Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1ZeS_R0eKJpq83xP27T01Op6Mao.roa
File: 1ZeS_R0eKJpq83xP27T01Op6Mao.roa (raw, json)
Hash identifier: WvhJirgd8Dpen88h3Z26w+uupYojaWgjqtFOb+JRX3Y=
Subject key identifier: D5:97:92:FD:1D:1E:28:9A:6A:F3:7C:4F:DB:B4:F4:D4:EA:7A:31:AA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C249BFDEB62CABCAF596EF1F37924E4B7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1ZeS_R0eKJpq83xP27T01Op6Mao.roa
Signing time: Fri 01 Dec 2023 09:00:52 +0000
ROA not before: Fri 01 Dec 2023 09:00:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.213.180.0/22 maxlen: 24
89.213.182.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.70.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 11:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:9b:fd:eb:62:ca:bc:af:59:6e:f1:f3:79:24:e4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 1 09:00:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d59792fd1d1e289a6af37c4fdbb4f4d4ea7a31aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c2:62:e9:7f:0d:c0:75:fd:32:95:86:5d:1d:
0c:83:67:b1:66:78:a3:bb:fe:5b:11:04:1e:d4:16:
a6:14:b0:c4:32:be:ed:7a:ab:d1:94:e2:f4:b9:6f:
80:2f:16:cf:d0:36:c5:49:ef:87:c4:0c:d6:1e:7a:
02:d7:9f:8e:f5:42:75:b1:2d:21:9f:01:bb:b4:17:
08:4a:7f:d7:59:f7:12:03:d3:bd:ee:c5:71:46:54:
66:88:de:04:a7:27:97:f6:90:8c:59:69:66:99:ea:
e9:00:0c:40:7d:8d:de:75:7b:9f:26:19:cc:c0:c4:
3c:0e:05:da:70:62:fd:47:aa:ee:ab:7c:2c:cb:43:
ed:d4:5a:dc:b8:7c:b3:3c:dc:70:25:66:83:2f:70:
0b:6d:2f:21:fa:fe:1e:c7:69:5a:0f:91:52:91:8c:
5e:1d:8b:4f:f7:74:cb:b7:69:a7:64:c1:16:0f:87:
3a:0b:62:8b:7b:93:29:a4:1d:b3:7f:33:63:55:96:
bc:13:bf:0b:18:c4:90:39:4b:74:20:c7:a7:5f:97:
52:e2:1c:0d:ab:75:0c:d2:99:e8:82:18:8f:ed:f1:
2e:26:c0:43:a3:93:bc:3a:01:f7:b4:bb:4c:dd:a2:
e0:e0:2a:8b:0b:85:5d:af:90:e3:22:ba:35:1d:11:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:97:92:FD:1D:1E:28:9A:6A:F3:7C:4F:DB:B4:F4:D4:EA:7A:31:AA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1ZeS_R0eKJpq83xP27T01Op6Mao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.70.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/22
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
13:95:62:81:1a:21:ad:33:7e:0d:96:9f:9f:01:f8:f7:9c:a8:
06:9e:7d:d0:cc:28:1d:47:59:50:5f:15:70:62:96:04:79:b6:
05:f8:70:82:c2:7b:7c:b5:39:84:29:78:1c:ef:e7:14:2e:2d:
13:34:d0:10:e0:fd:94:59:42:2f:b3:73:f9:55:d4:c1:10:4e:
04:16:07:db:14:54:d0:96:ec:a5:75:12:66:4c:cd:aa:97:71:
01:1f:02:c2:06:17:57:2f:d5:2f:06:84:7a:a2:64:f8:0a:50:
54:d3:cb:5b:ff:e4:bb:5b:d0:7b:e7:a0:05:f6:e0:01:bb:24:
02:86:47:46:50:a9:7a:8d:06:54:82:6f:4a:78:33:c3:b8:6a:
a5:50:2e:58:3b:8c:d6:a1:3b:7b:50:e6:48:a8:42:1e:13:b9:
78:b1:25:bf:f5:1c:a8:60:cc:7e:8d:c1:42:b4:77:3d:a5:94:
f4:d5:5c:68:d6:4c:f0:b4:ef:22:74:2a:29:2d:43:d3:c1:23:
4f:ed:82:08:6f:cf:76:e3:37:23:c9:f0:52:cf:ae:93:f9:88:
9a:2c:9d:eb:c2:85:2e:ed:27:12:a4:d2:e0:7b:59:9f:6d:f1:
eb:71:1e:22:0f:db:51:8f:94:87:b1:5d:e3:73:88:61:cf:2c:
a1:f5:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org