Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-vRkxTxPzy4YjqbO_rHWV-h6Idw.roa
File: 1-vRkxTxPzy4YjqbO_rHWV-h6Idw.roa (raw, json)
Hash identifier: 7PjP7fiU7octJkJn0UwC9lWMIbYmLzZ/HZ+HXQse1PM=
Subject key identifier: FA:F4:64:C5:3C:4F:CF:2E:18:8E:A6:CE:FE:B1:D6:57:E8:7A:21:DC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D35FC1F2D0D71654AAE67CE7D13676724
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-vRkxTxPzy4YjqbO_rHWV-h6Idw.roa
Signing time: Tue 23 Jan 2024 11:02:11 +0000
ROA not before: Tue 23 Jan 2024 11:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 82.153.1.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:fc:1f:2d:0d:71:65:4a:ae:67:ce:7d:13:67:67:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 23 11:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faf464c53c4fcf2e188ea6cefeb1d657e87a21dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:0c:bc:0e:18:40:5d:c7:19:bf:43:af:7e:
99:ab:a9:f8:02:fe:a5:97:64:45:ff:3f:f2:2a:c4:
16:56:21:14:20:00:60:63:4c:be:9a:cb:6d:0a:9e:
bb:21:39:a1:9a:00:15:de:b7:ce:04:62:39:49:41:
e5:e4:40:aa:b7:07:e5:91:2d:15:2f:73:c0:36:57:
69:c5:03:15:2e:42:5c:7a:e6:e5:98:99:fb:29:5e:
56:06:69:b3:63:da:62:88:70:09:52:ce:18:c5:0b:
06:c2:a3:89:d7:1a:6c:8b:8d:1f:c2:7c:32:51:75:
ce:e6:7d:62:86:22:0c:d5:e1:bd:00:51:25:e4:e6:
e5:00:ea:c1:5e:21:1e:c8:ac:20:66:74:a7:34:69:
7d:ee:56:e3:d0:6c:87:84:bc:90:29:57:84:6c:dd:
8e:a0:66:a7:14:6c:91:41:d6:c6:38:3a:72:2f:11:
86:77:93:be:b3:6b:a5:51:33:15:e6:ac:28:94:0c:
8f:35:69:0b:0e:ad:c2:47:33:e9:97:59:96:2c:0e:
09:98:d6:20:44:6f:dd:7f:bb:2e:38:aa:f5:d8:e6:
b9:c9:3d:73:c1:66:61:22:fb:4e:c0:76:8f:1b:be:
fe:9a:59:a9:ad:64:af:e2:f9:ae:8b:37:50:58:8b:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F4:64:C5:3C:4F:CF:2E:18:8E:A6:CE:FE:B1:D6:57:E8:7A:21:DC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-vRkxTxPzy4YjqbO_rHWV-h6Idw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.1.0/24
89.213.164.0/24
89.213.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:88:8e:a0:70:b3:8b:6a:63:b6:dd:b0:47:10:f6:a6:57:70:
11:c5:0e:4a:a9:db:a0:f8:8e:67:40:80:41:86:a6:f2:21:19:
97:85:39:fa:06:6e:83:14:d9:1d:d8:61:3e:d5:c5:a1:35:6c:
55:cb:d8:e9:b8:80:d2:68:c6:d3:f6:44:6f:45:53:f0:00:19:
96:cb:c3:2e:61:28:6b:33:0e:0d:ee:e9:0a:27:5b:fd:38:83:
75:88:d5:22:5a:bc:c7:96:65:4a:2d:74:d2:be:8e:95:f2:74:
c7:6f:21:c8:1b:8a:c8:40:6f:c1:69:3c:1a:ac:0f:45:72:c2:
fe:ed:38:ae:d5:6e:ac:40:53:8f:da:f0:c4:b5:39:da:67:c8:
50:10:ed:1c:8b:a5:40:cd:9a:cd:18:9c:76:0a:dd:2a:c2:13:
33:af:4e:dd:b7:09:4d:ed:a4:bc:74:5b:6e:8b:f6:8d:d7:2f:
9d:ac:d2:93:a6:33:aa:45:89:66:ab:3b:63:0e:0d:b7:b1:3a:
ac:f0:bc:54:64:60:5a:18:61:8d:a9:a2:42:68:74:23:98:23:
c0:7a:39:a8:29:fe:be:26:fc:32:81:17:f9:de:0e:56:c5:48:
b5:6e:f7:93:f4:cf:9a:7a:37:bd:d2:fc:ea:0e:bf:1c:bb:60:
9e:f4:d1:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:19 2024 by rpki-client on console-ams.rpki-client.org