Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IKk99UInOjtoIBQX3la6jlRHJRY.roa
File: IKk99UInOjtoIBQX3la6jlRHJRY.roa (raw, json)
Hash identifier: MpGigZm2G/Kx1F2Q2+tGPFdIp6JMSzNEJ6p7Ah6XVHg=
Subject key identifier: 20:A9:3D:F5:42:27:3A:3B:68:20:14:17:DE:56:BA:8E:54:47:25:16
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F0B2BC48B8E5CA874098A905249D5206F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IKk99UInOjtoIBQX3la6jlRHJRY.roa
Signing time: Tue 23 Apr 2024 13:36:08 +0000
ROA not before: Tue 23 Apr 2024 13:36:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.245.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.130.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 14:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:2b:c4:8b:8e:5c:a8:74:09:8a:90:52:49:d5:20:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 23 13:36:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20a93df542273a3b68201417de56ba8e54472516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:9a:64:62:37:8f:db:15:44:0f:73:56:1b:
8c:46:16:76:96:2f:6d:70:07:12:9f:af:6e:c5:57:
38:c9:14:f5:e5:b4:e4:48:2e:7d:16:15:d9:9e:62:
41:20:0e:78:85:a2:65:5c:44:f7:b3:94:84:36:be:
26:63:8d:e3:21:a6:d8:ca:e2:6e:a7:52:37:b7:d2:
c5:27:1e:1e:1b:fb:0c:ad:49:b4:76:4d:04:99:bf:
a4:0f:f3:6e:a9:31:2b:a7:c7:2a:1f:2a:67:01:3b:
4a:4a:9a:81:2d:bb:b3:39:68:b8:67:22:9e:13:0c:
dc:81:2e:6c:8a:e4:47:6b:44:79:46:bc:20:f8:15:
f9:bf:26:c8:c7:b8:9a:1d:51:1e:fa:e2:34:90:c5:
55:ba:5e:9a:39:5b:60:4a:f1:24:d0:e9:93:a3:c0:
83:34:aa:44:0e:fe:c2:9b:f3:7f:1c:f6:7d:22:1d:
de:54:f1:b8:74:43:73:4b:cb:f8:9f:84:e5:da:71:
7c:74:c8:08:4c:46:3b:d6:94:36:20:2e:81:34:2e:
73:ad:2f:8a:bb:15:93:4b:7d:ba:cb:63:c1:86:55:
e8:f1:e6:f0:8f:00:3a:3f:2d:40:af:4d:16:b6:18:
d2:6d:60:bf:72:17:df:06:59:a2:1d:7c:90:41:85:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:3D:F5:42:27:3A:3B:68:20:14:17:DE:56:BA:8E:54:47:25:16
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IKk99UInOjtoIBQX3la6jlRHJRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.153.245.0/24
89.213.133.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.130.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6d:a8:12:73:11:39:26:89:64:b3:8e:a4:e2:2e:7a:2f:5b:
18:92:6d:94:f0:e3:21:92:a9:71:b7:dd:31:5e:5f:e9:1c:c7:
ec:c8:05:11:df:fe:57:09:e1:da:b3:cf:03:60:92:45:b3:8f:
3f:bd:f4:72:5e:64:91:df:83:fb:de:03:aa:0e:b6:79:3c:f6:
9d:91:46:c8:93:58:40:2d:37:6a:ff:62:2d:ce:7d:df:e3:c2:
73:ed:3d:b5:c8:17:70:66:59:dc:78:37:2f:3f:cc:2a:30:7c:
d0:c5:ee:a0:f9:c7:6e:4c:f3:e0:4f:ca:03:77:04:8a:d3:8f:
c8:de:e0:d1:fd:c1:59:a5:aa:6b:b4:fa:af:d6:5b:1d:72:7c:
1a:38:ed:a4:22:93:70:d2:9e:85:30:5f:ff:ad:a5:3f:8e:ed:
27:76:b2:e5:f6:d3:8e:b9:35:48:c3:9c:d4:33:72:e5:56:60:
29:21:4e:0d:c7:7b:ef:ac:64:8c:ac:31:33:97:37:c5:01:b2:
71:c7:4d:50:b4:69:51:f7:b7:b3:bb:ef:97:9e:fa:7f:de:80:
4d:95:8e:8d:3c:d2:38:ce:83:0e:7c:c6:5c:d2:03:a7:51:d3:
16:53:e8:30:87:59:f2:db:74:3f:34:78:09:70:9f:02:0d:9c:
a1:6f:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org