Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/H78GOBEiwWi4iHC74CHRydktAts.roa
File: H78GOBEiwWi4iHC74CHRydktAts.roa (raw, json)
Hash identifier: FqNYUGjsq/7AUwh3ytVoW3+hDYEaqD4XJtXbYYciTFE=
Subject key identifier: 1F:BF:06:38:11:22:C1:68:B8:88:70:BB:E0:21:D1:C9:D9:2D:02:DB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0186278ABE2B7E89900DE65A472B80FF8D6C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/H78GOBEiwWi4iHC74CHRydktAts.roa
Signing time: Mon 06 Feb 2023 16:24:09 +0000
ROA not before: Mon 06 Feb 2023 16:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 82.153.73.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 11:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:8a:be:2b:7e:89:90:0d:e6:5a:47:2b:80:ff:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 6 16:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fbf06381122c168b88870bbe021d1c9d92d02db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:db:77:39:ed:c4:b6:e6:10:33:14:50:33:
2b:9d:32:6e:57:35:7c:8e:9f:5a:02:7d:90:64:20:
e7:e4:49:bc:7f:c6:49:52:33:ea:6a:f4:dd:12:a5:
fc:9e:4c:bc:5c:68:b4:d6:32:2c:a5:e4:06:ab:27:
fd:5d:51:f6:dc:5c:ba:e8:9d:b9:90:a4:9f:a6:62:
1b:4b:aa:2e:41:ee:10:e3:a6:4f:c8:43:ce:4c:6d:
ae:b4:cd:8d:5a:58:e2:89:b4:b9:50:f3:e1:66:9b:
3d:e2:4a:1e:47:a5:c8:8f:8a:34:99:47:b4:85:71:
88:35:49:76:c2:88:7f:67:7f:54:bb:0b:43:52:07:
5f:6c:cf:be:82:de:d2:28:8d:32:84:a6:5c:cd:ff:
49:6e:3f:7b:48:36:bd:86:f5:06:e8:08:69:36:d4:
91:d2:92:f1:72:e0:4f:6e:a5:f8:e6:47:ae:b9:f9:
9d:11:1b:06:38:c8:54:72:e5:ad:9e:8c:bf:ed:31:
b9:b1:58:b0:0f:32:21:97:07:d3:2e:59:a5:84:3f:
fb:f7:2b:48:60:d3:c8:9d:cb:14:f2:7d:cb:4a:d3:
79:34:d6:40:ad:97:37:23:5e:6a:ad:81:43:22:06:
0a:31:90:4a:5c:f7:af:62:7a:73:4b:2b:53:f9:14:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BF:06:38:11:22:C1:68:B8:88:70:BB:E0:21:D1:C9:D9:2D:02:DB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/H78GOBEiwWi4iHC74CHRydktAts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
82.153.73.0/24
82.153.79.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:77:ae:35:cf:63:0d:38:86:0b:7d:83:15:ad:ec:0b:93:ff:
2f:2e:a0:7b:dd:45:d4:6c:59:db:a1:ca:51:b3:27:98:aa:82:
c5:e2:b4:42:0c:fb:81:eb:1f:f0:bf:cc:93:46:df:71:43:ab:
f5:11:c3:65:b5:8a:16:56:22:f3:1a:1e:f4:2b:19:e3:9d:30:
81:21:9e:85:9d:02:bf:43:f7:dd:5f:00:39:b7:b7:02:53:54:
ac:ee:ed:f8:a4:ec:23:92:0e:45:de:eb:5b:16:a2:7e:3f:c2:
fa:3e:f4:43:c0:67:b1:10:fc:14:5b:d7:10:12:93:9f:2d:4e:
9d:a5:36:9d:bf:27:04:ef:cf:55:58:2b:12:4c:8c:25:1c:92:
52:6c:9e:94:e9:e7:2e:ff:26:1d:2d:b3:aa:7e:49:75:bc:6b:
e5:c9:5b:67:77:b6:8e:6e:43:43:5c:73:7e:c0:e2:91:d1:77:
d6:07:bd:84:4d:32:76:6d:68:0a:a0:3a:31:1f:fc:7b:50:29:
99:04:c0:fe:9f:31:59:ac:c6:1f:92:8d:4c:c6:85:e8:aa:47:
f8:94:19:35:f6:0a:14:80:96:a8:e9:ac:80:6c:36:c4:f9:06:
0b:c6:32:db:58:5a:eb:5a:1e:2f:4c:45:60:ea:33:2e:73:8b:
b3:ce:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org