Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0W0vX8gd1DZyfb46alFnCk772RA.roa
File: 0W0vX8gd1DZyfb46alFnCk772RA.roa (raw, json)
Hash identifier: 9V2yf/fr/ElTNlHQIg63Hw0vHBFwoimvJhkAXDpoHmA=
Subject key identifier: D1:6D:2F:5F:C8:1D:D4:36:72:7D:BE:3A:6A:51:67:0A:4E:FB:D9:10
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC349471158698FB9EA77C3369B37EC62
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0W0vX8gd1DZyfb46alFnCk772RA.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 82.153.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 10:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:47:11:58:69:8f:b9:ea:77:c3:36:9b:37:ec:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d16d2f5fc81dd436727dbe3a6a51670a4efbd910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:48:21:e1:71:49:a3:97:6d:4d:00:98:1d:
02:a4:37:ae:d8:4c:7b:c9:d4:c3:ff:e9:f8:14:71:
08:6e:17:24:a8:3a:83:ec:62:99:00:bf:a8:84:7e:
08:e9:23:02:f6:01:1b:da:ad:fb:0b:46:2e:ec:ba:
a4:b9:e2:98:96:af:58:9d:b5:e1:92:39:3d:01:9b:
86:a2:82:ac:42:8a:08:2c:7f:2e:13:e9:7f:08:0e:
c2:7b:05:2c:63:fb:35:6a:af:0c:7c:d2:bc:cd:b1:
a9:2e:5f:88:15:a4:48:5d:d9:c7:0d:03:60:f6:04:
dd:07:69:60:a8:dd:96:e8:49:23:2e:ef:d4:fc:21:
6a:5c:98:67:59:64:d4:34:de:1b:3a:40:25:ec:d5:
46:53:8e:26:8f:7c:01:33:1c:38:e3:a2:f5:56:4b:
34:b8:b9:a9:cb:6e:77:d1:8a:78:3e:63:bb:d9:c5:
fb:4e:30:8c:f3:2f:60:13:d5:82:5c:02:5a:73:7b:
2c:32:16:b2:99:b5:36:47:53:7d:95:0b:81:c8:4b:
f4:0c:80:88:4f:bf:59:eb:08:ed:d0:31:f0:36:ae:
13:72:e9:28:41:fd:4d:ea:3f:e3:97:21:f0:d3:4d:
c8:34:fc:cb:86:8b:cb:5f:99:cb:5d:9c:42:00:6f:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:2F:5F:C8:1D:D4:36:72:7D:BE:3A:6A:51:67:0A:4E:FB:D9:10
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0W0vX8gd1DZyfb46alFnCk772RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.242.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ce:f8:66:3d:74:af:d3:f7:4b:b0:94:6b:a4:46:a5:00:ef:
2b:32:0d:9d:fd:b1:3a:3c:7d:7f:62:0d:32:66:b8:fe:fe:ab:
96:fb:48:bb:dc:7b:de:e5:17:08:46:9f:4d:83:09:ea:19:86:
6d:17:64:2c:e9:e4:85:0e:70:6f:0d:30:dc:bb:45:38:d7:34:
23:06:e9:dd:39:40:f4:e7:4e:0e:04:9e:f9:83:3f:be:a2:ac:
1c:c6:37:62:da:52:da:ea:7b:31:63:90:dd:ed:b3:6c:86:19:
d2:9d:46:c6:cb:48:b9:b4:9e:4f:9e:6b:eb:57:39:53:2e:6c:
d6:bc:b0:46:5c:2e:91:0f:0f:09:5f:2b:b5:28:42:8e:83:41:
52:18:81:03:e1:a5:ce:bd:a4:73:ac:b0:3a:53:9e:49:6d:52:
97:90:42:bb:6c:bb:64:25:69:67:a5:16:c6:8b:d0:4e:a6:2b:
78:90:7e:a6:e4:82:d2:70:0b:cb:cb:d5:72:2c:66:01:ae:32:
de:99:c6:53:cb:21:d0:58:b1:74:e3:1f:a5:e6:a4:0a:24:9e:
14:ca:00:86:8d:23:b2:89:ac:2d:60:32:6c:45:8b:9e:e7:af:
e6:f6:4d:26:41:19:26:f7:f9:c4:51:a8:2b:64:a8:fb:d4:67:
3b:8d:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org