Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2ClL55nuKymID81CWoQoXMvZr6Y.roa
File: 2ClL55nuKymID81CWoQoXMvZr6Y.roa (raw, json)
Hash identifier: zC0GBAOdLdrtQoC67yolGwLrqW/Qhs1zIbdeRZP4O+0=
Subject key identifier: D8:29:4B:E7:99:EE:2B:29:88:0F:CD:42:5A:84:28:5C:CB:D9:AF:A6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C2F86A22D700BD6C7D8A81E5A63A3949C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2ClL55nuKymID81CWoQoXMvZr6Y.roa
Signing time: Sun 03 Dec 2023 11:53:21 +0000
ROA not before: Sun 03 Dec 2023 11:53:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
82.153.70.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
89.213.180.0/22 maxlen: 24
89.213.182.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 15:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:86:a2:2d:70:0b:d6:c7:d8:a8:1e:5a:63:a3:94:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 3 11:53:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8294be799ee2b29880fcd425a84285ccbd9afa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:ad:b2:21:80:b5:31:66:74:30:b2:a5:a1:
eb:ee:bf:80:31:6a:a3:3a:dc:56:72:4e:4f:c2:22:
25:3e:72:36:6d:d2:1f:c0:f9:46:fd:5f:54:f5:4d:
7c:87:a0:a8:4e:78:32:2c:2e:55:81:1a:72:39:ba:
b3:17:ca:9e:96:50:b7:cb:e7:88:da:7c:9d:02:b3:
ea:58:1b:ee:28:d2:89:ff:f0:50:1a:9b:29:4e:85:
70:71:49:4b:19:30:8a:40:44:8b:dc:06:e5:76:58:
73:40:01:c0:1e:3f:15:dd:af:b6:df:47:2f:21:e1:
6b:d2:fc:06:76:58:55:dd:fd:db:f9:5f:9e:32:af:
b8:ce:47:de:e7:0d:e3:57:47:16:f6:77:87:07:45:
81:1c:85:c0:fa:96:93:f9:2e:f9:e2:5f:f7:26:30:
f8:36:e1:35:aa:d4:a2:15:11:70:c1:f0:ff:7e:b0:
87:1e:2a:15:c5:be:48:d2:12:9e:36:da:c9:c9:df:
df:6d:e6:ee:43:88:4d:8a:77:44:f0:2b:c3:62:86:
fc:96:12:5e:2a:69:28:6c:40:eb:57:0a:fc:b5:13:
c7:76:32:33:00:30:02:35:9f:1f:f0:61:bf:5a:17:
a7:e7:91:c4:98:2f:08:e6:52:57:3d:78:d2:aa:8a:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:29:4B:E7:99:EE:2B:29:88:0F:CD:42:5A:84:28:5C:CB:D9:AF:A6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2ClL55nuKymID81CWoQoXMvZr6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.70.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/22
109.176.245.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
20:54:b3:b3:0c:00:51:11:4e:8e:e2:a4:26:45:0a:37:68:52:
6d:09:ac:33:ee:21:ec:7a:d6:c0:e8:5b:46:d7:d7:c7:67:26:
e2:8c:56:73:54:30:db:75:cf:b5:24:60:48:c3:8f:25:d5:d6:
8e:6b:78:d2:a5:d7:57:e5:79:75:f4:b1:37:e2:ac:17:a8:4f:
37:68:7c:ae:56:d8:7e:2c:8b:54:d7:f0:92:cc:84:40:28:ed:
0f:99:95:ed:62:00:0c:95:67:d4:06:43:cd:67:63:fd:7e:3c:
a6:1e:45:23:7c:36:d3:02:32:ea:6a:ab:d0:75:d7:d7:b5:14:
cb:b2:60:3b:85:44:71:7b:e9:d8:6d:f7:bd:68:05:16:b9:f2:
11:9a:25:bd:ab:f0:01:70:57:64:6f:c1:8d:ce:ac:38:71:46:
11:c9:ce:f2:e3:89:01:ae:1b:8f:21:df:33:da:d3:3f:cd:d8:
b7:e6:2c:17:9e:fc:3a:c0:a5:04:4f:99:38:05:81:f4:29:81:
0b:23:d0:89:fb:6e:81:ed:8c:e1:2e:20:9b:15:cd:ae:0a:13:
46:f1:a7:c3:55:46:70:60:9e:7b:3d:91:d4:20:2a:1e:59:4b:
99:1c:67:05:a8:02:27:55:d2:8b:c6:14:4e:2f:58:59:a6:7b:
7f:3f:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:19 2024 by rpki-client on console-ams.rpki-client.org