Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/CcwrSf-wPS7f7uuDJNf5TKigN88.roa
File: CcwrSf-wPS7f7uuDJNf5TKigN88.roa (raw, json)
Hash identifier: P6S9t1aS67KIu6o3jwUupenJC/E6gir0e/gsEMjU2Lg=
Subject key identifier: 09:CC:2B:49:FF:B0:3D:2E:DF:EE:EB:83:24:D7:F9:4C:A8:A0:37:CF
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 018CC3B6E8CB089DD7A5C88EC3E61F4834D4
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/CcwrSf-wPS7f7uuDJNf5TKigN88.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44515
IP address blocks: 82.221.0.0/21 maxlen: 21
82.221.0.0/17 maxlen: 17
82.221.165.0/24 maxlen: 24
82.221.166.0/24 maxlen: 24
212.30.242.0/24 maxlen: 24
82.221.68.0/22 maxlen: 22
82.221.84.0/24 maxlen: 24
82.221.80.0/24 maxlen: 24
82.221.81.0/24 maxlen: 24
82.221.80.0/21 maxlen: 21
82.221.92.0/22 maxlen: 22
82.221.22.0/24 maxlen: 24
82.221.28.0/24 maxlen: 24
212.30.224.0/19 maxlen: 19
82.221.46.0/23 maxlen: 23
212.30.229.0/24 maxlen: 24
82.221.64.0/22 maxlen: 22
2a02:f48:2105::/48 maxlen: 48
2a02:f48:2100::/40 maxlen: 40
2a02:f48::/40 maxlen: 40
2a02:f48:2104::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 18:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e8:cb:08:9d:d7:a5:c8:8e:c3:e6:1f:48:34:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09cc2b49ffb03d2edfeeeb8324d7f94ca8a037cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:25:83:25:6d:82:58:2f:83:2d:9e:de:b0:
93:9d:e0:75:24:49:64:89:25:16:d4:65:e6:1d:29:
41:f2:4a:e9:d9:c7:c9:53:40:75:3b:f3:12:c0:44:
cd:05:33:4f:0e:c8:ce:a4:99:6b:01:94:4a:22:9b:
dd:48:ee:35:41:de:d2:03:47:d7:87:6e:e5:ae:fa:
17:73:bb:49:4b:86:bc:1a:1a:9b:8d:e4:c5:b5:b7:
f8:2b:3d:5c:ae:29:5e:da:16:85:29:7c:e2:45:0e:
e9:79:7b:86:ce:48:a5:c0:43:13:dc:5b:c3:0d:b8:
04:c9:4a:30:a5:05:c4:ec:51:27:c3:79:8d:6b:09:
2f:8b:6b:ed:94:06:8c:a9:03:86:e6:d1:b5:c2:3c:
6b:5c:a6:ca:47:e0:5e:3c:31:e8:3d:0d:f1:0d:d0:
84:fb:c8:dd:66:ac:9d:02:57:a4:ce:c3:60:4e:77:
b2:27:ba:cb:27:36:15:2f:5c:f3:e5:91:eb:2b:03:
cf:5a:da:82:72:00:e7:6b:8c:71:dc:03:90:03:8f:
ce:36:71:29:30:2a:b9:0a:1d:7c:a6:50:de:8c:eb:
72:15:e0:89:c7:bf:86:e9:13:ac:96:dd:88:6a:88:
89:d8:34:fd:e8:98:ce:b6:e3:25:0d:28:fb:df:8c:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:2B:49:FF:B0:3D:2E:DF:EE:EB:83:24:D7:F9:4C:A8:A0:37:CF
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/CcwrSf-wPS7f7uuDJNf5TKigN88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.221.0.0/17
