Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lISiVpWw-nTnXMfoUZLuPiNc1m4.roa
File: lISiVpWw-nTnXMfoUZLuPiNc1m4.roa (raw, json)
Hash identifier: B8Se68FemlLwVEjP9rLnUDz+PtFEJj8OT88mnS4I8kc=
Subject key identifier: 94:84:A2:56:95:B0:FA:74:E7:5C:C7:E8:51:92:EE:3E:23:5C:D6:6E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190123C85D1EB576B3A45C4D94EF73EB296
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lISiVpWw-nTnXMfoUZLuPiNc1m4.roa
Signing time: Thu 13 Jun 2024 15:34:34 +0000
ROA not before: Thu 13 Jun 2024 15:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211750
IP address blocks: 82.163.15.0/24 maxlen: 24
89.213.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 16:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:12:3c:85:d1:eb:57:6b:3a:45:c4:d9:4e:f7:3e:b2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 13 15:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9484a25695b0fa74e75cc7e85192ee3e235cd66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:5c:e8:b2:ff:bc:da:c0:4c:1e:64:ff:b8:
69:ad:8e:c5:1b:ed:df:ad:a5:c4:bc:51:3d:70:e6:
8f:a2:95:73:44:b1:6a:6e:fe:d2:82:66:18:91:85:
33:38:eb:17:eb:49:f5:23:03:62:7f:75:96:7f:63:
fc:57:ea:3b:ed:63:ca:91:ce:78:f6:27:76:f2:ad:
06:35:ee:b9:ef:e4:fc:db:66:4a:a5:d8:69:03:c2:
b5:d5:f7:62:2b:37:29:99:df:d6:51:8b:83:6b:a8:
15:73:65:73:71:4d:76:a0:57:9d:be:2d:f7:f4:77:
a3:7d:d9:10:26:31:d8:aa:7c:5b:2b:8f:2a:98:6f:
4e:0d:40:88:fb:4f:a0:e6:81:b3:d3:60:29:f4:07:
7d:f9:34:32:a1:36:a6:e0:ee:71:64:53:bd:93:d3:
bd:75:50:bd:87:71:e9:ec:27:82:f3:de:7e:79:70:
6e:59:0b:1d:70:b5:d3:e9:5a:6a:13:ed:15:0d:72:
ae:a5:0a:14:9d:11:8d:a2:16:4b:f5:50:7e:b1:45:
13:8c:6c:87:f6:60:95:d9:c4:53:43:76:01:43:bb:
e5:95:51:dd:6e:92:02:3c:ba:29:a9:0f:52:e5:79:
e9:a7:b2:ed:f6:98:3d:55:be:77:fd:30:f5:af:dc:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:84:A2:56:95:B0:FA:74:E7:5C:C7:E8:51:92:EE:3E:23:5C:D6:6E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lISiVpWw-nTnXMfoUZLuPiNc1m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.15.0/24
89.213.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:94:13:a4:d5:f2:c1:7b:45:20:0d:0e:c7:6c:e2:3d:30:2d:
9d:9e:55:aa:df:9d:e1:97:42:fa:09:c3:13:5f:ff:ab:35:95:
33:cb:3d:23:44:5d:7b:6b:46:78:19:0f:f0:8d:38:87:47:9f:
9f:7d:6f:60:cf:a5:ff:41:ae:1e:93:fd:f8:30:15:44:2b:1c:
1b:ea:d5:ab:c0:d5:55:21:21:03:8b:6e:14:ee:44:3d:84:ae:
d7:28:5e:c9:72:35:36:90:d4:ad:75:f9:4e:ca:62:ea:cc:b8:
8e:e5:ee:47:a7:70:02:e8:57:67:1c:9b:e1:3b:cf:6d:9f:ae:
19:eb:15:6f:b8:9c:35:cd:f3:18:03:9c:1b:d1:c7:3d:4c:a1:
32:22:b7:56:4a:e0:ab:48:83:40:8c:d4:fd:01:38:60:3f:41:
7a:12:bd:1e:fe:10:39:bf:94:76:08:31:0a:bc:41:9e:d1:17:
81:4e:50:c8:48:0e:ce:a4:57:f8:e4:33:a3:97:0c:1e:b6:6e:
94:67:1b:a3:7d:53:85:37:89:ed:2a:85:06:c7:98:30:6f:83:
8f:74:c8:94:79:f4:77:58:5d:c9:13:10:e6:46:6d:07:99:82:
3c:e5:c5:76:76:84:93:a2:ad:db:4c:3e:6e:5b:9e:41:95:c4:
24:a3:6b:c9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZASPIXR61drOkXE2U73PrKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNjEzMTUzNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDg0YTI1Njk1YjBmYTc0ZTc1Y2M3ZTg1MTkyZWUzZTIzNWNkNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT5c6LL/vNrATB5k/7hprY7FG+3f
raXEvFE9cOaPopVzRLFqbv7SgmYYkYUzOOsX60n1IwNif3WWf2P8V+o77WPKkc54
9id28q0GNe657+T822ZKpdhpA8K11fdiKzcpmd/WUYuDa6gVc2VzcU12oFedvi33
9HejfdkQJjHYqnxbK48qmG9ODUCI+0+g5oGz02Ap9Ad9+TQyoTam4O5xZFO9k9O9
dVC9h3Hp7CeC895+eXBuWQsdcLXT6VpqE+0VDXKupQoUnRGNohZL9VB+sUUTjGyH
9mCV2cRTQ3YBQ7vllVHdbpICPLopqQ9S5Xnpp7Lt9pg9Vb53/TD1r9x4KwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJSEolaVsPp051zH6FGS7j4jXNZuMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbElTaVZwV3ctblRuWE1mb1VaTHVQaU5jMW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUqMPAwQA
WdXSMA0GCSqGSIb3DQEBCwUAA4IBAQCllBOk1fLBe0UgDQ7HbOI9MC2dnlWq353h
l0L6CcMTX/+rNZUzyz0jRF17a0Z4GQ/wjTiHR5+ffW9gz6X/Qa4ek/34MBVEKxwb
6tWrwNVVISEDi24U7kQ9hK7XKF7JcjU2kNStdflOymLqzLiO5e5Hp3AC6FdnHJvh
O89tn64Z6xVvuJw1zfMYA5wb0cc9TKEyIrdWSuCrSINAjNT9AThgP0F6Er0e/hA5
v5R2CDEKvEGe0ReBTlDISA7OpFf45DOjlwwetm6UZxujfVOFN4ntKoUGx5gwb4OP
dMiUefR3WF3JExDmRm0HmYI85cV2doSToq3bTD5uW55BlcQko2vJ
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:44 2025 by rpki-client