Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yLlWtrJI5evTs7Kesnqw_UJAxWM.roa
File: yLlWtrJI5evTs7Kesnqw_UJAxWM.roa (raw, json)
Hash identifier: oE+76ao9OO0dcXEnM9P0inEJJ9WIuBi82llubgHvFuk=
Subject key identifier: C8:B9:56:B6:B2:48:E5:EB:D3:B3:B2:9E:B2:7A:B0:FD:42:40:C5:63
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190F47FA822AFB1DA88F7732BD1A5D3F571
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yLlWtrJI5evTs7Kesnqw_UJAxWM.roa
Signing time: Sat 27 Jul 2024 14:02:05 +0000
ROA not before: Sat 27 Jul 2024 14:02:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212793
IP address blocks: 82.152.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 10:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f4:7f:a8:22:af:b1:da:88:f7:73:2b:d1:a5:d3:f5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 27 14:02:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8b956b6b248e5ebd3b3b29eb27ab0fd4240c563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:3f:9c:1f:f7:55:03:87:fb:92:a7:17:da:
c9:f9:4e:61:19:e3:8c:25:40:b7:d6:23:6d:55:19:
2d:18:8b:4b:72:2b:fc:46:0d:c2:cf:c1:8e:d5:11:
be:df:35:72:91:de:19:28:a7:da:ef:de:c4:43:5a:
f6:ce:fc:a7:59:2f:49:d7:f4:1d:1a:53:67:a6:92:
67:ce:3e:f6:13:5b:2a:35:fa:b0:32:39:1e:be:4a:
70:31:46:f6:b1:2b:02:21:5c:9b:b1:54:36:71:30:
4d:bc:47:8c:c3:33:ec:d6:ff:f7:32:b8:5d:e8:7b:
00:d9:97:aa:3a:f6:ed:67:88:be:26:30:da:9b:2a:
a5:42:d6:60:ef:30:ac:11:e3:1d:72:af:06:0d:7f:
d9:5c:a8:2f:d5:92:c6:64:e0:b7:00:df:d3:2c:f2:
ad:e7:2d:60:5a:00:03:a2:e4:de:d2:79:f8:b0:8b:
3b:b1:eb:7b:f8:38:67:16:89:ef:c7:22:7b:63:87:
e9:77:ae:9c:c3:15:cb:b6:c8:ca:9e:33:c1:a3:5d:
ef:9f:af:1f:4d:92:8e:12:f3:31:2b:81:23:91:b5:
2b:c2:ea:d3:7c:a6:78:0c:10:ff:50:cf:a9:33:a3:
df:14:2b:9c:1f:15:ff:51:38:25:ea:f8:18:3d:6f:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:56:B6:B2:48:E5:EB:D3:B3:B2:9E:B2:7A:B0:FD:42:40:C5:63
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yLlWtrJI5evTs7Kesnqw_UJAxWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:55:bc:72:3a:3f:67:8c:71:e2:89:c7:58:3a:66:e8:cb:a8:
fa:f2:71:46:37:84:9c:cd:f2:c1:4c:2e:4e:15:be:d8:9b:62:
33:ce:6a:22:0f:1f:8b:a5:89:6a:b7:ee:87:cd:84:a7:85:62:
5c:b0:6c:b6:86:5c:14:1f:da:d4:0d:10:ee:d1:19:b1:57:bb:
ca:da:97:cc:47:7b:a4:a6:43:8e:2e:9a:bf:d9:2f:a1:e8:05:
89:f9:70:5d:3d:ef:af:36:4f:56:26:8b:5d:bf:40:70:3b:de:
7a:57:2c:57:79:f2:92:99:ab:6f:52:2f:3d:e0:f6:9c:74:19:
d6:3a:63:5e:03:d3:36:da:6d:95:47:66:f2:e4:08:b1:05:b3:
45:65:e0:7d:71:da:71:10:12:60:8d:fa:58:23:02:bd:0f:06:
5a:69:77:ae:1a:92:01:0d:de:7b:a8:b3:21:6e:3d:65:5d:5d:
66:7d:4e:5a:5f:5c:46:d0:2e:a3:f1:c4:cd:83:ee:c4:7f:a6:
74:01:3a:80:10:dc:cb:80:9d:ba:89:f6:ce:8e:54:b1:18:4b:
24:16:7e:c0:28:4f:a1:ed:6b:03:29:4f:21:d3:83:b3:26:6e:
e8:70:b6:76:bc:aa:f6:02:25:e3:9c:4b:fb:a0:35:15:df:8d:
de:40:0e:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZD0f6gir7HaiPdzK9Gl0/VxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNzI3MTQwMjA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGI5NTZiNmIyNDhlNWViZDNiM2IyOWViMjdhYjBmZDQyNDBjNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaQ/nB/3VQOH+5KnF9rJ+U5hGeOM
JUC31iNtVRktGItLciv8Rg3Cz8GO1RG+3zVykd4ZKKfa797EQ1r2zvynWS9J1/Qd
GlNnppJnzj72E1sqNfqwMjkevkpwMUb2sSsCIVybsVQ2cTBNvEeMwzPs1v/3Mrhd
6HsA2ZeqOvbtZ4i+JjDamyqlQtZg7zCsEeMdcq8GDX/ZXKgv1ZLGZOC3AN/TLPKt
5y1gWgADouTe0nn4sIs7set7+DhnFonvxyJ7Y4fpd66cwxXLtsjKnjPBo13vn68f
TZKOEvMxK4EjkbUrwurTfKZ4DBD/UM+pM6PfFCucHxX/UTgl6vgYPW97WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMi5VraySOXr07OynrJ6sP1CQMVjMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEveUxsV3RySkk1ZXZUczdLZXNucXdfVUpBeFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpiwMA0G
CSqGSIb3DQEBCwUAA4IBAQArVbxyOj9njHHiicdYOmboy6j68nFGN4SczfLBTC5O
Fb7Ym2IzzmoiDx+LpYlqt+6HzYSnhWJcsGy2hlwUH9rUDRDu0RmxV7vK2pfMR3uk
pkOOLpq/2S+h6AWJ+XBdPe+vNk9WJotdv0BwO956VyxXefKSmatvUi894PacdBnW
OmNeA9M22m2VR2by5AixBbNFZeB9cdpxEBJgjfpYIwK9DwZaaXeuGpIBDd57qLMh
bj1lXV1mfU5aX1xG0C6j8cTNg+7Ef6Z0ATqAENzLgJ26ifbOjlSxGEskFn7AKE+h
7WsDKU8h04OzJm7ocLZ2vKr2AiXjnEv7oDUV343eQA79
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:33 2025 by rpki-client