Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JAbeVrQ4v7BB1GmlEBjAJnFOEcE.roa
File: JAbeVrQ4v7BB1GmlEBjAJnFOEcE.roa (raw, json)
Hash identifier: 4NJ4atgu5cBZwvNPnWuk9mWrpSkQHk6upjPACLMqv0A=
Subject key identifier: 24:06:DE:56:B4:38:BF:B0:41:D4:69:A5:10:18:C0:26:71:4E:11:C1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01869C6B5655D3A9CD5A9508852583CD7E23
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JAbeVrQ4v7BB1GmlEBjAJnFOEcE.roa
Signing time: Wed 01 Mar 2023 09:05:25 +0000
ROA not before: Wed 01 Mar 2023 09:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 82.153.240.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
81.5.189.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
81.168.35.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 08:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:6b:56:55:d3:a9:cd:5a:95:08:85:25:83:cd:7e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 1 09:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2406de56b438bfb041d469a51018c026714e11c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:51:9a:78:38:e4:1b:5a:ae:e0:0d:ad:92:
b3:43:f2:81:5c:0f:5a:58:42:d2:cd:fc:c2:8a:66:
0e:42:e8:d0:20:a4:a6:6c:ac:23:85:66:38:99:58:
41:6c:4c:04:f2:4f:77:5d:8d:db:4e:40:9b:b7:3e:
1f:a7:b4:68:3b:2c:43:8d:98:e3:18:8d:4e:23:4c:
59:5f:82:d1:83:f8:6b:74:49:e8:9f:1e:30:5b:ce:
79:f5:41:6d:be:96:18:3c:e1:2b:e4:50:3b:3e:63:
0d:e2:12:2c:09:53:e9:da:04:4d:38:1b:f7:83:9f:
ea:6c:d5:6f:29:1e:02:13:12:ec:4b:8d:37:f7:7b:
a8:2f:81:ec:18:b2:ad:b7:92:ce:ab:1e:06:eb:1f:
61:dd:90:af:7f:6c:d3:84:a1:65:56:35:62:c9:1e:
1f:be:0b:1d:f0:74:98:7e:08:62:ae:3c:b8:f8:d9:
48:18:63:c6:f1:61:29:25:37:d7:93:2a:e6:52:45:
14:2a:b2:69:0f:38:da:58:54:65:33:5a:2d:64:ea:
29:30:38:31:49:c2:63:2b:1b:53:fd:b7:7c:e0:9d:
4a:65:dd:d5:c1:9a:9e:b7:20:53:f3:fd:9e:cc:cd:
bf:bd:38:b3:b3:98:64:29:44:f7:9d:de:bb:42:6e:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:DE:56:B4:38:BF:B0:41:D4:69:A5:10:18:C0:26:71:4E:11:C1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JAbeVrQ4v7BB1GmlEBjAJnFOEcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
81.168.35.0/24
82.152.178.0/24
82.153.69.0/24
82.153.220.0/23
82.153.223.0/24
82.153.240.0/24
82.153.243.0/24
82.153.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:5a:78:ab:b3:7e:9b:52:25:b1:b6:c9:9c:45:4a:1e:09:5e:
7b:19:e0:11:be:a6:c3:f6:bd:d1:96:7a:6a:9f:31:6f:b3:5a:
f9:b2:ab:88:22:0f:f4:11:f3:55:6f:73:0a:7a:b5:ce:ac:55:
a7:ff:22:65:3f:1f:19:99:89:75:1c:f8:a1:da:9e:5f:77:48:
36:fd:c0:89:f6:f9:c3:78:80:94:78:55:fc:1c:72:f0:4a:eb:
bb:ca:1e:47:2f:d8:e7:b1:3c:d4:fe:af:04:ca:a5:9c:d7:67:
1e:bd:21:e6:64:39:d1:d6:df:3a:89:c2:92:f7:00:08:5c:e5:
dc:98:75:be:ab:46:9d:e6:5a:96:ad:42:81:12:10:8a:9a:e9:
55:e2:6c:a2:68:e0:66:16:6e:23:3a:a8:c9:7f:82:68:83:c8:
da:db:bb:0d:5a:6f:e6:01:1a:3d:84:fa:2b:9d:74:d3:a2:13:
fa:41:45:b5:64:3e:99:6b:6b:72:5c:8d:97:c9:75:9b:79:29:
d7:28:47:08:7b:10:f8:70:d7:c2:00:1d:cf:e4:ac:eb:dc:45:
ec:f9:7c:f2:20:a0:bc:84:12:14:1a:83:b9:37:dc:09:46:3b:
f1:45:22:59:dd:95:15:07:7e:78:1e:52:0b:39:8f:74:c9:27:
6d:6c:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org