:78:b1:00:10:
a7:c2:4c:de:35:be:c8:7a:a4:a2:5f:f1:65:ea:a3:
3b:9a:78:95:ca:75:92:09:03:5a:0a:87:c4:81:7e:
9d:81:31:7f:d2:09:25:f4:28:58:4f:bd:43:3e:3a:
92:e9:ac:1d:bc:3f:2a:f2:11:0a:91:83:75:14:6a:
22:72:1b:b1:44:01:ab:f0:53:63:92:34:df:d6:87:
61:17:35:c5:61:e7:1c:e6:69:16:9f:2a:9d:4d:69:
1c:a0:28:2a:9b:b3:d9:0a:7b:ae:f7:aa:70:52:6e:
c2:2a:84:28:7d:06:2f:bd:f5:d9:35:4e:45:1c:1c:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D7:67:9D:99:2E:1C:A9:0F:45:AF:94:12:75:81:F5:39:6D:CD:B6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cNdnnZkuHKkPRa-UEnWB9TltzbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.252.0/24
82.153.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:eb:9d:d3:6d:de:ef:1f:06:1b:77:37:f4:06:1d:49:94:d4:
0c:3d:3f:d0:5a:31:9e:7d:78:60:b2:8d:1d:5e:b3:d7:f8:e6:
d6:ce:01:8c:2d:a8:d1:d6:ff:00:57:bb:17:29:a0:7e:b8:c3:
ce:5e:a0:41:79:59:f0:0c:0d:92:11:54:c3:04:fd:bd:70:e6:
1c:d7:58:32:c6:82:bf:f0:77:5e:2d:49:03:5f:39:fb:1c:4b:
10:f3:b6:11:67:9e:43:50:de:65:f2:00:35:56:64:cc:66:e9:
82:f8:e0:90:2b:cb:52:aa:3f:4e:69:d2:f4:ef:66:94:6a:7e:
1b:76:37:0e:05:01:41:06:94:ba:80:94:0e:ef:a4:f5:91:ec:
fa:48:43:77:6e:60:c3:9c:c9:72:ba:37:45:07:e3:15:4c:0c:
07:20:f5:38:82:49:65:ba:1b:f7:b2:d8:cf:9a:f6:00:1a:f3:
d3:ff:62:70:1d:7b:0a:36:d4:b4:e1:20:20:cf:ac:8f:06:5d:
d6:1f:08:6b:cd:51:29:97:9f:0e:b3:96:16:59:71:0d:7c:b9:
49:9b:d5:93:5c:56:61:8a:28:9d:ca:72:74:f2:8f:59:1e:18:
f3:aa:16:5a:7d:12:b6:6c:27:39:b7:23:ae:20:8d:2e:56:68:
bb:8d:7a:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYf/nUSO8V5Ij+ux4Q/wC4ZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwNTA5MDgyNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGQ3Njc5ZDk5MmUxY2E5MGY0NWFmOTQxMjc1ODFmNTM5NmRjZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy/wjO+vpFPm+M2aUtVXATot66er
wboLvvDRlc8sFkbxqqk9KRjl/C8lb2wUO5CPvSijKNlh2LYuwgi5vz4+WDLX99Ur
vBf0Yfry6dqxajsZXC0BkSLizMv0vUw0fThv7CimuIW9m16GaYxTy9hVQCVbLUCw
QGBhSFRQbRhPamOqAXixABCnwkzeNb7IeqSiX/Fl6qM7mniVynWSCQNaCofEgX6d
gTF/0gkl9ChYT71DPjqS6awdvD8q8hEKkYN1FGoichuxRAGr8FNjkjTf1odhFzXF
Yecc5mkWnyqdTWkcoCgqm7PZCnuu96pwUm7CKoQofQYvvfXZNU5FHBziHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHDXZ52ZLhypD0WvlBJ1gfU5bc22MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvY05kbm5aa3VIS2tQUmEtVUVuV0I5VGx0emJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpj8AwQA
UpnQMA0GCSqGSIb3DQEBCwUAA4IBAQBf653Tbd7vHwYbdzf0Bh1JlNQMPT/QWjGe
fXhgso0dXrPX+ObWzgGMLajR1v8AV7sXKaB+uMPOXqBBeVnwDA2SEVTDBP29cOYc
11gyxoK/8HdeLUkDXzn7HEsQ87YRZ55DUN5l8gA1VmTMZumC+OCQK8tSqj9OadL0
72aUan4bdjcOBQFBBpS6gJQO76T1kez6SEN3bmDDnMlyujdFB+MVTAwHIPU4gkll
uhv3stjPmvYAGvPT/2JwHXsKNtS04SAgz6yPBl3WHwhrzVEpl58Os5YWWXENfLlJ
m9WTXFZhiiidynJ08o9ZHhjzqhZafRK2bCc5tyOuII0uVmi7jXoL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org