Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/A9A3AerspTm7fp-te4jtS9R2oP8.roa
File: A9A3AerspTm7fp-te4jtS9R2oP8.roa (raw, json)
Hash identifier: ZoOp5S/N7rsWmX6ILmmyV0vICaHXPKTXHoZ2YMkXZ7I=
Subject key identifier: 03:D0:37:01:EA:EC:A5:39:BB:7E:9F:AD:7B:88:ED:4B:D4:76:A0:FF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018ED13C3340A63CAADD6E422947AAD18CD0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/A9A3AerspTm7fp-te4jtS9R2oP8.roa
Signing time: Fri 12 Apr 2024 07:36:07 +0000
ROA not before: Fri 12 Apr 2024 07:36:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197737
IP address blocks: 79.99.76.0/24 maxlen: 24
89.213.97.0/24 maxlen: 24
213.210.39.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
217.145.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 07:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:3c:33:40:a6:3c:aa:dd:6e:42:29:47:aa:d1:8c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 12 07:36:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03d03701eaeca539bb7e9fad7b88ed4bd476a0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:8f:87:70:f1:ed:aa:e5:17:11:e4:92:d9:
fa:c0:ac:f2:21:5b:9d:42:dd:e2:69:62:e3:3e:8a:
35:ae:f7:a3:27:e9:04:40:82:77:13:50:03:f5:5a:
97:35:6b:9a:43:7c:00:d7:76:29:ff:c4:89:80:00:
aa:1a:8b:58:f8:c8:2c:25:2c:3b:78:ce:e9:90:e6:
85:8b:60:e8:e7:c5:79:8e:74:47:48:dc:e1:84:2a:
bb:3f:21:c2:af:11:01:56:05:f4:e1:a3:fa:66:0e:
0e:d6:ee:59:59:0d:d1:64:7b:92:16:24:11:42:44:
c8:08:53:89:1b:3f:06:91:f3:09:c1:29:1d:8c:07:
25:c6:55:31:a1:ae:93:1d:4e:e1:9a:57:f6:d9:72:
2e:6f:ae:1b:d0:b5:ba:2e:ab:b3:6a:19:c4:46:ea:
0d:d7:e7:d2:be:3a:ba:b1:48:7d:96:29:0c:cc:a6:
53:47:55:ea:4b:b0:ee:39:a2:9a:17:e0:65:eb:19:
a5:9c:7d:e0:87:c4:c1:c3:c7:72:d0:c0:29:e3:83:
ec:a0:f9:4a:4a:80:02:ef:c5:df:76:bf:2f:2c:c1:
93:d6:c3:92:ca:ce:00:34:49:dd:dc:0a:cd:90:08:
dd:b2:40:23:d0:4a:f2:0d:cc:61:43:a5:f7:4e:d8:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:37:01:EA:EC:A5:39:BB:7E:9F:AD:7B:88:ED:4B:D4:76:A0:FF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/A9A3AerspTm7fp-te4jtS9R2oP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.76.0/24
89.213.97.0/24
213.210.39.0/24
217.145.68.0/23
Signature Algorithm: sha256WithRSAEncryption
62:e8:67:1e:1f:66:d2:87:e7:35:31:83:55:82:13:91:f5:cf:
56:4a:5d:84:8e:f9:3d:29:40:2b:1c:13:9b:9a:d3:36:b8:03:
bf:46:4d:a8:a0:ad:e7:a1:01:80:af:f7:1e:25:60:ee:84:f7:
06:a1:34:ad:8c:d7:bd:4e:15:46:4e:f8:57:cf:f6:7f:36:2b:
31:eb:6e:38:19:03:27:3a:1b:bf:2d:8d:39:9f:d4:7a:60:39:
bd:69:f4:78:aa:25:ec:29:c2:01:ee:ba:d1:c2:d1:06:a4:92:
49:ac:06:9a:c6:6b:75:fc:94:da:48:91:8b:04:a8:55:b3:60:
59:6e:bc:22:47:18:7b:a6:bc:0c:ca:11:a2:72:74:1e:ba:24:
4d:45:fb:81:31:5f:81:0e:01:4a:8e:58:c8:0d:14:99:0f:9d:
73:fb:bf:39:d9:95:a8:c1:49:82:60:6c:e9:c3:b9:bc:02:cb:
08:96:50:97:28:c5:35:bc:b6:cb:66:ed:4b:97:1e:82:d6:cc:
28:69:a8:79:70:fb:21:50:d6:10:4d:9e:80:d5:9a:cc:36:2d:
7d:b9:4a:c9:d6:50:ec:bc:89:f0:e8:3a:80:13:40:85:6c:33:
40:e8:c3:9b:97:05:34:37:f5:fa:66:05:49:b9:eb:07:36:7f:
74:6c:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org