Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CgsyTC89Vh1QSubbu6wZ2ngnYbc.roa
File: CgsyTC89Vh1QSubbu6wZ2ngnYbc.roa (raw, json)
Hash identifier: kBdFmd/9XuD/WvfEXQHy2NDUbig3cv9rPC0B6cfwfFc=
Subject key identifier: 0A:0B:32:4C:2F:3D:56:1D:50:4A:E6:DB:BB:AC:19:DA:78:27:61:B7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C305CDE8FF22EBE7C908FFF18CEC42BAD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CgsyTC89Vh1QSubbu6wZ2ngnYbc.roa
Signing time: Sun 03 Dec 2023 15:47:21 +0000
ROA not before: Sun 03 Dec 2023 15:47:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 82.153.228.0/23 maxlen: 23
89.213.173.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.241.0/24 maxlen: 24
82.153.70.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 08:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:5c:de:8f:f2:2e:be:7c:90:8f:ff:18:ce:c4:2b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 3 15:47:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a0b324c2f3d561d504ae6dbbbac19da782761b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:c1:7c:e4:fd:83:31:ab:92:cc:6a:c1:d6:
16:0f:75:c3:20:42:df:a2:73:9a:d4:ea:d1:1b:44:
36:c5:b1:56:50:42:37:9b:01:78:7b:26:82:e4:74:
8e:28:f7:c1:98:1b:3e:60:c0:b1:23:47:62:3c:3f:
b0:cf:78:9a:df:f4:1d:03:68:75:d7:d1:86:23:7b:
96:b7:66:f6:d7:47:8f:6e:b1:9a:a0:5f:9f:13:c3:
2f:b7:f4:04:7a:01:42:e7:22:fb:4e:bc:72:34:01:
0a:03:23:4d:ee:62:f4:81:94:71:49:72:b5:bb:bb:
d3:65:6f:cb:a2:f1:c8:32:20:00:fa:6b:20:54:65:
09:d1:ab:36:1b:4a:59:77:8e:40:94:d9:23:fa:67:
c9:46:f3:d1:ef:d0:a8:3e:ce:d9:d6:19:a7:0e:78:
20:84:ff:74:b2:ae:e3:a1:15:67:24:e2:b5:f9:e2:
7a:aa:39:6f:24:cb:05:d0:85:0f:f7:44:62:a5:33:
af:e9:d2:a6:e3:5a:c8:11:87:d7:91:b0:4b:3c:ac:
41:83:ae:0f:3e:89:d4:8e:0e:97:5b:da:88:8a:f9:
ca:fe:f0:bf:76:f7:8c:c8:5c:89:10:68:a0:63:18:
b9:dd:24:ee:db:9e:1b:eb:bd:8d:06:a3:b1:22:63:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:32:4C:2F:3D:56:1D:50:4A:E6:DB:BB:AC:19:DA:78:27:61:B7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CgsyTC89Vh1QSubbu6wZ2ngnYbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.70.0/24
82.153.228.0/23
82.153.241.0/24
89.213.172.0/23
Signature Algorithm: sha256WithRSAEncryption
62:05:9a:0d:1d:a1:3b:34:fe:f6:ae:1c:45:d0:7a:42:e5:b4:
22:b4:07:a3:0b:70:b6:e3:ac:3a:51:75:f0:1c:8a:81:06:fe:
20:a7:cd:6e:14:c3:88:f5:de:d7:23:2d:95:32:70:b1:20:2c:
6c:3f:70:54:69:22:79:b5:3f:4b:82:9c:9b:7f:77:6e:eb:cf:
eb:f4:02:77:91:18:87:f5:9d:f7:fd:d9:4f:cb:24:e4:bc:87:
ac:c7:9d:46:7e:6f:02:60:c3:15:80:09:b5:b8:f9:8b:6b:69:
d7:1c:d6:91:1a:9e:08:f9:23:82:cb:e1:10:15:43:22:df:19:
b4:79:2b:72:0e:7a:15:b8:63:8f:72:29:ac:81:da:56:1b:ef:
71:a6:d5:44:f7:57:b4:c5:03:d3:7c:05:8a:9d:a8:83:14:d9:
ff:55:f1:5d:86:e8:82:60:dd:9d:f4:c2:35:89:c5:ce:33:50:
c9:35:ea:a1:cb:32:05:72:f6:58:8c:43:df:05:31:8f:4f:e2:
8d:ec:c6:a6:ff:b6:9e:11:0f:96:cf:89:43:68:ab:f8:cc:46:
4c:d8:25:60:5b:87:8f:51:df:6a:b3:56:9e:1e:ac:8b:97:01:
42:f0:3c:2b:73:a1:34:0b:1d:bd:c0:dc:5a:1d:4d:b6:44:34:
0c:67:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org