Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yA78q-Qgzdi6rHnf_5anfc9yB_c.roa
File: yA78q-Qgzdi6rHnf_5anfc9yB_c.roa (raw, json)
Hash identifier: 9ZCAtoe+1f3BwjbjEztOt3dgF6uw/KqMbj7R8hFpRyE=
Subject key identifier: C8:0E:FC:AB:E4:20:CD:D8:BA:AC:79:DF:FF:96:A7:7D:CF:72:07:F7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189B052DFDAA0FE223BD3953E68C7AD6B31
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yA78q-Qgzdi6rHnf_5anfc9yB_c.roa
Signing time: Tue 01 Aug 2023 08:59:28 +0000
ROA not before: Tue 01 Aug 2023 08:59:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.152.111.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.213.0/24 maxlen: 24
109.176.210.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
82.153.65.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.241.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.249.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 09:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:52:df:da:a0:fe:22:3b:d3:95:3e:68:c7:ad:6b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 1 08:59:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c80efcabe420cdd8baac79dfff96a77dcf7207f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:84:f3:d9:8d:07:78:5d:ec:82:ad:91:7d:
4d:0c:86:ef:aa:de:3b:e0:7d:b2:af:18:1c:5d:24:
eb:8a:ca:15:18:d4:a8:85:ee:3f:f4:e6:5a:a2:3f:
b2:d0:b5:be:42:b3:51:90:d2:21:e5:a4:eb:66:da:
fa:c6:1b:84:5e:47:77:a1:a2:a7:eb:e7:5b:29:ab:
36:00:c1:08:23:ff:fe:c7:41:85:c8:53:a3:75:b6:
3e:bf:7f:38:2f:82:71:c2:e4:44:7a:3d:91:56:63:
ba:7e:cc:83:df:77:30:11:03:65:6b:70:10:38:e3:
99:64:fa:51:f9:59:29:4b:5d:3f:4b:82:21:91:cf:
73:4c:5a:7f:9b:29:87:d2:32:94:74:ef:4d:89:d8:
31:f4:a4:9e:4b:f0:44:20:03:76:75:6c:2c:b7:07:
86:24:5d:87:10:48:80:82:c9:1f:4a:37:02:6e:42:
d2:8d:f6:df:ff:ad:32:88:36:80:9f:a0:de:37:e9:
58:b7:19:f3:ee:2b:a6:e0:fe:a3:e6:72:ca:e8:55:
d7:9f:9d:b2:8d:6d:4a:69:ac:df:83:3c:85:ad:bd:
d7:5f:43:93:83:96:0c:0c:6f:e5:90:5d:cd:1d:11:
70:a5:09:6a:c9:4b:40:94:c9:67:ad:0d:c1:1e:ed:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0E:FC:AB:E4:20:CD:D8:BA:AC:79:DF:FF:96:A7:7D:CF:72:07:F7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yA78q-Qgzdi6rHnf_5anfc9yB_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.65.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.223.0/24
82.153.240.0/24
82.153.249.0/24
89.213.6.0/24
89.213.132.0/24
89.213.136.0/24
89.213.139.0-89.213.140.255
89.213.152.0/24
89.213.168.0/24
89.213.173.0/24
89.213.176.0/24
89.213.180.0/24
89.213.184.0/23
109.176.210.0/23
