Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-6vEsQYHpO3q8xw8Te2kkQVtE6A.roa
File: 1-6vEsQYHpO3q8xw8Te2kkQVtE6A.roa (raw, json)
Hash identifier: 7nmKxj7acwqqCnEll82yjlQVeut82QVLrkVosFHVapE=
Subject key identifier: FB:AB:C4:B1:06:07:A4:ED:EA:F3:1C:3C:4D:ED:A4:91:05:6D:13:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B3E67B894E3E10BF85C42E52FD14B80E3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-6vEsQYHpO3q8xw8Te2kkQVtE6A.roa
Signing time: Tue 17 Oct 2023 16:11:06 +0000
ROA not before: Tue 17 Oct 2023 16:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 109.176.245.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Nov 2023 08:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:67:b8:94:e3:e1:0b:f8:5c:42:e5:2f:d1:4b:80:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 17 16:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbabc4b10607a4edeaf31c3c4deda491056d13a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:63:ce:1c:49:33:3c:34:29:32:01:8b:3b:
18:4b:0d:25:60:d9:46:af:e9:a1:00:2e:69:5a:91:
49:16:8f:45:a5:45:72:a1:da:aa:0f:9e:3a:2a:73:
a8:75:e2:83:22:df:04:bc:6b:92:0f:0f:92:00:92:
8f:0e:49:18:64:18:b7:04:31:5b:a5:d3:4b:17:7c:
dc:2a:48:5d:a1:7c:09:c0:74:f5:5c:6c:b5:3d:9a:
93:65:5c:70:9c:a8:e9:a5:59:79:c7:e0:53:02:d4:
02:10:2e:c5:66:79:5e:04:7c:6f:e8:30:1a:12:0f:
7b:d7:a5:0c:da:5f:e9:9a:95:74:03:de:a9:83:ff:
8d:6e:60:80:1f:70:a7:74:25:9b:86:58:0f:77:f7:
12:d6:3e:8e:f2:cf:ca:71:6c:56:7a:25:66:51:b2:
85:bd:ab:75:85:8d:27:15:25:49:87:19:1b:13:46:
a2:64:b4:ab:68:3d:48:ee:86:58:0b:c1:a4:f7:da:
a6:93:31:1b:97:b3:fe:0d:a4:ee:82:8c:40:58:2a:
9f:e1:4f:84:15:e1:81:d4:76:59:b8:0c:c4:8f:0e:
9e:b2:ad:ab:9d:ad:e7:d2:59:18:f7:b9:de:a5:95:
7a:f8:b4:41:56:3d:42:42:e8:e3:c2:62:60:e4:9a:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AB:C4:B1:06:07:A4:ED:EA:F3:1C:3C:4D:ED:A4:91:05:6D:13:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-6vEsQYHpO3q8xw8Te2kkQVtE6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.220.0/24
89.213.157.0/24
109.176.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:14:31:8d:73:05:89:b7:16:49:27:2b:b3:0d:05:a7:df:86:
20:8f:fc:36:b8:5b:e4:a5:2f:73:01:e1:d5:45:61:01:04:b3:
bf:a2:3a:2c:38:90:07:5c:3f:cd:8b:47:35:64:a2:0d:46:98:
bb:55:35:1d:b4:64:ce:4e:6c:16:37:26:ae:01:7b:30:fa:50:
8b:85:5b:2a:c6:26:b0:04:11:5b:d5:1a:5b:be:4e:97:d7:ec:
05:59:f7:5f:eb:c2:37:0a:4f:a3:2d:e9:7c:6e:82:92:60:13:
bd:ff:3e:c2:89:69:ea:33:09:3e:04:f9:53:4f:34:34:a2:b2:
cf:66:ed:c2:1e:77:81:1d:d3:6c:d9:2a:5d:10:aa:8e:8a:62:
57:84:83:6f:f0:e9:99:21:b7:c2:aa:cd:01:a1:5c:bc:d6:92:
2b:66:8d:03:7e:e6:b7:51:28:d2:4d:04:64:47:97:8d:77:5d:
36:02:ae:f7:26:6b:55:b6:64:4f:9f:ad:43:61:46:91:06:01:
27:f9:b0:1c:2a:49:60:6b:4f:9a:c5:99:cf:ad:b8:55:71:07:
ea:ae:26:cf:41:ab:e3:4d:54:04:6b:7f:af:2b:63:7e:63:a2:
95:02:7e:de:df:11:a6:69:f4:0b:b5:18:c6:73:d8:d8:35:ce:
12:2f:09:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org