Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wAo80jfuCcXvLuFDfNWuKXJlNvQ.roa
File: wAo80jfuCcXvLuFDfNWuKXJlNvQ.roa (raw, json)
Hash identifier: E3WK54vVODVqUdG63IOO+uBj0ltBkunB7DTfZM2Q6Ko=
Subject key identifier: C0:0A:3C:D2:37:EE:09:C5:EF:2E:E1:43:7C:D5:AE:29:72:65:36:F4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F194E02C3F4ABDA442E73E4C39C93D009
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wAo80jfuCcXvLuFDfNWuKXJlNvQ.roa
Signing time: Fri 26 Apr 2024 07:28:13 +0000
ROA not before: Fri 26 Apr 2024 07:28:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 82.153.65.0/24 maxlen: 24
82.163.16.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
213.218.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 08:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:4e:02:c3:f4:ab:da:44:2e:73:e4:c3:9c:93:d0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 26 07:28:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c00a3cd237ee09c5ef2ee1437cd5ae29726536f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:f0:d3:41:a1:18:5f:d2:18:1a:0e:ef:01:
61:51:df:da:5d:15:d1:49:4e:89:dd:cc:d9:3f:4a:
d5:68:38:1b:f9:87:08:91:20:b0:1e:98:01:7d:0b:
d1:63:1b:38:e7:1e:90:be:27:a4:5a:2d:d9:a8:5b:
11:e2:46:8a:ad:9b:bf:8f:be:c8:b3:c9:76:a6:86:
06:96:11:08:0d:68:da:fb:47:d3:72:34:57:20:76:
17:fc:92:6f:11:dc:38:7a:4c:ae:0c:da:46:f7:3d:
2c:1d:47:c4:2f:8f:fb:61:4a:a6:a1:88:51:1a:e3:
b0:1c:aa:b1:54:f5:3c:8d:bb:ce:22:20:34:65:38:
eb:a0:ef:38:0d:0b:0a:24:3e:a3:27:49:52:14:f2:
c4:6a:84:ae:1f:b0:43:5a:af:2c:a0:2e:58:16:f6:
09:16:7e:33:4c:c0:3c:9a:2d:36:81:13:a2:a0:3a:
56:bf:ce:04:80:cd:67:aa:33:12:e7:1b:fa:06:99:
5d:f5:e5:23:2b:ff:93:2a:13:59:45:05:48:41:6e:
e9:6f:f0:65:5e:10:7e:7d:ea:a7:f0:6b:8a:32:1c:
b5:bf:b0:c9:91:7c:48:b4:f2:92:cd:da:1c:7d:bc:
b4:2a:a5:20:37:d6:f0:35:51:28:3c:85:c2:87:21:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0A:3C:D2:37:EE:09:C5:EF:2E:E1:43:7C:D5:AE:29:72:65:36:F4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wAo80jfuCcXvLuFDfNWuKXJlNvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.65.0/24
82.163.16.0/24
89.213.164.0/24
89.213.184.0/24
213.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d8:4a:c1:00:4d:e4:ed:ec:2c:59:cb:e3:63:63:dd:83:9a:
2a:f1:1b:36:ae:3c:04:9c:96:02:5e:38:7b:3d:f7:23:d7:8a:
34:2a:1d:1b:72:53:3d:d6:ea:f5:e0:10:92:4e:19:80:73:5a:
8a:ca:3b:c6:df:3f:a1:71:b2:f2:a6:63:8b:44:ef:e5:dc:b3:
be:03:59:62:95:8b:7b:dd:ea:5b:51:aa:38:eb:29:d1:25:bf:
b1:15:c8:a6:10:25:3a:e1:2e:7f:92:36:ab:cb:4f:c1:3b:45:
ce:12:82:3e:22:82:52:18:97:ee:49:97:2f:9f:17:73:26:54:
d3:34:3a:42:0c:5d:c8:10:09:b1:82:f6:93:e9:1d:23:d5:00:
9b:95:11:d0:d9:4d:30:b0:16:32:ee:51:31:6e:88:d4:af:23:
e6:d0:f7:db:e6:91:79:80:41:aa:99:9a:45:f2:10:26:fe:36:
0f:71:b4:bb:31:f7:92:fa:29:23:4b:a3:8b:9e:98:af:e3:9b:
98:15:1e:1b:49:36:bb:87:ce:b9:6c:29:16:43:ab:32:81:3b:
7a:ae:7b:7e:2f:78:e5:f1:ca:38:da:02:77:b2:8c:0a:0a:b6:
3e:24:e4:a4:67:3f:71:d2:4f:26:48:f0:43:e2:71:15:27:ca:
2d:c5:a3:fc
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY8ZTgLD9KvaRC5z5MOck9AJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDI2MDcyODEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDBhM2NkMjM3ZWUwOWM1ZWYyZWUxNDM3Y2Q1YWUyOTcyNjUzNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXfw00GhGF/SGBoO7wFhUd/aXRXR
SU6J3czZP0rVaDgb+YcIkSCwHpgBfQvRYxs45x6QviekWi3ZqFsR4kaKrZu/j77I
s8l2poYGlhEIDWja+0fTcjRXIHYX/JJvEdw4ekyuDNpG9z0sHUfEL4/7YUqmoYhR
GuOwHKqxVPU8jbvOIiA0ZTjroO84DQsKJD6jJ0lSFPLEaoSuH7BDWq8soC5YFvYJ
Fn4zTMA8mi02gROioDpWv84EgM1nqjMS5xv6Bpld9eUjK/+TKhNZRQVIQW7pb/Bl
XhB+feqn8GuKMhy1v7DJkXxItPKSzdocfby0KqUgN9bwNVEoPIXChyHM1wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMAKPNI37gnF7y7hQ3zVrilyZTb0MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvd0FvODBqZnVDY1h2THVGRGZOV3VLWEpsTnZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUplBAwQA
UqMQAwQAWdWkAwQAWdW4AwQA1dr+MA0GCSqGSIb3DQEBCwUAA4IBAQCT2ErBAE3k
7ewsWcvjY2Pdg5oq8Rs2rjwEnJYCXjh7Pfcj14o0Kh0bclM91ur14BCSThmAc1qK
yjvG3z+hcbLypmOLRO/l3LO+A1lilYt73epbUao46ynRJb+xFcimECU64S5/kjar
y0/BO0XOEoI+IoJSGJfuSZcvnxdzJlTTNDpCDF3IEAmxgvaT6R0j1QCblRHQ2U0w
sBYy7lExbojUryPm0Pfb5pF5gEGqmZpF8hAm/jYPcbS7MfeS+ikjS6OLnpiv45uY
FR4bSTa7h865bCkWQ6sygTt6rnt+L3jl8co42gJ3sowKCrY+JOSkZz9x0k8mSPBD
4nEVJ8otxaP8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org