Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CNnbMtznqDEoZxpt52ALSbcCz6A.roa
File: CNnbMtznqDEoZxpt52ALSbcCz6A.roa (raw, json)
Hash identifier: pDhiWYmzAZ5O6DbJ5myndw6Sy/D6JXP9lA6dCP3mYIU=
Subject key identifier: 08:D9:DB:32:DC:E7:A8:31:28:67:1A:6D:E7:60:0B:49:B7:02:CF:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018DF4385445208DBD5F2866450235858903
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CNnbMtznqDEoZxpt52ALSbcCz6A.roa
Signing time: Thu 29 Feb 2024 09:35:48 +0000
ROA not before: Thu 29 Feb 2024 09:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 82.153.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 14:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:38:54:45:20:8d:bd:5f:28:66:45:02:35:85:89:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 29 09:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d9db32dce7a83128671a6de7600b49b702cfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:61:90:46:2a:01:0f:f8:7f:8d:d9:4d:d8:
3c:42:66:12:5f:1f:57:ce:63:b3:06:2f:20:8a:5e:
49:89:49:a5:21:92:de:ee:fb:c4:f0:1e:d7:20:46:
bf:f1:e7:23:f6:63:a5:f2:0e:4e:16:e2:83:a4:97:
cf:86:00:2d:a8:06:23:1a:4b:34:c4:09:84:95:8d:
07:9f:2c:b1:df:10:13:48:c9:f5:d4:f7:52:d7:9d:
a2:5f:1f:44:39:61:c0:61:fa:74:a3:45:66:77:0d:
db:07:37:b2:4c:e4:87:94:ca:a0:70:d5:cc:8d:e5:
33:ae:70:65:1d:a8:3c:13:cc:94:35:67:55:e4:64:
d4:19:f4:a4:05:33:61:17:4d:99:e3:b6:a9:44:73:
aa:73:c0:5c:96:4b:ac:8d:04:e1:cf:38:0b:c2:46:
df:dc:c1:5d:c1:b9:4c:be:f6:17:f9:e1:09:9c:70:
02:2c:37:d2:86:02:29:94:2a:ab:dc:89:2c:21:21:
b0:19:a3:04:ec:94:3b:ba:66:a8:18:47:69:27:3c:
1a:b4:1b:9c:f5:73:0a:df:a3:a4:f4:83:0a:b3:b5:
65:e8:60:5f:7a:cc:67:da:8c:5f:fe:ba:5b:a8:b7:
8c:22:5a:ff:a9:79:de:9c:97:05:81:7b:6f:a6:ac:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:DB:32:DC:E7:A8:31:28:67:1A:6D:E7:60:0B:49:B7:02:CF:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CNnbMtznqDEoZxpt52ALSbcCz6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:42:f3:6e:8f:b2:dd:5a:3e:33:81:0e:07:3f:89:88:1c:59:
2c:7d:3a:f0:c6:1d:e2:87:b2:15:d9:4f:e8:ac:1f:10:0a:19:
6e:18:fb:aa:f3:72:c0:14:44:a8:4f:ff:d8:65:8e:bb:5b:fb:
fb:d3:ee:9f:2d:23:97:f8:f3:e3:1e:52:d3:bc:17:de:df:0b:
79:8b:fc:8b:3a:b9:5a:11:1e:0e:20:97:31:59:08:d1:5a:87:
4a:00:64:b2:19:ce:85:d3:58:42:71:85:1c:52:b5:27:7a:12:
65:ed:86:1f:bf:07:79:69:19:8e:d9:0f:35:e1:2a:31:d4:3a:
d9:70:0e:6a:f8:fa:3a:d5:37:e4:01:eb:7b:3d:cc:ed:4d:6a:
97:fd:2e:95:6c:22:10:ce:63:bf:10:c7:ad:8a:67:58:8a:ea:
22:5a:48:25:a0:74:68:aa:7d:6d:fe:6d:92:6c:5e:1c:dd:59:
78:11:6e:5a:d7:87:cb:2f:42:23:f1:45:69:f5:0d:46:38:66:
46:82:7f:3c:f8:21:51:3b:c1:4c:82:6b:6f:62:4e:0c:4a:88:
52:d4:06:2c:f6:23:86:ac:cc:dc:75:d0:4b:d1:a4:dc:4d:e5:
16:92:40:b0:eb:d8:11:c2:4a:a7:50:d0:a8:f8:b1:5a:bc:8e:
c5:fe:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org