Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BAl8ZBEmn_5wNeyChQlTC9ZEgoU.roa
File: BAl8ZBEmn_5wNeyChQlTC9ZEgoU.roa (raw, json)
Hash identifier: 2Drs/x9X962XGKA60n++q/dtP7QJrMScARmQPM2ask8=
Subject key identifier: 04:09:7C:64:11:26:9F:FE:70:35:EC:82:85:09:53:0B:D6:44:82:85
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D9C7C1AC871BAAABBB5AA56EA48558D12
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BAl8ZBEmn_5wNeyChQlTC9ZEgoU.roa
Signing time: Mon 12 Feb 2024 08:43:15 +0000
ROA not before: Mon 12 Feb 2024 08:43:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 29 Mar 2024 16:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:7c:1a:c8:71:ba:aa:bb:b5:aa:56:ea:48:55:8d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 12 08:43:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04097c6411269ffe7035ec828509530bd6448285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:cc:da:e3:d0:34:ed:a9:91:d6:17:a4:2d:
eb:4e:e5:ea:5e:ec:fe:b8:c6:80:d2:34:4a:7b:a2:
8a:6a:89:d0:31:10:6d:97:2b:f8:bf:13:b9:84:f2:
3c:07:6f:de:11:e4:7c:26:2d:f7:0e:98:09:3b:be:
35:37:da:ce:18:c5:68:d9:4e:d9:60:21:b6:02:bc:
a1:61:86:f4:4f:5d:52:12:0b:44:c0:b1:5e:52:05:
60:3f:c6:4b:25:b4:41:c0:66:f2:fe:42:00:9b:87:
03:e9:52:cd:eb:2e:0e:88:54:2b:94:70:7c:ba:eb:
c9:13:14:03:f0:03:06:bb:89:ac:77:24:57:4e:90:
40:54:10:3e:5c:ef:99:a5:a3:77:85:a4:6a:98:31:
51:07:cc:4f:bb:85:38:31:ac:7a:c1:9f:7f:c2:6d:
de:f9:ca:0e:0b:2d:74:2d:23:48:ff:c4:4a:80:48:
7b:87:70:4f:d1:77:a6:33:59:ba:f6:3b:ee:6c:e4:
42:04:b9:ee:ab:87:2c:b9:48:0c:63:77:a2:99:d6:
f2:bb:49:7d:7e:9d:ce:63:ce:03:c4:ea:df:fd:45:
64:0f:c6:20:01:14:83:1f:11:0b:3f:40:84:2a:5b:
94:05:f6:83:78:70:e2:f7:81:4b:c6:ac:d1:1c:3c:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:7C:64:11:26:9F:FE:70:35:EC:82:85:09:53:0B:D6:44:82:85
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BAl8ZBEmn_5wNeyChQlTC9ZEgoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.174.0/23
82.153.208.0/22
Signature Algorithm: sha256WithRSAEncryption
92:01:26:38:b2:db:d6:d0:ec:9c:7a:65:ea:29:e7:2e:ff:54:
93:ea:dc:a2:a0:71:4a:3f:73:41:5a:c7:68:31:ca:37:07:93:
40:2d:35:36:4a:2a:70:24:d5:c8:21:b7:95:0c:d1:7f:ae:6a:
b6:da:96:00:4f:87:38:ea:c7:81:90:b5:51:21:eb:e5:93:41:
6c:2b:b7:3f:ad:fa:8c:0d:a2:ed:78:0d:80:b0:69:bb:a4:e7:
b8:f6:e3:94:b4:79:90:94:2c:ca:3d:f8:64:9f:3f:99:da:84:
4a:38:b3:53:99:69:8f:ae:a6:86:50:dd:0f:c4:68:93:89:e9:
3f:0c:cc:04:2d:ff:b5:d4:a9:99:cf:11:ad:d8:cd:90:4f:2a:
c4:94:03:d3:41:3e:e3:35:52:96:fb:4e:cd:ac:34:43:e1:82:
3e:e6:28:e0:d2:ba:d6:2e:4a:5b:db:06:9a:aa:12:7c:e7:e8:
4b:58:b2:11:67:b6:a7:fe:0a:59:2e:06:9b:f3:20:ea:63:7b:
73:73:e3:46:d5:58:32:2f:c7:c5:11:29:a3:9e:ba:8d:80:55:
92:51:09:28:52:84:02:b7:1e:c9:58:ac:57:65:1f:d0:94:b4:
cc:81:7e:ef:bb:79:5c:68:21:4a:98:49:2b:ac:27:12:a5:b1:
e5:86:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org