Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Jv64KQ-O878SavM4v3UST4brv2c.roa
File: Jv64KQ-O878SavM4v3UST4brv2c.roa (raw, json)
Hash identifier: Co6+hBYCCINMeVUystBHVRMhkORLqTHSb+tdZlKPDHk=
Subject key identifier: 26:FE:B8:29:0F:8E:F3:BF:12:6A:F3:38:BF:75:12:4F:86:EB:BF:67
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D35FB33D55E6EAB89ACC7D75EDDD34A56
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Jv64KQ-O878SavM4v3UST4brv2c.roa
Signing time: Tue 23 Jan 2024 11:01:11 +0000
ROA not before: Tue 23 Jan 2024 11:01:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 82.152.176.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 14:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:fb:33:d5:5e:6e:ab:89:ac:c7:d7:5e:dd:d3:4a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 23 11:01:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26feb8290f8ef3bf126af338bf75124f86ebbf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:e9:b0:fe:1a:33:3a:55:5d:f0:4b:7c:60:
a2:5e:d9:f7:78:3d:41:ac:c6:c9:59:75:4e:cd:d1:
20:46:76:9d:81:a4:80:0f:c2:90:ae:f5:fa:f5:eb:
17:03:5b:1c:9e:39:c9:ae:4c:fd:6a:9d:3c:42:78:
dc:1f:16:f5:65:2a:61:10:89:42:36:fb:96:d3:1e:
e5:ee:71:95:ae:f0:35:69:a8:98:ba:d1:07:1a:4e:
2a:f2:42:f4:86:28:24:df:78:24:c2:87:ce:37:1e:
27:04:87:1f:6f:a8:62:cd:56:35:6b:7f:99:e3:c1:
5d:da:7c:72:99:60:c0:89:7f:61:75:4d:30:52:d6:
b8:4c:e1:54:45:a7:36:d5:37:33:ad:84:18:5e:34:
68:fc:63:12:c8:19:c7:25:12:74:e6:9c:6c:bc:f1:
15:78:44:57:ab:da:13:6b:41:1a:20:66:8c:2e:09:
04:c2:56:d3:03:2f:23:ac:66:f2:4d:38:a3:41:d0:
fa:b6:05:a1:14:51:92:4c:92:c5:46:60:c8:71:9a:
5c:02:a5:f9:3d:e0:c6:98:d7:73:7e:78:09:67:17:
83:51:7e:63:14:5f:4e:5e:22:71:0f:d4:c0:01:d1:
e3:21:02:93:2f:3c:ba:7f:bf:c1:e7:e9:51:2d:7b:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FE:B8:29:0F:8E:F3:BF:12:6A:F3:38:BF:75:12:4F:86:EB:BF:67
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Jv64KQ-O878SavM4v3UST4brv2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:e9:bd:ce:26:d2:89:c6:10:78:39:f4:81:de:b1:c8:98:ea:
fc:97:eb:aa:f0:07:43:81:b4:31:03:d1:19:92:b8:d3:b4:92:
94:8b:d5:1c:2d:59:c5:34:cb:af:38:86:30:f9:e8:c8:45:da:
89:95:e7:ad:66:82:0a:f6:b9:c9:73:3d:cf:a5:0e:9d:7b:90:
53:e6:b7:ac:98:45:b6:8b:d2:15:94:9e:c4:eb:87:3c:a2:80:
ca:83:4c:1f:68:01:63:2e:62:dc:01:3b:dc:22:21:5f:67:6d:
ae:60:f2:ed:90:7e:ba:bb:a8:9a:5a:ff:14:d3:42:94:da:8e:
b4:24:e8:04:b4:fa:31:65:0a:82:13:30:7c:d5:12:ce:d4:b1:
71:3e:1f:52:ef:4a:fe:24:03:30:f1:c9:ef:01:dd:14:c2:6a:
4c:f8:30:e5:e5:04:ee:ea:39:f3:2b:57:1b:22:15:0e:86:af:
93:a5:83:43:9d:56:92:1f:ac:2b:09:bc:a3:2a:42:f6:52:a4:
ef:08:2b:7a:2c:93:a9:94:29:ef:1b:54:80:4f:ac:eb:e0:64:
08:e4:39:8c:58:4e:5a:90:22:03:08:87:80:4c:be:c2:4c:a2:
29:e8:d5:cc:76:a1:9a:1a:8f:89:40:6c:31:cf:20:8b:ca:44:
97:13:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org