Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/p_N8bIcKJI2VYeFuuz-OwLW80RI.roa
File: p_N8bIcKJI2VYeFuuz-OwLW80RI.roa (raw, json)
Hash identifier: lQqEFa02+o5vLsPCIFA6ZNaLvzoKdwN6iO/pyMRXL+o=
Subject key identifier: A7:F3:7C:6C:87:0A:24:8D:95:61:E1:6E:BB:3F:8E:C0:B5:BC:D1:12
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 019170B3461A0CD381036F2F00D73304E7BF
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/p_N8bIcKJI2VYeFuuz-OwLW80RI.roa
Signing time: Tue 20 Aug 2024 16:51:22 +0000
ROA not before: Tue 20 Aug 2024 16:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34426
IP address blocks: 82.118.160.0/19 maxlen: 19
82.118.161.0/24 maxlen: 24
82.118.162.0/24 maxlen: 24
82.118.163.0/24 maxlen: 24
82.118.164.0/24 maxlen: 24
82.118.165.0/24 maxlen: 24
82.118.166.0/24 maxlen: 24
82.118.167.0/24 maxlen: 24
82.118.168.0/24 maxlen: 24
82.118.169.0/24 maxlen: 24
82.118.170.0/24 maxlen: 24
82.118.171.0/24 maxlen: 24
82.118.172.0/24 maxlen: 24
82.118.176.0/20 maxlen: 20
89.144.64.0/19 maxlen: 19
89.144.102.0/24 maxlen: 24
89.144.103.0/24 maxlen: 24
89.144.106.0/24 maxlen: 24
89.144.107.0/24 maxlen: 24
89.144.110.0/24 maxlen: 24
89.144.111.0/24 maxlen: 24
212.102.0.0/19 maxlen: 19
212.102.13.0/24 maxlen: 24
212.102.18.0/24 maxlen: 24
212.102.23.0/24 maxlen: 24
212.102.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 08:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:b3:46:1a:0c:d3:81:03:6f:2f:00:d7:33:04:e7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Aug 20 16:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7f37c6c870a248d9561e16ebb3f8ec0b5bcd112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:42:95:49:cd:9b:05:7a:dc:41:73:03:a4:
ce:24:32:0d:ae:b7:fa:36:2f:f2:60:2e:82:0f:ea:
85:36:2c:98:96:d3:a7:88:63:54:eb:f2:27:71:03:
db:68:f5:6e:c3:c3:ec:9f:7e:96:36:f1:41:19:4a:
6e:e7:79:b0:ac:e7:7e:ee:98:3e:0b:a0:fc:d9:c4:
0d:e8:c5:57:e4:69:69:75:af:58:c4:82:92:1d:a7:
62:18:9c:5b:49:54:4d:46:40:26:09:c0:56:8b:55:
36:0d:6c:ba:16:42:e9:94:b0:b2:88:0a:e7:2a:90:
87:91:5c:3d:30:80:70:c3:14:df:81:bc:c9:2d:5c:
7d:2a:c7:6f:cd:81:b5:22:ee:fe:43:ef:ef:6a:b2:
73:f0:2b:ed:c1:0e:18:3d:28:e7:f1:51:be:96:84:
9a:d7:ce:3a:35:97:2f:5a:da:b1:43:c9:17:17:10:
d9:21:30:f9:7c:ba:c1:96:5e:a3:59:37:26:8c:30:
7f:17:4c:98:b5:7d:67:02:24:a2:3b:94:71:4f:3b:
b5:66:d7:07:16:60:15:1f:90:b4:a9:f1:a0:22:3a:
2d:9c:82:73:09:20:ac:5e:2e:f6:e5:e2:76:5c:aa:
be:77:3b:7f:ef:fc:a1:84:69:4e:79:ac:20:c4:95:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:7C:6C:87:0A:24:8D:95:61:E1:6E:BB:3F:8E:C0:B5:BC:D1:12
