Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4v8mFk7jYyD7H5AOh-s_5yJglOc.roa
File: 4v8mFk7jYyD7H5AOh-s_5yJglOc.roa (raw, json)
Hash identifier: SUlWrPisjnA3VYvfLTCA7w49M5HK/j5px+1OTrkZwAk=
Subject key identifier: E2:FF:26:16:4E:E3:63:20:FB:1F:90:0E:87:EB:3F:E7:22:60:94:E7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FA9775BCED28F67C4ED20C3245BD817CD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4v8mFk7jYyD7H5AOh-s_5yJglOc.roa
Signing time: Fri 24 May 2024 07:18:42 +0000
ROA not before: Fri 24 May 2024 07:18:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.98.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 07:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a9:77:5b:ce:d2:8f:67:c4:ed:20:c3:24:5b:d8:17:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 24 07:18:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2ff26164ee36320fb1f900e87eb3fe7226094e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:7c:6c:2a:b3:d2:f8:d7:61:68:a3:75:d4:
e1:a7:2a:b5:64:0d:98:c8:4d:5c:11:44:ae:db:e4:
55:52:31:a3:2d:ab:37:76:3d:a3:00:a9:a5:ef:42:
da:33:03:19:82:28:48:1e:f8:77:ee:7d:97:dd:5b:
84:39:e5:a3:a9:90:03:30:2a:e9:04:d0:0d:8a:20:
d1:86:70:14:73:9f:35:8e:41:c8:98:4c:28:8a:27:
9b:b6:d7:d6:b2:9a:66:b1:45:e0:72:6e:31:3a:54:
39:4f:17:8a:d2:95:b1:31:3a:b4:6f:cc:9b:dd:3f:
14:de:58:9e:00:08:64:8a:fc:f0:3c:98:56:21:a9:
86:05:5e:cd:60:5a:df:e5:fb:65:c4:53:1e:32:9e:
49:47:49:a2:e7:f7:a2:b4:f8:61:01:39:66:2d:66:
ee:49:d5:81:82:2d:c4:f1:52:e6:7a:8f:13:ac:90:
ab:05:fd:46:8c:14:49:bf:a2:28:f5:a0:d3:59:30:
ad:ed:ee:a3:dd:ac:27:1e:8f:06:8a:6a:9d:84:13:
98:52:8f:a1:58:c3:2d:4c:03:ea:0e:b7:d0:a4:77:
c7:92:d2:18:d8:f6:44:5c:ab:1c:90:9d:db:9c:c1:
ca:54:79:f4:5c:4a:5a:38:e9:92:d3:96:69:24:e1:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FF:26:16:4E:E3:63:20:FB:1F:90:0E:87:EB:3F:E7:22:60:94:E7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4v8mFk7jYyD7H5AOh-s_5yJglOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.98.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.232.0/21
109.176.16.0/21
185.49.126.0/23
194.105.80.0/20
213.130.130.0/24
213.130.149.0/24
213.218.210.0/23
213.218.231.0/24
Signature Algorithm: sha256WithRSAEncryption
06:74:90:b1:4f:e7:0a:e8:b4:38:6e:1e:17:1a:71:58:a0:fa:
0f:a0:c5:d4:81:f1:80:6c:b3:4c:ef:e0:0a:df:35:a3:3c:f0:
0f:25:3e:18:40:40:ff:e8:a4:00:38:e7:36:d8:66:ad:b6:a3:
98:ec:1e:a0:2e:85:73:25:93:18:24:16:1d:3b:0b:14:82:8a:
76:ce:53:43:d0:85:66:58:19:99:c3:5b:ff:f7:ef:52:53:4a:
9e:ae:08:53:1a:ea:fb:94:bc:e0:20:cb:f0:08:c7:e7:87:15:
f0:d2:e1:75:42:ee:ba:f1:5c:c3:67:f8:56:7a:eb:7f:31:4e:
a0:84:21:6d:79:a5:9f:1f:24:e4:a9:5d:b1:a1:87:ad:c2:e9:
48:49:ae:71:66:7f:a2:5f:e3:79:ae:a7:ee:15:8f:02:b0:7e:
48:1c:91:3f:1b:e0:a3:80:84:7f:20:c4:63:63:82:69:c4:f6:
ba:24:87:98:72:27:ff:72:40:ff:88:14:2b:4c:66:16:76:74:
0b:74:b4:67:7c:17:5e:5a:ba:62:62:d7:e5:a7:fd:f5:c5:fe:
fd:89:37:58:77:0d:e9:7c:0d:e8:66:69:e0:94:a4:ef:de:d5:
e8:01:d3:dc:a8:7c:04:13:24:79:e6:00:56:07:65:47:ef:b5:
4a:60:da:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org