Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wawPtt3IyU_ppLSD6KKBDq_Vppo.roa
File: wawPtt3IyU_ppLSD6KKBDq_Vppo.roa (raw, json)
Hash identifier: TWGg6F4uASy44QD1IKM/rLNaJRE0wfFHI1WT7kNetMc=
Subject key identifier: C1:AC:0F:B6:DD:C8:C9:4F:E9:A4:B4:83:E8:A2:81:0E:AF:D5:A6:9A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189CEF21703DA01B78C54DF6E921594565E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wawPtt3IyU_ppLSD6KKBDq_Vppo.roa
Signing time: Mon 07 Aug 2023 07:41:59 +0000
ROA not before: Mon 07 Aug 2023 07:41:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 82.153.4.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 09:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:f2:17:03:da:01:b7:8c:54:df:6e:92:15:94:56:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 07:41:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1ac0fb6ddc8c94fe9a4b483e8a2810eafd5a69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:fe:87:33:21:36:fa:02:2f:a2:68:dc:2c:
0b:58:c6:90:40:ef:7c:e2:cb:8c:f3:26:a6:bc:1b:
ca:36:1b:1e:0b:79:de:41:71:e0:8c:ce:b0:61:a7:
74:37:5e:51:64:a4:68:d0:8c:4f:1a:90:d3:10:97:
80:d0:50:0a:b6:e2:7b:ef:4a:0b:4f:2c:fb:1f:04:
bd:27:ba:3d:fe:54:f4:e7:56:63:41:4e:c4:48:c4:
f3:a8:f8:d9:3a:a0:fb:3a:de:5e:e7:af:43:59:a3:
13:dd:d5:25:af:b6:f6:de:f4:cb:4f:ce:c2:2c:be:
3d:cc:93:85:1c:e6:fa:9a:c6:f6:86:d4:fd:d5:84:
5e:1d:ab:dd:9a:5d:a3:44:73:c2:b1:f4:b8:b9:79:
d9:9c:e3:e3:e6:22:24:ec:e4:27:2f:f8:bf:8b:24:
d1:fb:b8:84:4c:88:55:ad:93:1b:44:f9:96:7f:8b:
b8:f0:b6:d2:65:da:ac:f7:3a:4b:2f:0b:f0:ab:28:
4b:3c:5c:51:dd:e2:6c:7d:1b:57:9e:14:26:20:a8:
61:87:0f:85:76:c6:ca:be:87:13:fd:90:e2:4c:08:
f7:28:6d:6f:35:31:d4:91:d1:17:38:3a:6d:a7:39:
ab:4e:97:d3:2c:e2:5d:99:1d:a3:67:a4:ca:e8:8e:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AC:0F:B6:DD:C8:C9:4F:E9:A4:B4:83:E8:A2:81:0E:AF:D5:A6:9A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wawPtt3IyU_ppLSD6KKBDq_Vppo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.4.0/24
89.213.172.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f6:65:7b:24:56:ec:2e:5d:84:ae:3a:97:3a:d0:70:80:d5:
42:a9:99:60:93:5f:77:dc:d6:21:b3:b9:ef:5f:1e:71:82:64:
1d:62:05:89:ba:fd:33:86:0b:b2:00:ab:2b:8e:05:f3:55:89:
96:71:3a:8f:d9:5c:f7:9f:a4:2e:df:12:01:fa:ec:42:e7:03:
e3:73:2d:14:47:9f:72:40:9b:6e:44:6e:03:27:43:cf:80:91:
97:b9:03:91:d3:9c:87:8f:78:f8:ea:09:e1:d8:3c:67:39:9f:
c2:72:22:5d:ae:7d:19:8c:0d:9c:e9:6c:12:2c:d2:5f:f6:fd:
23:aa:05:88:cc:d1:7d:ff:53:a0:8e:28:69:bc:2f:85:89:97:
c2:16:ce:8d:59:da:19:80:2b:e7:16:c0:b4:0d:f6:a3:52:28:
e8:59:51:42:ec:f3:a0:19:91:47:1b:49:9f:7f:53:c2:1b:51:
a6:42:2c:7a:7a:b6:6b:16:05:3e:3e:d4:20:8c:2c:58:e5:bf:
84:57:8d:fa:15:3e:99:44:67:0a:b4:42:b5:e9:4c:a7:ba:57:
25:3d:fa:16:c0:e2:8e:85:cb:c4:ce:60:af:a5:04:5b:91:2d:
65:27:cf:52:9d:3e:e2:3e:d1:aa:49:f5:67:6f:6e:cc:02:77:
c8:b5:f2:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnO8hcD2gG3jFTfbpIVlFZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODA3MDc0MTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWFjMGZiNmRkYzhjOTRmZTlhNGI0ODNlOGEyODEwZWFmZDVhNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z7+hzMhNvoCL6Jo3CwLWMaQQO98
4suM8yamvBvKNhseC3neQXHgjM6wYad0N15RZKRo0IxPGpDTEJeA0FAKtuJ770oL
Tyz7HwS9J7o9/lT051ZjQU7ESMTzqPjZOqD7Ot5e569DWaMT3dUlr7b23vTLT87C
LL49zJOFHOb6msb2htT91YReHavdml2jRHPCsfS4uXnZnOPj5iIk7OQnL/i/iyTR
+7iETIhVrZMbRPmWf4u48LbSZdqs9zpLLwvwqyhLPFxR3eJsfRtXnhQmIKhhhw+F
dsbKvocT/ZDiTAj3KG1vNTHUkdEXODptpzmrTpfTLOJdmR2jZ6TK6I4mmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMGsD7bdyMlP6aS0g+iigQ6v1aaaMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvd2F3UHR0M0l5VV9wcExTRDZLS0JEcV9WcHBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpkEAwQA
WdWsMA0GCSqGSIb3DQEBCwUAA4IBAQBd9mV7JFbsLl2ErjqXOtBwgNVCqZlgk193
3NYhs7nvXx5xgmQdYgWJuv0zhguyAKsrjgXzVYmWcTqP2Vz3n6Qu3xIB+uxC5wPj
cy0UR59yQJtuRG4DJ0PPgJGXuQOR05yHj3j46gnh2DxnOZ/CciJdrn0ZjA2c6WwS
LNJf9v0jqgWIzNF9/1OgjihpvC+FiZfCFs6NWdoZgCvnFsC0DfajUijoWVFC7POg
GZFHG0mff1PCG1GmQix6erZrFgU+PtQgjCxY5b+EV436FT6ZRGcKtEK16Uynulcl
PfoWwOKOhcvEzmCvpQRbkS1lJ89SnT7iPtGqSfVnb27MAnfItfLa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org