Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6tIYq0P_vgQINqihRzxhcPnHA8A.roa
File: 6tIYq0P_vgQINqihRzxhcPnHA8A.roa (raw, json)
Hash identifier: iV+XqwtODfQLhpZrI+xnjgm3SzXYSoEd28+c8qU+vM4=
Subject key identifier: EA:D2:18:AB:43:FF:BE:04:08:36:A8:A1:47:3C:61:70:F9:C7:03:C0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AAC7DF501168CA90EB365FE7F27AC7475
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6tIYq0P_vgQINqihRzxhcPnHA8A.roa
Signing time: Tue 19 Sep 2023 08:10:50 +0000
ROA not before: Tue 19 Sep 2023 08:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.213.190.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.248.0/24 maxlen: 24
81.168.35.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.68.0/24 maxlen: 24
82.153.71.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
81.168.126.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
185.49.124.0/24 maxlen: 24
81.5.189.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 10:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:7d:f5:01:16:8c:a9:0e:b3:65:fe:7f:27:ac:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 19 08:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ead218ab43ffbe040836a8a1473c6170f9c703c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:56:2e:cc:33:24:1f:eb:be:46:fe:e9:56:
2e:af:d6:79:22:e9:c4:0f:0b:c3:81:79:f8:ed:cf:
f4:db:1a:62:16:e3:26:1f:3b:10:50:45:2a:70:40:
29:fc:1c:42:6f:63:e0:9c:85:b1:c2:11:2a:62:b0:
4d:eb:12:ab:04:cb:27:5a:42:1d:ef:35:16:98:20:
5c:58:1e:3d:c9:95:67:6e:f3:1b:3a:64:20:08:e5:
09:38:89:5f:71:a8:ee:98:28:6d:04:b5:17:9e:c0:
c6:8a:7c:63:7d:89:cb:ba:95:d5:a8:d8:38:e9:9e:
47:cd:53:0c:55:07:ef:40:66:e1:0d:9f:16:ad:ea:
83:4c:0f:2e:3a:98:67:21:06:72:f7:7e:98:ef:18:
94:18:53:5c:f2:72:0e:dd:ea:1f:a9:c9:c7:88:34:
f8:4d:d0:c4:26:6d:80:22:2c:4d:3e:2f:d5:56:7b:
2a:ee:a8:cc:0d:6f:79:83:a8:d2:96:4d:b3:cc:40:
90:86:ab:22:d6:e7:90:d4:0d:c9:8f:df:bb:a5:4c:
96:a2:22:7f:fe:09:e7:ed:37:45:ac:3d:ef:3b:44:
b9:5d:da:02:c0:57:10:aa:60:a9:e6:b5:0c:f5:b5:
12:83:9d:d7:8e:d4:23:3f:c4:3e:18:e8:d6:84:9b:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:18:AB:43:FF:BE:04:08:36:A8:A1:47:3C:61:70:F9:C7:03:C0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6tIYq0P_vgQINqihRzxhcPnHA8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
81.168.35.0/24
81.168.116.0/24
81.168.119.0-81.168.120.255
81.168.123.0/24
81.168.126.0/24
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.1.0/24
82.153.68.0/23
82.153.71.0-82.153.72.255
82.153.79.0/24
82.153.132.0/24
82.153.224.0/23
89.213.6.0/23
89.213.130.0/24
89.213.161.0/24
89.213.190.0/24
109.176.240.0/24
109.176.247.0/24
109.176.251.0/24
185.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e9:21:99:8c:26:b3:8b:c9:eb:aa:12:c8:19:ba:a8:51:61:
f6:e7:23:eb:c6:63:4a:ef:00:d2:bc:86:f8:8a:93:9e:3a:0a:
33:8e:25:f0:bd:3b:8f:11:c7:41:29:f8:bd:15:53:ef:3e:81:
e6:fe:ae:f5:0d:7e:73:65:eb:ab:26:58:b8:0e:59:87:2f:9d:
86:88:b3:9a:af:94:9c:57:9d:51:e6:fc:a1:7c:a9:f6:f9:f9:
70:84:18:ff:45:a7:c5:1d:92:ff:7c:8e:a5:91:f3:9f:11:79:
61:82:14:e0:6c:81:95:78:dc:78:0e:2e:71:d3:97:48:d7:81:
85:08:e3:21:64:e0:c0:d1:89:33:05:9d:d4:41:b8:47:64:fb:
dc:41:2f:de:fe:08:f8:ee:c7:68:93:5f:b7:8d:0c:3a:21:2e:
c7:36:8a:e9:5d:72:af:5c:ca:65:c2:18:a3:a8:23:0d:25:f5:
f3:4d:e2:76:da:ff:4d:2c:e7:bf:52:29:9e:30:ff:67:8c:e1:
c3:0d:6d:86:d8:25:fb:e1:9b:8e:b2:74:ef:cb:e5:76:94:2c:
97:17:8d:05:d1:48:fd:f2:fd:81:89:7b:64:93:f0:07:1f:59:
6a:ed:0c:0b:ec:b7:24:4e:ea:ca:00:da:29:9f:b9:ad:a1:68:
a2:93:39:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org