Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Gc1YY0F9rJ4PTly_D8158cWu7Jk.roa
File: Gc1YY0F9rJ4PTly_D8158cWu7Jk.roa (raw, json)
Hash identifier: ZHwtezScBidpF1G6h9AnV4+FAAzUdxhhqN7D+XSytgs=
Subject key identifier: 19:CD:58:63:41:7D:AC:9E:0F:4E:5C:BF:0F:CD:79:F1:C5:AE:EC:99
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189EF82DF959A493556083A7D61FB410A43
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Gc1YY0F9rJ4PTly_D8158cWu7Jk.roa
Signing time: Sun 13 Aug 2023 15:27:58 +0000
ROA not before: Sun 13 Aug 2023 15:27:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 82.153.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:82:df:95:9a:49:35:56:08:3a:7d:61:fb:41:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 13 15:27:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19cd5863417dac9e0f4e5cbf0fcd79f1c5aeec99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:22:02:0a:82:ce:3a:1a:ec:7c:7b:65:67:
8e:25:0f:7a:6e:24:13:86:ca:6d:50:5d:92:59:11:
34:cd:1d:8a:ed:ab:74:80:c8:9b:3c:5b:3e:27:6b:
57:dc:5d:92:38:4d:83:ec:c3:91:e9:bb:78:02:1f:
46:10:6a:c5:f9:49:08:74:55:5e:12:ff:49:9c:58:
6e:29:7d:0a:a0:dc:2e:5d:47:5e:b0:b2:65:b1:a1:
35:ab:7a:2e:f9:b1:60:9b:62:94:d3:d1:59:8c:13:
01:9b:6c:11:b5:1e:bf:47:9e:e4:28:ab:63:9a:0f:
0c:63:69:9c:f5:6d:30:8b:96:f5:93:46:14:9d:aa:
23:cb:ef:2c:59:a1:e4:79:8b:93:f8:46:42:7c:e5:
2d:35:02:93:10:25:82:62:55:f8:ee:f6:91:30:f3:
5e:78:14:2a:ff:ac:40:98:c5:4b:19:54:5a:a1:42:
d5:16:62:0e:1e:98:18:b8:49:ee:84:12:3e:32:13:
b9:e3:14:21:b6:8c:3f:3b:4d:98:fc:57:60:f0:b0:
13:c6:c9:92:3f:f5:a6:49:27:78:2b:7f:8b:9c:0e:
a0:49:73:1b:a5:c3:0c:ba:ec:e5:09:4d:03:3c:99:
86:69:50:a3:09:94:4f:15:f9:3d:70:2e:f8:81:f1:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CD:58:63:41:7D:AC:9E:0F:4E:5C:BF:0F:CD:79:F1:C5:AE:EC:99
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Gc1YY0F9rJ4PTly_D8158cWu7Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:3f:fd:33:96:80:f1:cd:94:15:98:3b:72:33:84:1c:0b:6a:
16:15:c5:26:e8:1a:fa:04:e6:de:9d:89:65:34:14:49:bf:8d:
29:6f:b6:99:82:34:d6:81:29:a0:fc:d9:22:c5:c5:ff:a5:bc:
33:37:9b:40:8e:17:68:42:26:de:6e:a7:3f:d0:1c:46:a6:4b:
91:08:a4:2f:c7:6f:35:3a:94:eb:34:c1:e9:b0:55:3e:0b:e0:
90:07:66:71:3c:f6:b3:ec:ab:89:2e:53:48:5e:d1:60:aa:67:
d0:4a:fc:33:9e:d2:47:b9:de:9e:24:7f:f9:87:0e:b2:27:71:
32:df:7c:4a:9d:c8:c5:d5:04:0b:c0:fb:ca:c2:58:be:b1:03:
0f:f1:3e:e2:a0:d2:f6:70:1d:8b:da:14:6c:6c:da:15:83:7c:
1d:f4:c7:66:37:3e:26:2b:54:5f:2a:4f:00:5e:3f:a7:a0:4d:
ad:44:17:0e:ff:12:6c:66:ec:36:4a:9b:58:69:3e:be:d1:8a:
75:70:6d:94:6a:6f:9f:de:f4:81:12:b6:36:41:cc:9f:94:27:
f6:e2:4e:5b:2c:d2:f5:bd:05:ff:3c:e2:0a:4d:48:f8:34:0b:
31:e8:99:f8:e6:66:c6:ca:f6:2e:9a:16:f3:8f:39:a6:8c:1c:
c1:c9:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org