109.176.213.0/24
109.176.240.0-109.176.242.255
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
79:fa:a7:68:58:31:61:f6:5b:b9:3f:f6:9f:d7:2e:a8:6b:64:
27:7d:e3:89:01:e5:09:35:86:95:db:a3:6d:16:42:27:e5:98:
cb:eb:f1:ef:d0:55:d2:99:34:c4:a0:4d:49:8e:29:dc:43:47:
d5:d7:20:8c:77:92:f2:e5:84:c0:03:8f:fe:13:17:70:15:ed:
58:a4:03:51:86:b9:6c:3a:61:79:b7:ae:5b:cd:8a:9c:ea:6b:
5e:c5:6c:9b:6f:b7:5a:6f:b6:53:ce:da:3a:6d:bd:60:71:dd:
1d:23:2e:24:8b:22:bc:24:46:a8:92:f8:0e:5a:e2:60:72:7f:
af:ed:df:c0:cd:bb:18:ae:9b:da:a7:5c:9e:d6:cf:6e:e5:b6:
b3:b8:cc:19:f9:ed:8d:12:bb:b3:e7:55:53:b0:83:eb:5d:33:
bb:00:62:6e:18:4b:43:b5:9b:d2:ce:25:5c:33:86:74:94:19:
eb:cc:f2:10:d6:dd:80:16:f9:ae:2a:cb:25:67:bf:b8:f4:b1:
f2:a6:ee:44:55:ad:bb:4f:74:f3:6e:32:43:ff:fd:1f:e9:d7:
c2:f8:c8:ea:94:10:fb:0b:b0:4f:94:08:41:6b:21:da:fc:0f:
c1:7a:a3:21:87:9b:58:4e:8d:f5:29:f9:25:b7:c0:22:ce:e3:
da:f5:8e:23
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAYmwUt/aoP4iO9OVPmjHrWsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODAxMDg1OTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODBlZmNhYmU0MjBjZGQ4YmFhYzc5ZGZmZjk2YTc3ZGNmNzIwN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9CE89mNB3hd7IKtkX1NDIbvqt47
4H2yrxgcXSTrisoVGNSohe4/9OZaoj+y0LW+QrNRkNIh5aTrZtr6xhuEXkd3oaKn
6+dbKas2AMEII//+x0GFyFOjdbY+v384L4JxwuREej2RVmO6fsyD33cwEQNla3AQ
OOOZZPpR+VkpS10/S4Ihkc9zTFp/mymH0jKUdO9Nidgx9KSeS/BEIAN2dWwstweG
JF2HEEiAgskfSjcCbkLSjfbf/60yiDaAn6DeN+lYtxnz7ium4P6j5nLK6FXXn52y
jW1KaazfgzyFrb3XX0OTg5YMDG/lkF3NHRFwpQlqyUtAlMlnrQ3BHu0PvQIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFMgO/KvkIM3Yuqx53/+Wp33Pcgf3MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEveUE3OHEtUWd6ZGk2ckhuZl81YW5mYzl5Ql9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHjBggrBgEFBQcBBwEB/wSB0zCB0DCBzQQCAAEwgcYDBABR
BZwDBABRqCkDBABRqHcDBABRqHsDBABSmG8DBAFSmPwDBABSmP8DBABSmQEDBABS
mUEDBABSmUkDBABSmU4wDAMEA1KZiAMEAFKZjAMEAFKZ3wMEAFKZ8AMEAFKZ+QME
AFnVBgMEAFnVhAMEAFnViDAMAwQAWdWLAwQAWdWMAwQAWdWYAwQAWdWoAwQAWdWt
AwQAWdWwAwQAWdW0AwQBWdW4AwQBbbDSAwQAbbDVMAwDBARtsPADBABtsPIDBADV
mCowDQYJKoZIhvcNAQELBQADggEBAHn6p2hYMWH2W7k/9p/XLqhrZCd944kB5Qk1
hpXbo20WQiflmMvr8e/QVdKZNMSgTUmOKdxDR9XXIIx3kvLlhMADj/4TF3AV7Vik
A1GGuWw6YXm3rlvNipzqa17FbJtvt1pvtlPO2jptvWBx3R0jLiSLIrwkRqiS+A5a
4mByf6/t38DNuxium9qnXJ7Wz27ltrO4zBn57Y0Su7PnVVOwg+tdM7sAYm4YS0O1
m9LOJVwzhnSUGevM8hDW3YAW+a4qyyVnv7j0sfKm7kRVrbtPdPNuMkP//R/p18L4
yOqUEPsLsE+UCEFrIdr8D8F6oyGHm1hOjfUp+SW3wCLO49r1jiM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:32 2024 by rpki-client on console-ams.rpki-client.org