Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d4d30GrpWlP0CWPC1sNq-08sCMY.roa
File: d4d30GrpWlP0CWPC1sNq-08sCMY.roa (raw, json)
Hash identifier: CSpYXJPO769dsL5XN2M6xfgKko+LsLVkA8Si+MT48rc=
Subject key identifier: 77:87:77:D0:6A:E9:5A:53:F4:09:63:C2:D6:C3:6A:FB:4F:2C:08:C6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F0B2BC51F3A79A349ACD5CB7CCDFA42E9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d4d30GrpWlP0CWPC1sNq-08sCMY.roa
Signing time: Tue 23 Apr 2024 13:36:08 +0000
ROA not before: Tue 23 Apr 2024 13:36:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 82.153.228.0/23 maxlen: 24
89.213.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 14:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:2b:c5:1f:3a:79:a3:49:ac:d5:cb:7c:cd:fa:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 23 13:36:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=778777d06ae95a53f40963c2d6c36afb4f2c08c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:e7:85:bb:55:e9:a6:35:6c:cc:8a:c2:8e:
f6:04:fa:25:0b:16:77:5c:4e:67:30:08:a6:2b:b2:
a5:08:e8:83:c4:79:3f:1e:b2:18:a9:35:ec:4d:e0:
c2:d3:b2:e0:7c:90:67:f5:39:f8:4e:ae:76:bf:69:
cc:d5:fc:56:90:db:68:ac:bd:f1:15:26:33:0f:84:
a9:0b:dd:fa:a0:27:0a:cf:a5:44:c7:fe:61:73:65:
63:7e:7c:57:83:57:d9:92:bd:5a:b1:65:f4:d0:07:
96:f4:d1:79:38:bb:d6:0d:60:90:f4:52:c3:9b:52:
fc:e1:d2:38:c5:bd:ce:a9:d4:6d:ef:c4:83:87:86:
e4:91:55:68:a4:06:b7:64:40:8e:2a:26:3e:21:99:
85:e2:29:7c:a5:01:e7:fa:b9:23:9a:ac:8b:e4:8d:
31:78:5a:61:5d:a5:a2:3d:b4:22:ca:55:87:db:e8:
37:5f:4d:ab:61:cc:30:69:26:09:09:14:5a:8b:ec:
e2:0b:41:6d:56:ed:c8:a5:3b:c0:6e:81:1f:98:90:
e9:c2:22:5d:49:2b:e0:d0:a4:09:33:48:95:55:65:
73:67:29:07:a6:6d:d0:d4:53:5f:31:5c:b9:f8:46:
12:c6:36:84:64:fd:d9:2b:30:5e:9d:b8:e7:2d:18:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:77:D0:6A:E9:5A:53:F4:09:63:C2:D6:C3:6A:FB:4F:2C:08:C6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d4d30GrpWlP0CWPC1sNq-08sCMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.228.0/23
89.213.223.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ff:bb:ad:d5:59:d9:87:85:8d:75:b7:d5:64:02:2b:f7:40:
3a:7e:92:2e:6e:1c:cc:13:eb:06:f7:14:b8:40:14:5c:d5:6a:
d0:98:74:ab:54:3a:df:73:ab:d2:25:64:bd:27:29:95:dc:20:
03:6c:a7:2d:af:58:63:11:69:c9:f3:47:d9:bf:55:e6:78:e6:
26:c4:2d:80:57:6d:fb:99:cc:ff:97:6c:95:6f:b7:20:5f:96:
65:2e:1e:45:4b:95:86:07:83:99:f2:ab:1b:2f:ca:81:0d:63:
d3:77:70:a8:40:99:eb:1b:9c:df:95:1c:57:25:c7:23:0e:ae:
71:25:99:d9:96:e6:10:56:71:59:32:da:f5:40:1c:b5:98:d9:
0a:21:f5:48:7c:ea:f4:c6:8d:f2:7f:0f:4f:70:1a:15:b9:b6:
67:4a:9e:a3:96:5f:57:50:b3:59:16:82:d5:10:b2:be:20:82:
1c:51:0b:d4:5e:a6:5e:5e:35:53:a7:da:75:0e:8f:1e:58:e6:
18:af:2e:7f:c9:7c:9e:8e:d7:10:cb:3c:75:5d:8c:da:9e:ee:
18:ac:9e:be:ec:61:df:76:ac:dd:08:1a:2c:51:3f:5c:fb:43:
6f:84:1a:0d:b4:a3:6d:97:c3:1f:e3:79:bf:11:3a:3d:08:18:
51:c7:e9:01
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY8LK8UfOnmjSazVy3zN+kLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDIzMTMzNjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Nzg3NzdkMDZhZTk1YTUzZjQwOTYzYzJkNmMzNmFmYjRmMmMwOGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGHnhbtV6aY1bMyKwo72BPolCxZ3
XE5nMAimK7KlCOiDxHk/HrIYqTXsTeDC07LgfJBn9Tn4Tq52v2nM1fxWkNtorL3x
FSYzD4SpC936oCcKz6VEx/5hc2VjfnxXg1fZkr1asWX00AeW9NF5OLvWDWCQ9FLD
m1L84dI4xb3OqdRt78SDh4bkkVVopAa3ZECOKiY+IZmF4il8pQHn+rkjmqyL5I0x
eFphXaWiPbQiylWH2+g3X02rYcwwaSYJCRRai+ziC0FtVu3IpTvAboEfmJDpwiJd
SSvg0KQJM0iVVWVzZykHpm3Q1FNfMVy5+EYSxjaEZP3ZKzBenbjnLRh8JwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHeHd9Bq6VpT9AljwtbDavtPLAjGMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZDRkMzBHcnBXbFAwQ1dQQzFzTnEtMDhzQ01ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUpnkAwQA
WdXfMA0GCSqGSIb3DQEBCwUAA4IBAQAD/7ut1VnZh4WNdbfVZAIr90A6fpIubhzM
E+sG9xS4QBRc1WrQmHSrVDrfc6vSJWS9JymV3CADbKctr1hjEWnJ80fZv1XmeOYm
xC2AV237mcz/l2yVb7cgX5ZlLh5FS5WGB4OZ8qsbL8qBDWPTd3CoQJnrG5zflRxX
JccjDq5xJZnZluYQVnFZMtr1QBy1mNkKIfVIfOr0xo3yfw9PcBoVubZnSp6jll9X
ULNZFoLVELK+IIIcUQvUXqZeXjVTp9p1Do8eWOYYry5/yXyejtcQyzx1XYzanu4Y
rJ6+7GHfdqzdCBosUT9c+0NvhBoNtKNtl8Mf43m/ETo9CBhRx+kB
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:20:32 2025 by rpki-client