Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5GboNskRkfh7Ocm74iG6ghLrpfs.roa
File: 5GboNskRkfh7Ocm74iG6ghLrpfs.roa (raw, json)
Hash identifier: q+8VtCr5GO3GALLedvcOPvqUa80VYFKPan1XnZGyoY8=
Subject key identifier: E4:66:E8:36:C9:11:91:F8:7B:39:C9:BB:E2:21:BA:82:12:EB:A5:FB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3494D9981EF7FA448108020394D64C8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5GboNskRkfh7Ocm74iG6ghLrpfs.roa
Signing time: Mon 01 Jan 2024 04:30:10 +0000
ROA not before: Mon 01 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 82.153.228.0/23 maxlen: 23
82.152.176.0/23 maxlen: 23
82.153.241.0/24 maxlen: 24
82.153.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 17:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4d:99:81:ef:7f:a4:48:10:80:20:39:4d:64:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e466e836c91191f87b39c9bbe221ba8212eba5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:0b:70:53:c8:f4:f7:ee:df:cf:89:4f:dd:
94:65:73:19:90:58:52:9a:62:c0:aa:f1:cb:1a:58:
ba:ca:dd:7d:e5:79:d8:92:05:58:e1:d7:a3:7e:1d:
18:46:4f:fb:0b:53:b4:ee:d2:11:0a:d3:09:8c:d8:
16:1c:2b:42:c6:86:77:68:ca:11:62:dc:6b:7f:97:
c1:0d:8c:88:02:a2:c2:31:3a:b2:98:6a:db:a7:37:
3f:6f:d6:f7:34:ee:92:17:b2:3a:f8:c6:cf:ce:af:
1f:9d:43:da:97:8d:1e:04:38:6f:96:93:25:bb:54:
ac:03:1e:5e:b7:e3:56:04:44:1b:e6:7e:c9:c9:a6:
6d:9b:fc:02:77:a6:0c:40:c5:70:11:50:42:ea:e1:
16:ba:2c:0d:f8:0a:bc:1a:e6:42:e1:f7:d8:94:e7:
b0:55:18:62:f5:73:26:2b:d7:39:85:9c:13:f4:40:
93:e6:ac:8a:86:a4:24:e9:e7:d7:9e:74:ed:da:c5:
3a:15:61:fb:69:0b:19:68:94:59:2a:77:ed:23:db:
a4:a2:dd:50:ce:26:6a:55:d5:5d:8e:d1:df:0b:b3:
1a:dc:ed:f3:a3:71:70:d2:dd:0f:c0:a6:65:7e:5f:
50:1d:37:7b:33:c4:d2:49:b3:db:d5:a0:1a:b4:da:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:66:E8:36:C9:11:91:F8:7B:39:C9:BB:E2:21:BA:82:12:EB:A5:FB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5GboNskRkfh7Ocm74iG6ghLrpfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.70.0/24
82.153.228.0/23
82.153.241.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f1:91:7f:10:90:b7:39:d6:5a:ca:5d:eb:76:db:86:a3:4b:
0e:82:c7:8a:b4:99:27:df:07:b9:14:a0:77:1b:da:2e:bc:d3:
22:5a:70:4f:df:2f:f2:0b:02:a6:9e:45:dd:39:7f:ca:38:7f:
51:fd:03:43:f8:a0:0d:3b:10:03:c7:9f:ad:ec:43:d2:f0:e2:
0c:a5:53:9e:50:bf:12:b0:78:e1:c5:62:9c:66:0f:ec:09:92:
21:0e:1d:62:bc:68:6f:c4:e1:c2:b2:bd:fb:f3:24:ca:42:12:
31:f0:b9:ef:d3:f7:70:f5:21:e3:04:bf:1a:c4:a4:06:4a:16:
18:8a:5a:15:01:34:5c:3a:6f:bb:8f:12:7d:c5:ee:6f:7b:91:
97:d8:b4:a3:f8:c9:f2:59:95:80:4e:1d:86:3a:74:1d:3b:f5:
70:5d:e7:09:c4:62:37:77:94:cf:f0:39:e9:a7:2c:9b:53:ae:
71:b8:2b:14:af:39:9a:47:07:f4:58:24:00:32:10:e0:66:b0:
8a:18:69:fb:4c:bd:a0:68:56:be:0f:25:ab:66:23:c8:de:f4:
42:6c:a0:74:6e:18:94:13:5a:a4:10:d6:67:44:2f:12:30:b4:
6b:9e:6c:dd:82:16:8b:24:da:2b:fb:69:46:12:0d:71:92:ea:
57:73:86:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org