Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JQFbXcu8fH8D0nvwMtNGxhR3SNA.roa
File: JQFbXcu8fH8D0nvwMtNGxhR3SNA.roa (raw, json)
Hash identifier: sCexSaznhbEEkleQ1bebUrQDMFLVWTLLlCOgmDJwJV4=
Subject key identifier: 25:01:5B:5D:CB:BC:7C:7F:03:D2:7B:F0:32:D3:46:C6:14:77:48:D0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0187461F6229E3870A2739A06ACA83102520
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JQFbXcu8fH8D0nvwMtNGxhR3SNA.roa
Signing time: Mon 03 Apr 2023 07:57:54 +0000
ROA not before: Mon 03 Apr 2023 07:57:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212953
IP address blocks: 82.153.210.0/24 maxlen: 24
82.153.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 07:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:1f:62:29:e3:87:0a:27:39:a0:6a:ca:83:10:25:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 3 07:57:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25015b5dcbbc7c7f03d27bf032d346c6147748d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:bf:9d:b7:81:78:c8:b1:7b:40:9f:67:49:
51:14:2e:42:09:ac:cb:d6:6e:f7:1d:9a:a7:11:e9:
0e:1f:ae:3d:3c:d0:65:86:1d:7e:a0:78:72:93:d7:
e8:fe:ae:7e:a5:20:fc:63:79:02:48:42:b2:86:49:
9d:dd:20:ab:de:7c:46:f4:de:67:b2:4d:3c:40:4a:
5f:78:fe:54:6b:e2:25:bf:be:c6:d9:b7:84:1b:6f:
64:6b:2f:3d:a9:75:05:d8:62:8f:24:96:6f:6c:87:
ed:09:84:bb:ab:86:39:5b:9b:54:5f:0c:4a:fc:7e:
4b:00:7d:ca:94:12:b4:ad:8a:a2:a5:85:e4:3e:24:
6a:66:47:bb:4f:b9:9d:30:b1:64:2d:4b:0d:ba:61:
c7:d3:9d:97:f7:a4:3c:17:94:b7:aa:83:fc:ef:c8:
65:d5:be:bf:06:e0:44:01:e6:04:c9:b0:af:64:4d:
0f:f7:a8:cd:e7:56:68:e2:83:8a:81:30:a5:76:8a:
c5:c7:0d:cc:eb:93:6e:45:af:ac:bd:f2:6c:ba:e7:
cd:61:7d:54:01:b7:e7:67:f4:a2:a9:e3:8c:a0:4d:
8b:d3:7d:c8:e6:34:bb:23:85:8d:de:20:c4:62:a2:
39:f7:41:af:46:af:1e:fa:5a:d3:2d:49:f6:04:f4:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:5B:5D:CB:BC:7C:7F:03:D2:7B:F0:32:D3:46:C6:14:77:48:D0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JQFbXcu8fH8D0nvwMtNGxhR3SNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.210.0/24
82.153.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:90:6f:93:f4:49:ee:1c:13:e4:7f:8a:2e:82:21:f6:30:88:
11:05:14:26:79:ec:55:6d:a5:a5:f5:0f:f4:22:13:f3:a2:aa:
6b:c8:b7:85:23:ad:6c:e2:41:bc:40:94:94:eb:84:67:ec:d4:
ba:b2:70:5a:30:c2:65:9a:c6:1d:b6:2a:d2:23:74:90:c5:30:
ce:fe:a5:30:5c:ab:54:a5:c2:57:5c:6e:cc:df:58:f1:2c:52:
66:f1:c0:e6:5c:8e:08:dd:b7:0d:c6:4c:16:7b:58:44:22:ed:
79:24:77:3f:fc:c5:10:8d:85:b8:17:9b:f2:d7:01:a4:15:16:
fe:bc:7a:fd:36:5b:df:76:d8:36:47:b6:78:91:e2:c6:d0:00:
00:3a:cc:59:47:e3:0e:00:9c:50:8a:89:be:ed:5f:56:3a:24:
83:a5:eb:cf:61:2a:cb:ab:bb:1b:7c:2f:74:2a:2a:71:31:9e:
a5:49:c9:e0:41:92:f4:bc:65:50:fe:5d:e9:6f:79:fe:73:b5:
24:6e:75:3b:6f:18:8e:7f:e0:2a:36:f8:5c:64:36:be:0b:d4:
4b:4b:45:1f:3e:eb:8c:42:51:e9:93:a4:1e:39:61:7f:de:05:
e3:e2:04:1f:2f:56:e8:c1:0c:ee:7c:7f:d8:2c:ce:52:e3:a2:
12:07:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org