82.221.165.0-82.221.166.255
212.30.224.0/19
IPv6:
2a02:f48::/40
2a02:f48:2100::/40
Signature Algorithm: sha256WithRSAEncryption
80:a2:6b:c8:8d:50:f0:dd:68:ae:db:92:8f:0c:50:39:98:88:
0c:28:d8:8e:db:72:e9:bb:e1:2d:55:84:76:ac:16:e3:e4:fe:
7e:1b:36:a3:65:2f:b1:1b:03:80:38:52:43:56:a2:93:e6:09:
31:9d:aa:e9:aa:a1:fc:36:22:63:04:c3:7b:b3:92:7e:25:7a:
ab:9c:06:cf:72:26:63:e5:09:7e:2d:0a:52:9f:84:85:82:9e:
7f:de:77:08:df:01:31:a4:32:64:43:fd:cf:9a:f9:6e:1c:c8:
cf:5c:f3:63:cc:d0:e3:ef:36:7f:8a:13:81:ea:17:17:83:4c:
67:0d:2b:f7:52:07:93:e5:fb:d8:4c:3c:bc:f0:3d:0a:8d:62:
19:2f:84:83:ea:0d:f9:72:2e:d7:98:a9:70:89:2a:1f:6e:2b:
6a:e1:3c:db:d1:c1:11:68:ae:41:49:78:cb:fa:c2:0b:52:59:
ef:3d:53:0d:df:1c:1b:50:5a:a8:08:47:89:76:89:39:b8:6d:
cf:c7:d6:9b:16:73:2b:b5:99:ed:b1:48:83:8a:e5:58:50:95:
88:c3:80:ec:9c:da:7a:be:9e:01:02:68:48:02:7a:16:ae:9b:
42:b0:58:27:6c:ca:8c:bb:7d:c4:f7:f9:a5:c7:80:1c:53:37:
f5:9d:fe:cc
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYzDtujLCJ3XpciOw+YfSDTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj
NWUyMWMwHhcNMjQwMTAxMDYyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWNjMmI0OWZmYjAzZDJlZGZlZWViODMyNGQ3Zjk0Y2E4YTAzN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioMlgyVtglgvgy2e3rCTneB1JElk
iSUW1GXmHSlB8krp2cfJU0B1O/MSwETNBTNPDsjOpJlrAZRKIpvdSO41Qd7SA0fX
h27lrvoXc7tJS4a8GhqbjeTFtbf4Kz1crile2haFKXziRQ7peXuGzkilwEMT3FvD
DbgEyUowpQXE7FEnw3mNawkvi2vtlAaMqQOG5tG1wjxrXKbKR+BePDHoPQ3xDdCE
+8jdZqydAlekzsNgTneyJ7rLJzYVL1zz5ZHrKwPPWtqCcgDna4xx3AOQA4/ONnEp
MCq5Ch18plDejOtyFeCJx7+G6ROslt2IaoiJ2DT96JjOtuMlDSj734w6NwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFAnMK0n/sD0u3+7rgyTX+UyooDfPMB8GA1UdIwQY
MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt
ZmVlMmU4ZDQwODRmLzEvQ2N3clNmLXdQUzdmN3V1REpOZjVUS2lnTjg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm
LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAgBAIAATAaAwQHUt0AMAwD
BABS3aUDBABS3aYDBAXUHuAwFgQCAAIwEAMGACoCD0gAAwYAKgIPSCEwDQYJKoZI
hvcNAQELBQADggEBAICia8iNUPDdaK7bko8MUDmYiAwo2I7bcum74S1VhHasFuPk
/n4bNqNlL7EbA4A4UkNWopPmCTGdqumqofw2ImMEw3uzkn4lequcBs9yJmPlCX4t
ClKfhIWCnn/edwjfATGkMmRD/c+a+W4cyM9c82PM0OPvNn+KE4HqFxeDTGcNK/dS
B5Pl+9hMPLzwPQqNYhkvhIPqDflyLteYqXCJKh9uK2rhPNvRwRForkFJeMv6wgtS
We89Uw3fHBtQWqgIR4l2iTm4bc/H1psWcyu1me2xSIOK5VhQlYjDgOyc2nq+ngEC
aEgCehaum0KwWCdsyoy7fcT3+aXHgBxTN/Wd/sw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-fra.rpki-client.org