Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2__CxYc-UMYYgz_mETTqAVDx0bs.roa
File: 2__CxYc-UMYYgz_mETTqAVDx0bs.roa (raw, json)
Hash identifier: KNyW8WV52RpLCGGA7as+n8mbIsxDAVvtJX8h1QGwbos=
Subject key identifier: DB:FF:C2:C5:87:3E:50:C6:18:83:3F:E6:11:34:EA:01:50:F1:D1:BB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AE0FA61AF8F46EC5F3F116462BB8D3F05
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2__CxYc-UMYYgz_mETTqAVDx0bs.roa
Signing time: Fri 29 Sep 2023 12:46:59 +0000
ROA not before: Fri 29 Sep 2023 12:46:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.213.176.0/22 maxlen: 24
89.213.180.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.136.0/22 maxlen: 22
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 06:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:fa:61:af:8f:46:ec:5f:3f:11:64:62:bb:8d:3f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 29 12:46:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbffc2c5873e50c618833fe61134ea0150f1d1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:49:df:25:25:3a:8d:ed:cd:9f:46:c4:00:
3d:7a:c7:79:b7:82:bb:04:eb:02:73:a2:43:50:32:
19:7b:b3:d6:97:03:f0:7a:bf:70:fb:4e:a2:5f:66:
c5:c3:2f:6b:bf:9e:9f:d8:bb:07:d2:ac:69:ab:f7:
59:d3:3a:4a:95:17:aa:bb:6f:0e:50:40:5e:21:71:
a7:eb:15:9b:61:72:c0:3c:06:66:b5:1c:77:2a:57:
42:5b:d3:89:1a:c6:5b:a7:66:85:41:d7:33:83:25:
c0:8d:62:79:f9:e1:15:4a:7c:a1:08:17:9e:cf:90:
bf:17:53:fc:7f:73:ea:21:0a:a8:ed:c1:cd:b5:8e:
4d:a8:01:53:23:e5:72:41:1f:32:51:ca:fe:15:20:
16:e2:0c:50:b8:2c:25:ad:cf:45:6b:5d:cc:ca:59:
23:fe:ed:dc:23:54:fd:8c:76:b0:cf:e3:18:fa:eb:
34:d2:c6:65:8f:e8:c6:43:dd:4d:2b:54:e8:11:51:
dc:8c:46:ce:cf:f7:21:ea:c3:cd:c8:fd:a6:ab:35:
33:0f:c3:75:92:bc:af:b4:8b:bb:76:fb:e6:f7:81:
f5:77:0a:3c:e4:c0:1c:96:10:12:38:0a:9b:49:39:
74:c9:6b:ff:c5:65:56:12:5f:04:bb:2a:fc:59:3b:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FF:C2:C5:87:3E:50:C6:18:83:3F:E6:11:34:EA:01:50:F1:D1:BB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2__CxYc-UMYYgz_mETTqAVDx0bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.153.136.0/22
89.213.148.0-89.213.155.255
89.213.176.0/21
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
97:91:cb:bd:3a:a5:e1:dd:5c:db:4b:f4:2b:ea:d6:11:3b:b0:
8e:6f:51:bf:68:83:20:b5:36:5c:ed:2a:b0:85:22:a5:8b:63:
1e:21:3f:1a:61:eb:42:41:6c:a5:b1:45:df:54:46:89:af:1b:
3c:bc:ab:af:0d:2a:44:da:ec:63:0e:b3:a6:35:4e:c6:4d:4e:
e3:29:20:0d:08:6d:c6:04:de:57:c9:77:b1:a2:66:04:99:a2:
f0:a8:37:1c:0b:d5:cb:8a:d7:0e:2e:d7:f9:2b:92:c6:53:20:
43:0e:50:8e:1f:45:08:9d:38:ab:75:f4:43:f3:a0:0c:5d:3f:
aa:72:83:fe:b4:93:0c:3a:15:73:b2:1c:b2:eb:5d:b1:9d:20:
29:2f:d1:85:0d:85:4e:fb:71:8e:33:69:bc:44:70:b5:02:d0:
eb:8c:73:8e:a0:79:af:a6:d9:17:ce:97:7e:a5:46:5d:01:e0:
75:99:81:7a:63:3f:2e:74:92:01:2c:3d:2d:fe:d7:ea:54:a1:
a4:ba:40:e3:f0:b5:04:18:a5:dc:ce:9b:99:1c:d5:e7:95:bd:
fc:59:f2:d8:1f:e0:92:09:d2:be:98:e4:33:f1:31:13:ce:1e:
9d:df:a1:c1:e0:ad:fe:d7:f0:77:eb:10:a0:e3:1e:a6:87:12:
d5:09:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org