Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gwPFeWD0sno29TF4eDvsqcq1rMg.roa
File: gwPFeWD0sno29TF4eDvsqcq1rMg.roa (raw, json)
Hash identifier: RPl/E4ZTs5XnX55zay23Qddh98huaTaCCBEkxJDkLl0=
Subject key identifier: 83:03:C5:79:60:F4:B2:7A:36:F5:31:78:78:3B:EC:A9:CA:B5:AC:C8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018571FA25EC6371487BDC81A58DC2F8668F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gwPFeWD0sno29TF4eDvsqcq1rMg.roa
Signing time: Mon 02 Jan 2023 10:14:57 +0000
ROA not before: Mon 02 Jan 2023 10:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 82.153.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Mar 2023 09:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:25:ec:63:71:48:7b:dc:81:a5:8d:c2:f8:66:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 2 10:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8303c57960f4b27a36f53178783beca9cab5acc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:f0:52:74:e2:87:0d:20:20:03:d0:2d:a2:
f2:bc:d9:55:61:6c:33:db:42:32:69:12:5a:ed:00:
b4:72:d9:e2:ee:3e:b1:80:bb:24:f2:77:94:4d:e7:
87:66:72:fc:7b:0c:c1:7b:aa:93:52:3f:d2:e9:8b:
41:96:dd:e5:92:31:8b:24:de:87:fd:35:c9:26:0a:
c8:f9:c2:65:e8:91:5c:cc:53:78:8a:5f:bf:6e:69:
4d:87:88:dd:fa:09:28:d9:5f:87:51:d9:26:bd:90:
a7:ef:a7:42:b8:76:76:61:20:52:d4:41:cb:47:24:
75:b2:92:3f:58:70:91:19:8f:b5:32:0d:62:70:1a:
1a:bc:93:f8:37:65:08:af:ed:f0:74:8f:b1:11:12:
ca:d7:18:48:13:a8:aa:08:c4:5c:d1:0a:34:dd:8d:
5c:88:c7:04:c5:af:5c:82:89:e8:d4:3d:30:34:ff:
3c:9a:d5:1e:dd:62:56:df:69:eb:a0:1b:05:b6:5f:
54:09:de:b8:d0:d1:d0:9f:23:04:31:23:d4:60:47:
3f:41:97:b8:e3:a7:71:e4:d1:6e:db:7b:95:c3:8f:
2b:a4:6e:e6:3e:10:7f:ed:4a:a7:84:44:c9:3d:0e:
af:61:a5:d1:12:4e:4c:0f:b3:8f:71:94:25:81:9f:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:C5:79:60:F4:B2:7A:36:F5:31:78:78:3B:EC:A9:CA:B5:AC:C8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gwPFeWD0sno29TF4eDvsqcq1rMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.248.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e4:c8:e5:a1:da:54:fc:2e:98:ba:f1:ad:37:08:b3:dc:32:
f6:22:a9:c7:57:90:49:4c:b2:b3:64:37:1a:20:b8:fb:94:8d:
86:74:00:45:62:ea:7a:70:6e:46:fb:af:82:1e:c4:d0:0b:02:
c0:71:49:ef:77:a9:5f:93:b2:10:08:33:a3:cf:21:e4:9b:04:
b8:91:95:44:38:ce:7a:15:0d:f2:56:26:72:2b:d2:2e:d6:7e:
a3:39:23:a1:33:e2:41:a9:55:ad:ad:c3:46:bf:d1:e5:ae:38:
76:7a:98:82:65:64:fb:3c:0e:93:5c:eb:53:bc:8c:d6:1a:48:
b2:e8:4b:c1:a5:58:af:82:98:54:de:c5:7a:80:c3:71:88:de:
c1:b0:bc:78:6a:bc:0d:15:ae:a0:61:79:ea:89:4a:ae:ad:cc:
0f:02:3b:65:92:f9:b2:06:51:2b:cf:eb:c4:f3:d2:1b:83:ed:
0a:e8:be:04:b3:e4:d6:3c:d6:b8:c4:49:39:6b:8a:8d:c8:25:
e8:ca:ab:05:14:de:57:5a:85:c1:d3:21:82:23:25:85:74:18:
81:25:9b:e8:99:c6:3d:3f:cc:79:c2:9f:44:cb:8a:55:3c:b9:
a5:b8:da:07:26:66:47:a0:02:97:ed:c1:94:4a:8b:08:ee:23:
fa:00:52:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx+iXsY3FIe9yBpY3C+GaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwMTAyMTAxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzAzYzU3OTYwZjRiMjdhMzZmNTMxNzg3ODNiZWNhOWNhYjVhY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3TwUnTihw0gIAPQLaLyvNlVYWwz
20IyaRJa7QC0ctni7j6xgLsk8neUTeeHZnL8ewzBe6qTUj/S6YtBlt3lkjGLJN6H
/TXJJgrI+cJl6JFczFN4il+/bmlNh4jd+gko2V+HUdkmvZCn76dCuHZ2YSBS1EHL
RyR1spI/WHCRGY+1Mg1icBoavJP4N2UIr+3wdI+xERLK1xhIE6iqCMRc0Qo03Y1c
iMcExa9cgono1D0wNP88mtUe3WJW32nroBsFtl9UCd640NHQnyMEMSPUYEc/QZe4
46dx5NFu23uVw48rpG7mPhB/7UqnhETJPQ6vYaXREk5MD7OPcZQlgZ+UWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMDxXlg9LJ6NvUxeHg77KnKtazIMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZ3dQRmVXRDBzbm8yOVRGNGVEdnNxY3Exck1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpn4MA0G
CSqGSIb3DQEBCwUAA4IBAQCT5MjlodpU/C6YuvGtNwiz3DL2IqnHV5BJTLKzZDca
ILj7lI2GdABFYup6cG5G+6+CHsTQCwLAcUnvd6lfk7IQCDOjzyHkmwS4kZVEOM56
FQ3yViZyK9Iu1n6jOSOhM+JBqVWtrcNGv9Hlrjh2epiCZWT7PA6TXOtTvIzWGkiy
6EvBpVivgphU3sV6gMNxiN7BsLx4arwNFa6gYXnqiUqurcwPAjtlkvmyBlErz+vE
89Ibg+0K6L4Es+TWPNa4xEk5a4qNyCXoyqsFFN5XWoXB0yGCIyWFdBiBJZvomcY9
P8x5wp9Ey4pVPLmluNoHJmZHoAKX7cGUSosI7iP6AFLf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org