Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sk38uRQzPeCijPj2oyx7QjraV9k.roa
File: sk38uRQzPeCijPj2oyx7QjraV9k.roa (raw, json)
Hash identifier: cc2IBSoKPgi1d+SkmUgUVQ4sUfHAXhwClZj2fLPN9Cs=
Subject key identifier: B2:4D:FC:B9:14:33:3D:E0:A2:8C:F8:F6:A3:2C:7B:42:3A:DA:57:D9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018571FA2AA2609DAE390E0936FDD8DA31AE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sk38uRQzPeCijPj2oyx7QjraV9k.roa
Signing time: Mon 02 Jan 2023 10:14:58 +0000
ROA not before: Mon 02 Jan 2023 10:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206509
IP address blocks: 81.168.0.0/17 maxlen: 17
109.176.0.0/16 maxlen: 16
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 15
213.152.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 11 Jul 2023 15:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:2a:a2:60:9d:ae:39:0e:09:36:fd:d8:da:31:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 2 10:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b24dfcb914333de0a28cf8f6a32c7b423ada57d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:f0:bd:b4:57:f3:c7:5c:48:5a:81:0b:db:
fc:2e:62:a6:ec:c4:5d:92:f8:bc:61:08:35:aa:ab:
33:1b:9f:bd:88:e7:b3:00:7f:1c:8c:78:e4:93:7d:
9a:f2:38:81:23:a9:da:2a:ca:8d:06:1a:d4:9d:4e:
62:df:fc:27:ab:1d:4d:16:44:6f:87:d8:bf:59:7f:
fd:ad:f7:9b:45:b9:34:47:c8:62:0e:80:71:a7:98:
ed:37:d5:ca:f2:01:6d:2f:31:6c:58:68:39:15:7d:
d0:13:66:7a:d6:30:21:aa:09:93:af:b5:f0:b9:58:
29:66:fa:62:fe:b9:5b:fe:ab:5b:2e:ee:c1:cd:c4:
6d:fa:cf:7e:b2:44:ed:5a:c5:f3:74:13:50:f4:36:
ab:b0:96:e5:75:93:24:28:ef:72:e8:7a:84:67:5c:
f6:7e:a1:8a:28:1c:c3:97:8b:98:a6:55:4c:d6:4d:
1c:61:00:09:6b:66:31:01:71:55:d5:24:02:df:46:
e5:92:61:d4:c3:16:ba:c3:17:85:06:37:77:2b:0b:
b1:8d:a7:08:27:86:88:1b:9f:99:49:fe:b8:0e:87:
0f:6a:49:48:48:81:88:69:dc:c5:bd:b0:14:db:45:
dd:6c:6f:e0:dd:b2:99:30:85:ae:88:08:36:66:7a:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4D:FC:B9:14:33:3D:E0:A2:8C:F8:F6:A3:2C:7B:42:3A:DA:57:D9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sk38uRQzPeCijPj2oyx7QjraV9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
109.176.0.0/16
213.152.32.0/19
Signature Algorithm: sha256WithRSAEncryption
58:1a:26:1d:fd:fe:94:d9:eb:ed:d8:7d:86:ca:99:d4:31:cb:
4b:71:be:a2:9e:a4:e6:c0:9d:79:46:58:d3:f2:58:f8:50:1b:
3c:28:3a:5f:48:5e:d0:ee:ff:d3:1f:e3:fe:a3:0b:ee:46:99:
38:53:85:35:c4:c8:d7:ab:5d:09:f4:3e:9a:36:be:d9:10:c5:
d1:26:f0:89:09:c5:be:4a:5a:dd:8b:5d:13:da:ae:7e:49:1b:
89:f7:b4:f5:43:0b:ce:aa:3d:05:ed:bf:b2:4e:dc:3d:e4:3c:
b9:bf:c1:b1:d5:94:79:93:80:c8:e3:22:7d:d1:25:93:45:20:
84:c6:b3:03:f8:56:ff:65:64:02:38:ca:0f:2f:c7:f8:3d:f4:
c4:c0:0b:ed:6b:98:52:70:54:48:f8:6d:9d:3f:ac:eb:f2:e5:
c8:f0:75:66:ba:bd:6c:8e:8d:03:20:80:03:9c:6a:95:49:8d:
a9:ad:8d:e2:4b:a7:00:94:ec:e8:97:31:18:10:75:9b:95:4c:
23:50:e3:31:0d:f1:40:ac:1e:8b:93:3f:b5:60:11:af:1c:e8:
cc:0c:d8:4e:eb:e5:89:a7:a5:d5:27:19:ae:42:dd:88:e0:cb:
02:ed:8a:a8:d0:6a:4d:0b:d1:71:be:ab:b1:14:10:bd:e3:ad:
9b:a8:15:21
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYVx+iqiYJ2uOQ4JNv3Y2jGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwMTAyMTAxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjRkZmNiOTE0MzMzZGUwYTI4Y2Y4ZjZhMzJjN2I0MjNhZGE1N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd/wvbRX88dcSFqBC9v8LmKm7MRd
kvi8YQg1qqszG5+9iOezAH8cjHjkk32a8jiBI6naKsqNBhrUnU5i3/wnqx1NFkRv
h9i/WX/9rfebRbk0R8hiDoBxp5jtN9XK8gFtLzFsWGg5FX3QE2Z61jAhqgmTr7Xw
uVgpZvpi/rlb/qtbLu7BzcRt+s9+skTtWsXzdBNQ9DarsJbldZMkKO9y6HqEZ1z2
fqGKKBzDl4uYplVM1k0cYQAJa2YxAXFV1SQC30blkmHUwxa6wxeFBjd3KwuxjacI
J4aIG5+ZSf64DocPaklISIGIadzFvbAU20XdbG/g3bKZMIWuiAg2ZnqmZQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFLJN/LkUMz3gooz49qMse0I62lfZMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvc2szOHVSUXpQZUNpalBqMm95eDdRanJhVjlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcAwQGUQWAAwQH
UagAAwMBUpgDAwBtsAMEBdWYIDANBgkqhkiG9w0BAQsFAAOCAQEAWBomHf3+lNnr
7dh9hsqZ1DHLS3G+op6k5sCdeUZY0/JY+FAbPCg6X0he0O7/0x/j/qML7kaZOFOF
NcTI16tdCfQ+mja+2RDF0SbwiQnFvkpa3YtdE9qufkkbife09UMLzqo9Be2/sk7c
PeQ8ub/BsdWUeZOAyOMifdElk0UghMazA/hW/2VkAjjKDy/H+D30xMAL7WuYUnBU
SPhtnT+s6/LlyPB1Zrq9bI6NAyCAA5xqlUmNqa2N4kunAJTs6JcxGBB1m5VMI1Dj
MQ3xQKwei5M/tWARrxzozAzYTuvliael1ScZrkLdiODLAu2KqNBqTQvRcb6rsRQQ
veOtm6gVIQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org