Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/AJ0AEOB1Q_Y_3GWickqBxzLKt60.roa
File: AJ0AEOB1Q_Y_3GWickqBxzLKt60.roa (raw, json)
Hash identifier: Bygo1Hzrgc4qm7ImaG3bJAgiu4vWcbTcAkSUD6107bE=
Subject key identifier: 00:9D:00:10:E0:75:43:F6:3F:DC:65:A2:72:4A:81:C7:32:CA:B7:AD
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 01856F54913C7E8E8040A0FC3BD58CEA4CE7
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/AJ0AEOB1Q_Y_3GWickqBxzLKt60.roa
Signing time: Sun 01 Jan 2023 21:54:51 +0000
ROA not before: Sun 01 Jan 2023 21:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39706
IP address blocks: 82.113.124.0/22 maxlen: 22
82.113.121.128/25 maxlen: 25
82.113.121.0/25 maxlen: 25
89.204.130.0/24 maxlen: 24
89.204.128.0/21 maxlen: 21
89.204.128.0/19 maxlen: 19
89.204.135.0/24 maxlen: 24
89.204.144.0/21 maxlen: 21
82.113.96.0/20 maxlen: 20
82.113.96.0/19 maxlen: 19
82.113.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:91:3c:7e:8e:80:40:a0:fc:3b:d5:8c:ea:4c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jan 1 21:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=009d0010e07543f63fdc65a2724a81c732cab7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:c7:6c:eb:e3:28:dd:9e:33:ac:dc:78:b6:
4e:1d:3b:60:2a:be:97:58:94:b6:c4:c1:b6:6a:cb:
ba:28:3f:a8:2b:3a:ef:90:30:98:8c:6a:68:81:9a:
80:8a:ac:0a:a9:03:9a:d5:5e:bc:87:0a:f7:eb:94:
d6:14:0c:96:74:cf:fc:81:a7:b1:13:90:61:e8:ef:
57:d9:f0:1d:57:e0:36:d5:6c:70:05:0e:6d:83:87:
e1:2a:d4:39:4d:29:46:f5:04:4b:f4:57:85:6e:b5:
09:bd:36:78:c0:b1:9d:f8:a6:e1:f8:63:bf:f8:df:
cc:ab:e8:fd:2b:dc:18:d7:80:e0:91:77:4d:cf:a6:
43:38:34:51:a8:30:f3:62:f0:0b:f1:d0:52:6b:85:
ee:90:4c:40:71:03:82:0c:2c:e8:f5:ff:35:8d:86:
49:cb:4a:e2:eb:a2:60:5e:e6:20:62:0e:34:21:d5:
6d:fa:d6:4e:72:ab:15:89:41:a0:59:fa:42:6d:0c:
de:d1:b0:41:e0:b7:0f:4a:c9:49:bd:e9:c8:f6:d0:
16:d0:e7:b1:14:1d:6c:2c:7b:f0:e3:8a:99:71:ef:
8d:e5:0b:82:e7:fa:14:5a:38:1c:93:49:83:4c:15:
a5:0b:cb:bd:47:3e:8b:84:b1:d7:66:d3:5f:fb:a4:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9D:00:10:E0:75:43:F6:3F:DC:65:A2:72:4A:81:C7:32:CA:B7:AD
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/AJ0AEOB1Q_Y_3GWickqBxzLKt60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.113.96.0/19
89.204.128.0/19
Signature Algorithm: sha256WithRSAEncryption
73:8a:76:ad:58:0e:34:14:48:4e:60:f3:fe:0a:51:e7:6b:20:
b8:e0:10:bc:36:12:88:fc:48:e1:9f:ca:88:b6:26:62:ad:74:
cf:f0:52:14:67:46:35:d9:92:ef:25:6d:be:6e:5f:cb:b7:d5:
f5:d1:59:67:87:bc:78:99:78:ea:13:2d:76:fd:ef:22:ca:3a:
4f:56:9a:10:5d:99:65:7f:55:05:7f:1c:a9:11:d9:87:47:f1:
93:14:aa:33:04:b0:d7:f7:cd:26:b8:2e:67:b6:0e:6b:14:0d:
07:61:68:c6:80:f9:20:c0:85:1b:14:f8:b3:42:66:18:3c:2e:
f5:07:53:3e:2b:c5:b7:43:25:2c:0c:6e:40:87:ea:d0:09:48:
60:c2:4b:be:e1:19:5f:e9:58:dd:7b:8b:25:7f:c8:0d:ba:ac:
92:9f:90:0f:f2:4d:99:e8:92:b5:5d:7c:e0:ec:8d:cf:55:ac:
20:ff:c5:dc:6f:87:1c:8f:7b:aa:df:13:76:c7:87:54:33:ec:
5d:20:97:d9:ef:bf:32:be:58:ea:cc:ab:79:8c:b4:3b:9a:85:
88:da:5d:21:3a:59:b0:b5:5b:21:d3:36:06:86:9c:ac:1b:e0:
e6:ed:09:5a:a4:55:46:c1:cc:bd:d4:5b:06:65:a6:fd:53:ea:
58:46:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:37 2024 by rpki-client on console-fra.rpki-client.org