Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hyw6h121WOeULAg_IF_oxuqediM.roa
File: Hyw6h121WOeULAg_IF_oxuqediM.roa (raw, json)
Hash identifier: An/Y3Ek6ugL132kWx6sOUBgUZVs9oWuPVNLkiqj2Hck=
Subject key identifier: 1F:2C:3A:87:5D:B5:58:E7:94:2C:08:3F:20:5F:E8:C6:EA:9E:76:23
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01895DEE66EF6186F7F22DC9C039ECFB7E3E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hyw6h121WOeULAg_IF_oxuqediM.roa
Signing time: Sun 16 Jul 2023 09:00:52 +0000
ROA not before: Sun 16 Jul 2023 09:00:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 82.153.132.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.68.0/24 maxlen: 24
82.153.71.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
81.168.126.0/24 maxlen: 24
185.49.124.0/24 maxlen: 24
81.5.189.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.248.0/24 maxlen: 24
81.168.35.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 07:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5d:ee:66:ef:61:86:f7:f2:2d:c9:c0:39:ec:fb:7e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 16 09:00:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f2c3a875db558e7942c083f205fe8c6ea9e7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:e3:93:d0:72:f4:ba:43:3b:b8:32:29:0e:
93:e5:b9:36:0c:c0:a0:62:f5:e7:a7:6e:2c:3f:0e:
1b:20:ce:79:4a:be:9d:e5:d8:f5:d7:b5:08:92:ef:
41:6c:26:27:30:21:56:3d:9c:93:6b:3c:46:ae:07:
26:e1:70:92:4d:8b:21:cd:3b:a6:0a:49:c5:ca:27:
81:87:9d:7f:4b:6c:19:9d:2a:82:93:7e:c3:3f:30:
e3:2e:fb:14:68:68:5b:e6:91:c8:db:26:bd:da:a5:
a9:48:79:94:1a:ce:a7:89:cc:18:80:07:9d:c6:1e:
a9:41:5d:7b:86:97:3c:9e:41:ac:27:d7:67:d0:6c:
8d:a3:ba:20:a0:87:73:a5:82:89:85:d4:db:e5:12:
60:35:82:bc:5a:24:8b:07:13:30:3e:32:f8:a2:04:
e0:0c:88:ad:39:a5:5f:c1:fa:20:3e:30:de:82:2b:
69:ad:d5:0f:ee:6d:c4:64:26:b4:e6:d5:9c:08:ed:
46:a6:bb:2f:19:43:b7:56:d8:4a:d6:00:91:7a:a0:
33:80:95:9b:ad:6b:e3:eb:0b:17:ad:8e:39:59:21:
4c:3d:10:9f:03:d2:ad:bf:d5:ae:b3:44:bb:89:c8:
3e:db:3d:32:95:11:5c:15:82:e6:71:79:97:43:b2:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2C:3A:87:5D:B5:58:E7:94:2C:08:3F:20:5F:E8:C6:EA:9E:76:23
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hyw6h121WOeULAg_IF_oxuqediM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
81.168.35.0/24
81.168.119.0-81.168.120.255
81.168.123.0/24
81.168.126.0/24
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.1.0/24
82.153.68.0/23
82.153.71.0-82.153.72.255
82.153.79.0/24
82.153.132.0/24
82.153.224.0/24
89.213.161.0/24
185.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
96:42:0e:27:1a:ed:80:f0:d6:fb:25:0a:05:f9:0e:1c:fe:50:
20:fc:71:d8:c6:7d:64:a4:ea:cd:73:d7:c0:6d:a8:ed:28:f3:
26:52:83:b6:85:68:77:be:87:e9:c4:5b:a3:0a:ff:a8:f1:d7:
2e:92:03:26:a5:00:77:5b:89:35:a9:d6:1e:87:3e:c9:0b:64:
73:6c:26:65:a6:26:54:4b:b5:65:6a:77:a5:fa:64:ee:9e:a3:
69:23:bb:8f:9a:a2:b1:6d:c7:46:f3:49:c0:8a:7f:c0:e9:e4:
bd:6f:a8:89:02:6e:6a:d4:e4:12:56:09:cf:f5:80:76:7a:95:
c1:e8:45:18:5c:3e:4b:e5:f5:97:ce:6a:8c:a5:6e:89:2e:7c:
89:c3:8a:41:70:72:79:cc:da:7b:58:73:fa:30:d6:63:57:7a:
86:2b:1e:8f:a9:d2:53:d4:d3:d0:5b:6b:b7:eb:bd:17:fa:6a:
d0:b2:df:5f:0f:2a:c8:e2:e3:f7:2d:3b:e4:bf:9b:83:64:aa:
5b:60:b5:3b:2a:2e:2e:ad:54:71:e3:28:55:56:da:42:34:c1:
7f:b0:fe:bf:cf:ad:22:e2:d7:4b:95:d8:ac:e2:85:c4:6e:93:
be:2e:c9:bc:1e:1a:f4:27:1c:78:1a:35:48:db:1e:64:5b:1c:
e2:3e:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org