Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6aW0wCntEtPdZvUH6d72pDavjBw.roa
File: 6aW0wCntEtPdZvUH6d72pDavjBw.roa (raw, json)
Hash identifier: qsPPVjTFCP7jNxlmZHRfahIQSJ2zFjqGl+PVZ3fbz9I=
Subject key identifier: E9:A5:B4:C0:29:ED:12:D3:DD:66:F5:07:E9:DE:F6:A4:36:AF:8C:1C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0188DE8413E4515AFDBF3EB2A5D3F30FFE67
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6aW0wCntEtPdZvUH6d72pDavjBw.roa
Signing time: Wed 21 Jun 2023 15:12:57 +0000
ROA not before: Wed 21 Jun 2023 15:12:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12912
IP address blocks: 82.153.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:84:13:e4:51:5a:fd:bf:3e:b2:a5:d3:f3:0f:fe:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 21 15:12:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9a5b4c029ed12d3dd66f507e9def6a436af8c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:6e:d1:34:93:24:71:c4:f0:64:a4:96:35:
f2:4a:a2:4a:3e:65:ec:80:7a:6f:64:22:05:87:c0:
ef:49:06:3d:ba:fd:6e:54:8a:cd:d0:c5:ae:c4:78:
eb:78:f3:6e:a6:87:84:e3:d6:cd:a1:12:7e:be:50:
11:a0:09:d0:06:a5:15:cb:2c:57:5f:50:3c:b5:4a:
83:2f:90:f9:9a:11:59:9d:d8:89:3a:83:67:f0:93:
cb:bf:ea:53:a0:e9:ad:22:a6:b7:b6:eb:34:5f:e7:
93:08:96:bb:49:2c:db:36:0c:a7:46:73:a2:5e:19:
f3:75:99:bf:e9:c8:30:a3:2f:37:16:f6:b0:ee:20:
5c:a5:48:07:a9:17:96:7f:56:eb:ae:06:3e:61:d0:
14:46:fd:c3:bc:dc:6d:9a:bd:e0:81:03:aa:7d:5b:
71:71:7e:ca:53:69:3a:e3:2f:6b:4d:d2:f3:97:db:
0f:88:64:d0:4d:93:41:7c:e0:48:c6:da:16:6e:a3:
cc:f6:8d:2c:35:46:c6:49:97:f6:64:76:08:4e:d6:
bf:97:7f:22:78:74:a8:be:ea:e0:90:f5:f0:f2:71:
66:7e:cc:68:ad:e7:60:c6:f3:3a:ae:5d:74:b6:ca:
3a:e7:e6:ff:7d:b5:97:de:dd:96:b7:c7:80:dd:2d:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:B4:C0:29:ED:12:D3:DD:66:F5:07:E9:DE:F6:A4:36:AF:8C:1C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6aW0wCntEtPdZvUH6d72pDavjBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.50.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c0:e6:c6:31:23:fc:07:6a:7f:37:0d:f1:18:96:9d:23:7f:
a5:9e:8a:04:69:ef:51:f3:98:47:65:86:60:ba:25:40:fd:c7:
a6:28:a7:71:d1:14:55:ba:4d:4d:14:50:6a:fe:1e:93:21:c5:
a2:d2:bb:7e:24:8b:75:3c:a5:ea:f6:54:d7:62:53:cb:f4:ef:
17:5f:9e:e3:2a:7e:8e:6d:2c:9c:50:9d:6f:dd:8d:27:32:4c:
ca:3d:6c:14:95:eb:a7:0d:31:98:b2:21:d4:15:99:01:7f:b3:
02:d3:4c:46:7b:ed:8d:5b:61:f0:48:6d:9e:7b:79:8e:cd:90:
61:91:d0:9b:76:5a:98:e9:00:96:54:2b:dc:2b:93:95:d9:91:
70:29:85:c3:2a:8f:00:e1:a4:88:0b:46:92:ec:43:28:97:43:
85:6a:56:c5:ff:48:8b:3e:df:e5:e4:41:e2:ee:0f:ea:d1:c5:
3a:7d:f8:59:69:e0:13:cb:d8:08:84:7b:16:d1:fd:81:c3:a3:
02:2f:2d:a7:18:52:15:b9:50:0b:24:11:e3:f1:76:ae:64:ca:
90:c6:50:4c:f4:2b:8a:c7:b8:02:96:9a:49:e0:77:96:c9:ac:
12:59:83:88:c7:e0:53:23:51:b6:27:66:b6:d8:24:d4:dd:c5:
14:84:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:20 2024 by rpki-client on console-ams.rpki-client.org