Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HtYsrOtzYzEHyIey0IYBDnTejGk.roa
File: HtYsrOtzYzEHyIey0IYBDnTejGk.roa (raw, json)
Hash identifier: YANNo9ql6DGUxIlGO0KqEnfTTmEyYYV1DQncJbWkHlg=
Subject key identifier: 1E:D6:2C:AC:EB:73:63:31:07:C8:87:B2:D0:86:01:0E:74:DE:8C:69
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E7A91E50624252DCAABEE1E798A654170
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HtYsrOtzYzEHyIey0IYBDnTejGk.roa
Signing time: Tue 26 Mar 2024 11:42:45 +0000
ROA not before: Tue 26 Mar 2024 11:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 82.153.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 14:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:91:e5:06:24:25:2d:ca:ab:ee:1e:79:8a:65:41:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 26 11:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ed62caceb73633107c887b2d086010e74de8c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:42:7b:ee:d0:f8:8b:ee:3b:a2:dd:fb:2e:
c5:cc:ca:89:79:ec:7c:50:32:c1:53:fe:8c:69:de:
45:90:1b:e2:a3:74:61:79:28:57:9b:a5:c4:65:93:
dd:bd:95:88:40:f7:87:09:04:72:1f:1e:4f:84:5c:
dd:f6:c1:7f:2f:b6:33:d4:c6:28:bb:ba:f5:50:e5:
7f:8d:e9:e2:38:44:54:b6:77:90:da:e1:ba:c2:d0:
e9:07:0e:27:e3:e7:3d:47:1d:8f:97:97:6c:cc:c5:
cb:1c:ad:b1:e8:b4:db:2f:fd:19:22:8b:cf:b6:64:
c7:85:77:a2:34:79:59:e6:bb:8a:15:c4:ad:c3:c5:
20:e1:47:a0:97:33:17:ad:1e:bc:01:f9:16:ab:d8:
09:68:8d:21:1b:b5:c1:a2:e7:b6:1b:d1:4b:5b:3b:
66:21:a0:2b:b4:c8:2e:8e:b3:dc:82:34:3c:1a:08:
61:66:d6:5a:64:0f:e4:e3:8e:63:8f:0e:68:59:96:
b0:4c:42:7e:c5:9f:77:69:20:00:69:19:1c:1e:1f:
af:83:33:5d:a5:c9:33:98:f1:95:b6:72:15:37:ff:
da:ae:8b:be:b7:28:71:a4:aa:b2:2c:71:1d:6e:ba:
83:b2:d7:3a:29:e9:66:e5:2a:af:58:52:7c:ee:75:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D6:2C:AC:EB:73:63:31:07:C8:87:B2:D0:86:01:0E:74:DE:8C:69
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HtYsrOtzYzEHyIey0IYBDnTejGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.1.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4c:ea:f8:a7:d9:49:6b:cf:c4:79:ce:bd:a1:5e:7f:51:91:
69:17:56:65:2e:bb:e6:b3:46:fc:7d:91:7f:c3:c6:cb:0f:a4:
f1:12:28:4a:e1:75:d3:ef:66:41:54:6a:f9:6e:66:cc:3c:c0:
b9:28:74:48:2e:1e:8a:6a:d0:6d:a7:b2:f9:05:94:ef:7b:6a:
e4:59:56:0d:64:b1:dd:25:c2:62:c3:cb:97:8a:f0:46:2f:40:
dd:09:20:1c:9f:12:a4:9e:f6:4f:19:54:ce:b0:78:e8:f5:b1:
75:4f:5f:dc:40:14:28:d0:55:cd:d1:c1:62:d5:d1:61:60:3a:
d4:fd:87:18:dc:ea:cb:87:34:93:2c:8e:ea:15:22:73:4c:13:
27:dc:66:50:46:ec:9d:ef:7c:88:e9:f9:a6:86:ed:25:ef:5e:
ca:da:54:c8:55:41:c1:d8:f7:4d:52:aa:e9:be:dc:00:2b:89:
99:d6:ee:81:4b:15:82:23:19:1c:b7:5e:c1:97:c5:50:38:93:
fd:2f:6b:66:21:e8:37:17:88:a3:61:6b:ae:fc:44:a3:09:af:
f2:14:09:4c:be:04:9c:54:4a:b6:9a:c0:9b:c9:db:4a:a1:f9:
d3:ff:3c:12:c1:2e:48:63:ec:14:20:e7:98:25:47:bd:2a:5b:
8f:ee:0b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org