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/p_N8bIcKJI2VYeFuuz-OwLW80RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.160.0/19
89.144.64.0/19
89.144.102.0/23
89.144.106.0/23
89.144.110.0/23
212.102.0.0/19
Signature Algorithm: sha256WithRSAEncryption
84:98:e3:c1:f3:65:0d:dc:c3:36:4b:23:e7:39:e6:60:bb:b6:
9f:bc:ae:44:8f:1a:51:8d:78:bc:64:ea:80:11:13:1f:18:94:
b0:ec:c0:97:a9:57:3c:5b:8f:b2:43:9d:87:67:f0:c8:ca:c2:
f0:2f:cd:19:20:6f:eb:2f:e3:38:1f:43:f8:e7:c7:9f:18:10:
7f:ca:6b:82:c6:ed:30:6d:6a:83:37:e2:8f:63:76:ce:5f:c4:
98:9a:00:59:64:44:e6:c4:6a:8c:dd:4f:fc:ac:b6:27:47:11:
6d:b5:f0:19:aa:bf:5b:f2:e2:4e:14:e4:b3:2f:49:a3:5f:73:
4a:51:83:cb:1d:5f:37:1b:55:c8:43:9b:3e:81:fe:e1:ff:4e:
f2:f7:4a:2e:85:c0:f5:56:65:bb:38:99:7a:98:30:9e:32:f2:
fd:c5:1c:e4:b1:84:c4:d0:da:80:bc:8c:66:ed:cb:1f:61:c6:
25:a2:b9:bb:c3:ea:ff:5f:11:5d:3b:b7:27:5f:ca:40:1d:3c:
38:5f:02:fa:ec:b9:c9:7b:4c:e8:84:2b:dc:a4:50:7e:99:cd:
39:54:b6:f6:5b:74:29:09:9a:98:57:b3:a3:83:7e:4d:e6:22:
21:d5:5c:82:3a:2d:05:f7:b2:5a:c3:6e:d6:bb:3a:1c:6f:40:
01:05:97:76
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZFws0YaDNOBA28vANczBOe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmRjMjQ3OGE0YmRkZTRjNDQwYmI1ODgwMjQxMGQyMzQw
YTQ5MGUwHhcNMjQwODIwMTY1MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2YzN2M2Yzg3MGEyNDhkOTU2MWUxNmViYjNmOGVjMGI1YmNkMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3tClUnNmwV63EFzA6TOJDINrrf6
Ni/yYC6CD+qFNiyYltOniGNU6/IncQPbaPVuw8Psn36WNvFBGUpu53mwrOd+7pg+
C6D82cQN6MVX5Glpda9YxIKSHadiGJxbSVRNRkAmCcBWi1U2DWy6FkLplLCyiArn
KpCHkVw9MIBwwxTfgbzJLVx9KsdvzYG1Iu7+Q+/varJz8CvtwQ4YPSjn8VG+loSa
1846NZcvWtqxQ8kXFxDZITD5fLrBll6jWTcmjDB/F0yYtX1nAiSiO5RxTzu1ZtcH
FmAVH5C0qfGgIjotnIJzCSCsXi725eJ2XKq+dzt/7/yhhGlOeawgxJVRgQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKfzfGyHCiSNlWHhbrs/jsC1vNESMB8GA1UdIwQY
MBaAFGAtwkeKS93kxEC7WIAkENI0CkkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMt
NWY3MTNkZmZmMTE0LzEvcF9OOGJJY0tKSTJWWWVGdXV6LU93TFc4MFJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMtNWY3MTNkZmZmMTE0
LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFUnagAwQF
WZBAAwQBWZBmAwQBWZBqAwQBWZBuAwQF1GYAMA0GCSqGSIb3DQEBCwUAA4IBAQCE
mOPB82UN3MM2SyPnOeZgu7afvK5EjxpRjXi8ZOqAERMfGJSw7MCXqVc8W4+yQ52H
Z/DIysLwL80ZIG/rL+M4H0P458efGBB/ymuCxu0wbWqDN+KPY3bOX8SYmgBZZETm
xGqM3U/8rLYnRxFttfAZqr9b8uJOFOSzL0mjX3NKUYPLHV83G1XIQ5s+gf7h/07y
90ouhcD1VmW7OJl6mDCeMvL9xRzksYTE0NqAvIxm7csfYcYlorm7w+r/XxFdO7cn
X8pAHTw4XwL67LnJe0zohCvcpFB+mc05VLb2W3QpCZqYV7Ojg35N5iIh1VyCOi0F
97Jaw27Wuzocb0ABBZd2
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:53 2025 by rpki-client