Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2p-mZ-IT9viHVURfSUeaQlM7eT0.roa
File: 2p-mZ-IT9viHVURfSUeaQlM7eT0.roa (raw, json)
Hash identifier: 4LwGVTeLNi/Q++K7BGU7Teg4qMqioDR2tPpGsETmPfA=
Subject key identifier: DA:9F:A6:67:E2:13:F6:F8:87:55:44:5F:49:47:9A:42:53:3B:79:3D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018BF6E62CB80ED4A3A956C90B5692F17BD4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2p-mZ-IT9viHVURfSUeaQlM7eT0.roa
Signing time: Wed 22 Nov 2023 11:59:21 +0000
ROA not before: Wed 22 Nov 2023 11:59:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 82.153.228.0/23 maxlen: 23
89.213.173.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.241.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 15:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:e6:2c:b8:0e:d4:a3:a9:56:c9:0b:56:92:f1:7b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 22 11:59:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da9fa667e213f6f88755445f49479a42533b793d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:8c:47:7e:f8:cc:74:b7:50:94:eb:8d:9e:
57:a6:ba:4c:70:a6:a4:10:7a:ad:da:65:0d:80:df:
a9:8b:e0:38:bf:97:89:72:8a:b2:0b:e1:6b:c8:b4:
d3:4f:a4:a7:f1:fd:50:12:09:b5:ba:30:c9:d7:c0:
a9:f4:0d:1f:85:76:68:de:c1:6b:4a:bd:dd:a5:1f:
13:30:40:b4:5a:25:66:78:34:71:03:c9:36:94:4a:
a7:7b:df:9a:cc:f9:21:3f:ef:a9:94:48:e5:72:6b:
d5:c3:4e:f4:fe:93:76:de:f3:4c:27:37:67:2a:83:
3a:35:e3:09:58:3e:85:9b:16:df:12:a8:4a:75:85:
dd:ed:99:f2:32:8c:40:78:23:1f:fb:f6:1f:2d:a5:
d4:0f:a2:de:62:8a:38:6f:45:33:65:00:5f:6b:0f:
40:12:65:1c:08:96:9c:ee:5e:2b:49:c6:8c:0f:16:
c9:dd:d7:98:88:ea:18:41:56:89:eb:64:75:75:19:
a0:64:81:84:47:80:b2:f0:63:ad:60:a4:bc:2a:d1:
f7:6e:c0:70:24:6c:50:d3:f4:70:8b:35:dc:e3:84:
49:3c:86:c6:69:b9:64:6c:5a:35:db:4e:d6:f2:2b:
99:ce:5e:32:9d:17:d1:23:a0:d2:ab:8c:7f:05:20:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9F:A6:67:E2:13:F6:F8:87:55:44:5F:49:47:9A:42:53:3B:79:3D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2p-mZ-IT9viHVURfSUeaQlM7eT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.228.0/23
82.153.241.0/24
89.213.172.0/23
Signature Algorithm: sha256WithRSAEncryption
33:be:af:c3:92:74:da:b2:a2:71:cf:60:b9:03:70:4d:1d:c1:
e0:8a:39:b1:fd:fd:28:e0:3e:46:84:a8:c2:02:e0:59:53:3a:
a0:5e:4d:3c:15:b1:56:7e:11:e0:be:85:79:16:17:d3:9f:c7:
a8:45:36:de:88:6b:cb:bd:22:78:0f:38:4a:bf:47:7d:65:30:
c5:57:9d:28:f5:5f:f0:8c:56:31:b7:83:f8:95:36:29:b2:47:
ca:61:ce:d3:d0:3f:8c:fd:b4:c8:f4:6d:e7:e8:4a:85:8c:3a:
1e:27:60:21:60:d0:e9:dd:c3:e8:26:69:35:f1:df:58:00:20:
54:fd:5d:03:2b:70:ab:e8:94:b2:8c:7b:99:17:a8:19:91:c8:
38:62:01:e2:7a:c8:1a:41:c8:29:2a:4d:8c:89:d5:91:f9:a0:
ac:4d:96:a1:b0:f6:ea:bc:1b:b0:56:06:f2:4d:e4:d4:4d:d2:
36:22:c5:b5:a6:f6:7b:b4:d5:02:47:ab:04:6d:cd:5a:fb:6a:
f5:0f:5e:40:5b:ce:a1:9a:bb:f4:a7:53:36:a9:74:c9:e9:78:
bd:ef:1e:90:05:9c:9d:31:c6:59:2e:af:ce:d2:53:89:5f:45:
e7:2c:c2:b5:5a:43:3d:59:1a:f7:9b:83:15:0a:73:2e:cf:82:
50:04:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org