Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FyAuALu09Phvsd8TgIkZBzklK8g.roa
File: FyAuALu09Phvsd8TgIkZBzklK8g.roa (raw, json)
Hash identifier: dLM+gRE6wXTY9qc9d6B1UaBlCebOGwddWWdLOPOZq00=
Subject key identifier: 17:20:2E:00:BB:B4:F4:F8:6F:B1:DF:13:80:89:19:07:39:25:2B:C8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C5D4D2769A7EF6F8C6B5A091EE2EF2064
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FyAuALu09Phvsd8TgIkZBzklK8g.roa
Signing time: Tue 12 Dec 2023 09:13:06 +0000
ROA not before: Tue 12 Dec 2023 09:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.213.180.0/22 maxlen: 24
89.213.182.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
82.153.246.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 00:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:4d:27:69:a7:ef:6f:8c:6b:5a:09:1e:e2:ef:20:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 12 09:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17202e00bbb4f4f86fb1df138089190739252bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:4d:ce:9d:97:b8:f0:17:f7:88:87:48:ab:
9f:0c:9e:c9:a9:f0:0f:1b:3d:02:99:18:10:2f:95:
5c:b5:e1:9a:39:b5:87:6d:3a:fa:e2:5a:c7:07:e1:
14:51:2d:1c:6e:15:d4:08:92:9e:51:e3:2c:cd:67:
ba:2f:66:b3:fd:06:d2:27:46:3f:ae:cb:bf:69:2a:
6d:49:f2:e1:e3:0a:87:db:d8:20:32:7c:62:ee:e9:
3d:46:74:36:64:2f:2e:7f:47:af:38:65:80:db:b2:
c6:01:c6:90:8d:cd:dd:54:54:48:6d:9c:86:4a:b3:
14:84:7f:16:25:d0:98:5a:0b:36:83:62:53:79:03:
5b:8a:4f:ee:0e:a9:c0:a5:78:46:3c:9b:e3:c7:97:
31:e2:6b:61:30:b0:2c:8d:2e:be:32:59:38:18:46:
5e:3e:11:22:41:62:a6:c8:9a:a9:d5:96:94:74:7b:
8d:72:cb:ed:e8:bb:ee:b3:dd:c6:5b:a0:10:ed:f8:
8a:ec:66:23:3d:38:97:89:f2:32:27:18:de:ca:cf:
4a:43:57:29:ce:5d:71:a2:54:94:ab:7b:08:39:b4:
4f:b1:bf:0a:49:bb:d3:b1:51:dc:ce:a7:9b:46:f6:
57:30:5c:57:ae:3d:01:0e:00:b4:9a:e4:af:50:dd:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:2E:00:BB:B4:F4:F8:6F:B1:DF:13:80:89:19:07:39:25:2B:C8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FyAuALu09Phvsd8TgIkZBzklK8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.136.0/22
82.153.246.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/22
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
76:85:d8:02:ac:0b:72:f4:a1:56:81:a8:c1:b9:cc:d0:df:b3:
ac:58:49:d5:b0:c3:68:9b:c5:72:a1:13:52:1b:55:65:3c:a2:
b8:71:a3:80:42:42:e5:72:5b:ad:34:85:28:9f:8c:ec:65:91:
8c:0b:7b:00:f3:9a:a2:c5:6d:29:c5:0b:17:d4:0a:9a:0c:03:
af:90:37:17:4e:6a:61:6d:78:c4:67:f5:09:24:17:d1:61:2e:
33:9e:62:3a:ce:ec:61:c6:a6:6f:46:15:b9:50:b4:c2:fd:38:
8f:3d:3e:4f:20:14:b5:ce:7c:ce:a5:2d:cd:30:48:f6:a1:47:
3d:65:5c:ea:76:dd:88:69:fd:c7:db:91:e0:cf:ef:78:24:e5:
f7:26:e0:fe:ef:47:08:34:b7:ae:09:da:4e:39:de:4c:b8:d2:
7d:06:87:72:bb:4f:c8:53:78:21:fb:28:4a:5e:22:0e:d1:ab:
68:40:a4:6b:e9:4a:d0:27:2e:4b:3f:93:d0:ef:53:9c:1a:4a:
be:2f:ba:8b:e4:b6:13:bd:0c:8a:dd:ed:ce:26:16:0c:fd:f6:
de:ac:4a:5e:c9:64:ea:8c:9f:4f:3a:07:d0:84:6f:09:f3:83:
cc:16:ce:f5:6a:25:d3:86:d5:4e:56:99:fa:5e:78:d9:e2:3f:
7d:17:1d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org