Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FVsmR6897j28JdN8gMlA8nSjrWo.roa
File: FVsmR6897j28JdN8gMlA8nSjrWo.roa (raw, json)
Hash identifier: 1AS6Sr78upqi4s8pQhJ2iepCv3+MEvCdR+aHTgIudoQ=
Subject key identifier: 15:5B:26:47:AF:3D:EE:3D:BC:25:D3:7C:80:C9:40:F2:74:A3:AD:6A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B100410FDE39E1B74CE592D18C6227D4B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FVsmR6897j28JdN8gMlA8nSjrWo.roa
Signing time: Sun 08 Oct 2023 15:59:43 +0000
ROA not before: Sun 08 Oct 2023 15:59:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.213.176.0/22 maxlen: 24
89.213.180.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.66.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 08:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:04:10:fd:e3:9e:1b:74:ce:59:2d:18:c6:22:7d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 8 15:59:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155b2647af3dee3dbc25d37c80c940f274a3ad6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:a9:78:74:95:69:6b:d4:af:14:e0:07:a4:
61:e7:fd:02:ac:ce:d2:61:a2:45:3c:d2:a4:b3:2a:
eb:0f:cf:9e:7c:ec:23:0b:70:26:c2:55:b0:c3:d1:
6a:14:e3:47:ce:dc:4b:c9:e0:32:47:e5:ab:8a:74:
06:2b:1a:89:b2:3b:7e:09:2e:fe:0c:83:37:07:d2:
ac:2c:c8:10:d1:93:3a:0b:2b:05:99:b2:0d:80:e9:
cd:f3:82:2d:e9:81:ef:80:18:28:bf:e1:d8:b5:ad:
ae:70:a4:72:fa:78:6e:ec:a2:f3:6f:8f:67:76:e2:
70:81:54:9e:12:44:60:e2:6f:9f:4b:37:12:48:74:
27:f1:5c:fd:43:e7:d7:80:e4:fb:0e:2a:e9:7f:cc:
74:37:b8:31:f4:64:f2:c2:75:39:14:14:18:13:44:
a3:d8:7d:28:19:15:c1:8b:f7:57:b7:0c:7e:f1:fe:
60:44:a6:8c:e9:4c:f6:c5:e4:f8:3d:a8:c0:9d:dc:
fe:16:f1:28:bb:8f:6c:7d:1b:05:b0:a6:f2:98:bd:
09:c7:33:a9:04:c0:75:7a:59:cf:8d:9c:b9:8c:e2:
19:1b:bc:1a:a3:60:4c:32:0a:f1:49:d0:75:58:d6:
7f:ab:4c:ae:b2:6d:03:92:45:78:ec:bd:86:a8:06:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5B:26:47:AF:3D:EE:3D:BC:25:D3:7C:80:C9:40:F2:74:A3:AD:6A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FVsmR6897j28JdN8gMlA8nSjrWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.153.66.0/24
82.153.136.0/22
89.213.148.0-89.213.155.255
89.213.167.0/24
89.213.176.0/21
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:6b:da:3e:b2:e9:a3:2a:70:be:8c:ed:14:91:70:f4:54:a3:
2d:0d:87:d6:08:42:50:52:e4:61:84:67:71:f4:3b:f2:b7:ee:
21:c2:c6:61:7d:28:5d:8c:4f:c6:ad:91:d3:08:be:0b:3a:0f:
89:8d:8e:08:00:d6:a2:90:16:eb:87:ea:f2:80:6a:01:3e:d9:
2b:1d:c8:71:bf:a3:5c:8c:93:a0:46:cf:4c:a4:ab:81:ef:8f:
69:59:12:35:4f:16:ba:9e:26:fe:57:7a:37:0d:f9:dc:02:d4:
eb:49:04:2e:58:27:67:bc:2c:ef:d3:1a:84:d3:fb:9e:e6:fb:
2a:ff:4f:c7:e9:7d:66:1e:4b:06:40:3b:5f:0f:cc:48:2b:b3:
f6:54:b5:f6:b5:f3:3a:70:eb:e0:e0:c2:75:d0:be:63:4a:67:
90:2d:bf:04:8e:3c:5e:31:03:54:17:d3:38:3d:9a:4c:e9:5e:
68:ac:60:6e:85:13:09:5b:be:d9:f3:5a:f0:d7:3d:64:84:0e:
5a:f0:8a:64:38:f7:eb:65:8f:c4:ba:82:d2:55:56:7b:e9:6f:
7e:2d:63:82:0a:38:18:06:1f:14:bd:ac:ef:a0:d9:ac:93:7a:
57:d4:c6:a5:74:9a:a3:a4:dd:ca:aa:32:3c:32:3a:ba:b4:3a:
ea:9c:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org