Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5R_mhly1KOafd77nuaHF-I10Mh8.roa
File: 5R_mhly1KOafd77nuaHF-I10Mh8.roa (raw, json)
Hash identifier: kqN1k7m7j/g8kLf5nJjv3e1cfLkUaxdwvIcfT2y77nI=
Subject key identifier: E5:1F:E6:86:5C:B5:28:E6:9F:77:BE:E7:B9:A1:C5:F8:8D:74:32:1F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0186118F006772B690FB4A8006335E1140E5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5R_mhly1KOafd77nuaHF-I10Mh8.roa
Signing time: Thu 02 Feb 2023 09:57:09 +0000
ROA not before: Thu 02 Feb 2023 09:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 82.153.220.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 11:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:8f:00:67:72:b6:90:fb:4a:80:06:33:5e:11:40:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 2 09:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e51fe6865cb528e69f77bee7b9a1c5f88d74321f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:3b:25:67:ee:c4:50:c7:1e:12:43:28:7b:
75:6d:eb:be:72:5a:53:23:06:01:30:2e:34:7c:94:
f2:fd:e1:6e:1c:bd:00:49:90:1d:25:7f:f9:be:51:
59:87:48:12:31:e4:6c:d2:7b:da:43:cc:fe:94:23:
8e:c0:32:99:19:ff:1c:29:36:ab:95:ae:11:25:93:
bd:09:77:40:b4:e9:84:08:09:aa:3a:44:21:f7:15:
1d:49:7a:65:17:11:df:08:33:cd:da:75:61:42:d8:
91:9b:fc:58:82:40:a4:91:00:2f:bc:80:ef:c8:52:
e3:d0:89:ba:3d:a7:42:4b:42:0b:cd:76:f6:3e:8c:
f7:c1:56:72:5d:da:ac:d5:85:42:cc:2e:76:78:dc:
4f:0b:2d:41:f9:08:da:e5:30:94:a2:a8:84:23:be:
1c:e2:e4:f4:02:b2:57:ba:cb:de:65:d8:6c:fe:6b:
85:3b:a9:07:ed:48:2c:39:dc:7d:d2:6f:51:0c:5c:
c1:e3:e9:42:14:14:de:24:42:43:68:dc:c3:1d:c7:
83:4d:12:f7:e8:cf:2d:17:3d:a4:87:32:aa:a5:47:
a9:d6:61:5a:2d:e0:25:0e:f9:05:8f:d7:35:85:97:
79:33:e0:2e:41:6f:f1:eb:76:f0:a4:56:af:21:0b:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1F:E6:86:5C:B5:28:E6:9F:77:BE:E7:B9:A1:C5:F8:8D:74:32:1F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5R_mhly1KOafd77nuaHF-I10Mh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.220.0/24
82.153.223.0/24
Signature Algorithm: sha256WithRSAEncryption
44:35:2e:a7:08:53:dc:56:10:d6:75:df:54:54:29:2a:3f:46:
f0:41:6d:e5:8e:af:7e:d2:69:4d:99:4d:dc:6d:e0:6b:70:1a:
da:0e:58:b0:1e:59:1a:10:0d:f5:b3:9a:d6:41:80:58:86:a9:
6c:a1:d1:1a:f4:78:e5:83:80:a9:51:74:31:7f:20:dc:1f:10:
fe:9b:60:19:3e:1d:9d:a4:53:4f:69:71:ed:0d:4e:54:73:f3:
8f:a2:33:b5:1b:3e:fb:35:1c:45:45:1e:03:2d:32:4c:f4:16:
be:2f:fb:ff:ba:35:5e:99:87:8e:52:17:78:cf:a3:bf:0a:09:
d0:43:80:6f:da:7e:53:d1:29:41:45:06:bd:76:49:73:c1:b4:
10:95:e4:88:55:ae:b5:de:b5:db:1f:28:3a:16:ae:d6:32:6e:
e3:36:8b:eb:3d:d3:50:88:78:a0:24:06:1f:65:13:03:7a:d1:
25:07:21:38:48:5c:77:d9:3b:01:85:01:bc:26:e6:42:5f:71:
0d:3b:4d:db:64:86:0c:e4:33:40:46:a4:62:1f:47:5d:25:79:
91:dd:dc:6d:f7:79:e2:85:75:ad:70:6d:70:2f:ad:58:f7:c0:
2c:03:39:00:0b:1f:82:d5:de:4b:b3:ef:22:ef:e8:20:3a:c6:
ac:d2:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org