Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/m3HzAb0XoPmRcZr8kkO-WvTDjLM.roa
File: m3HzAb0XoPmRcZr8kkO-WvTDjLM.roa (raw, json)
Hash identifier: ztCNgHJhvBKDZRDQPDszTXkbkRHKWh8qii+N+Cp7g1w=
Subject key identifier: 9B:71:F3:01:BD:17:A0:F9:91:71:9A:FC:92:43:BE:5A:F4:C3:8C:B3
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018FD17BE0D87E4F6DFE3F93F579C15CB1F8
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/m3HzAb0XoPmRcZr8kkO-WvTDjLM.roa
Signing time: Sat 01 Jun 2024 01:48:27 +0000
ROA not before: Sat 01 Jun 2024 01:48:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 82.115.8.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
103.25.86.0/23 maxlen: 24
188.214.236.0/22 maxlen: 24
188.253.8.0/21 maxlen: 24
202.133.90.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 09:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d1:7b:e0:d8:7e:4f:6d:fe:3f:93:f5:79:c1:5c:b1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 1 01:48:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b71f301bd17a0f991719afc9243be5af4c38cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:14:0f:3f:0e:b7:98:ea:3a:59:d8:54:91:
e3:55:da:4a:76:04:2e:19:5f:f7:02:30:3f:55:c3:
f6:1d:b0:07:a9:13:c3:49:c6:09:00:89:98:f6:3b:
26:90:32:59:7b:7d:59:56:c1:67:06:5d:bf:c8:00:
95:0e:8e:aa:81:6e:3d:58:06:fb:81:19:14:06:93:
7a:35:33:a9:a0:a9:66:7e:9a:26:7b:e1:8a:49:25:
da:68:bc:45:e7:a3:d8:5b:08:dc:29:3d:ae:89:c8:
49:64:99:5b:ce:b6:dc:ce:46:e0:3d:87:83:ad:d8:
0f:90:0c:f6:a5:87:b4:c8:86:ed:57:5a:27:6e:5a:
4b:7a:60:39:06:d4:90:86:0d:bb:09:00:fb:20:3a:
cf:2f:c0:e6:53:ff:5c:4d:1b:1f:0d:04:95:64:3c:
27:b7:b7:43:0f:33:e8:11:9c:3c:18:b3:09:ce:4a:
8d:2b:47:ff:b7:78:68:d8:6b:66:1d:de:34:b0:11:
51:f8:c1:5e:d3:63:a4:9d:c3:4f:2c:41:4c:25:a4:
4b:0a:1d:f1:56:a9:79:e1:77:26:a3:28:33:25:e2:
d7:b6:0b:51:5e:5d:1f:86:36:aa:f9:df:5b:59:d9:
ec:1c:2e:94:86:d1:ce:04:5d:de:ed:36:8b:56:47:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:F3:01:BD:17:A0:F9:91:71:9A:FC:92:43:BE:5A:F4:C3:8C:B3
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/m3HzAb0XoPmRcZr8kkO-WvTDjLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.8.0/24
89.251.10.0/24
103.25.86.0/23
188.214.236.0/22
188.253.8.0/21
202.133.90.0/23
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:26:42:8b:e2:3a:99:94:2e:aa:4b:e1:21:fe:d0:49:2e:1d:
09:6d:96:10:99:3e:01:23:85:46:a5:93:2e:45:47:4f:f7:8c:
ad:96:89:10:d4:32:1d:3e:94:4e:bb:7e:04:ba:8d:d5:7d:cb:
47:10:d2:9b:05:19:bc:15:3a:46:7d:10:c2:eb:7c:ca:bf:ad:
92:47:bd:cb:82:aa:74:61:8b:43:ae:45:f5:7d:2f:d3:c6:3c:
fa:10:83:1e:b3:f2:cb:28:d4:ef:c1:69:94:04:30:a9:14:03:
7a:72:b3:0d:ea:ea:99:e9:5e:cc:e9:0d:a0:d7:f7:33:f7:6d:
d6:ef:38:34:b8:0e:3a:2e:36:af:d5:2e:59:b5:87:de:56:b3:
91:25:ba:e0:f7:73:38:8c:38:dc:e1:8a:89:fd:95:f7:f7:58:
df:e4:2d:6f:53:ad:ef:57:6e:8b:8f:5b:27:4c:46:84:53:0c:
6b:24:32:50:61:1c:d7:34:a8:75:a2:d4:23:00:8a:a5:be:78:
6b:78:16:f6:df:52:f1:b3:bb:58:be:01:b5:8c:f3:13:7c:fb:
4e:e1:83:f0:fc:38:d3:6b:94:20:be:89:d5:d6:42:b4:75:fa:
2e:29:3b:e3:fc:40:45:fa:30:64:44:45:86:55:42:e4:11:32:
11:17:e3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org