Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K1yVXeapvnmPk3J0MbD8jwI0tVY.roa
File: K1yVXeapvnmPk3J0MbD8jwI0tVY.roa (raw, json)
Hash identifier: 11UJJKxqph3X991vy+CxLJh85kavbcGKeL3OUaJkp5k=
Subject key identifier: 2B:5C:95:5D:E6:A9:BE:79:8F:93:72:74:31:B0:FC:8F:02:34:B5:56
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018973DEC6FBC0B4FBD93F6B475EC8066365
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K1yVXeapvnmPk3J0MbD8jwI0tVY.roa
Signing time: Thu 20 Jul 2023 15:15:27 +0000
ROA not before: Thu 20 Jul 2023 15:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
82.152.108.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
82.153.249.0/24 maxlen: 24
89.213.131.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 16:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:de:c6:fb:c0:b4:fb:d9:3f:6b:47:5e:c8:06:63:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 20 15:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b5c955de6a9be798f93727431b0fc8f0234b556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:64:80:fe:8d:f3:10:8b:f2:df:9c:ed:97:
45:75:c1:a0:65:b7:d6:e0:8e:03:33:42:3f:d8:1a:
61:6f:b7:7a:35:90:bb:be:ef:c8:ff:15:54:0e:cb:
af:d8:95:cb:8a:e8:68:e5:65:30:af:95:1b:06:40:
8e:4f:89:fd:52:3f:fa:e8:c0:a7:3b:63:5b:16:6a:
25:42:ce:f5:31:d2:c8:c8:11:3f:36:59:32:af:a5:
a1:8c:56:20:ce:d9:dd:41:8a:78:e8:b8:ae:36:84:
7f:88:46:ec:2b:c8:aa:72:6c:91:0c:2d:ba:f0:21:
86:22:de:da:60:b2:5e:c1:a5:3c:8a:cc:ac:6d:0e:
48:b2:5d:1c:68:3a:ca:38:ed:c3:a4:93:24:02:ef:
9b:78:b7:8f:78:dc:16:76:5e:03:06:86:df:a2:f2:
4d:ac:55:88:b3:56:3e:f0:b6:dd:00:77:24:ce:40:
b3:f2:e8:24:a4:dc:21:77:67:04:72:33:55:31:86:
17:28:e6:9e:c3:ad:16:8d:ca:0a:17:34:00:d1:2f:
f8:2c:10:21:26:e5:92:7a:bc:e3:c6:a4:14:25:eb:
33:cd:92:2f:2b:a5:49:5d:bd:56:78:f6:2f:f1:e2:
cc:49:f7:3f:ef:77:03:fb:66:2e:79:5e:94:97:7a:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:95:5D:E6:A9:BE:79:8F:93:72:74:31:B0:FC:8F:02:34:B5:56
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K1yVXeapvnmPk3J0MbD8jwI0tVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.119.0/24
81.168.123.0/24
82.152.108.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0/22
82.153.223.0/24
82.153.249.0/24
89.213.131.0/24
89.213.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:40:7e:e2:85:21:c9:d5:a2:dd:27:c6:c2:42:59:09:42:bb:
03:b8:fc:b1:a5:f4:f8:0d:87:57:e4:2e:09:65:a9:8f:60:39:
f9:dc:1d:29:37:5b:bd:41:b3:9a:bf:33:91:b7:a0:72:4b:36:
b8:49:30:99:52:70:db:4d:46:47:aa:30:cd:c8:62:c3:bf:f9:
88:e1:95:2e:86:b9:63:61:f6:7c:a6:d2:78:09:c0:c9:28:0f:
10:d3:03:f5:cb:e9:17:c8:1f:16:06:b2:9d:9d:ed:bf:aa:ce:
04:43:f7:76:f3:1f:f5:a5:95:6b:fc:74:46:1d:99:1c:1e:fa:
0a:66:d8:4f:cb:13:48:84:7c:91:31:0d:51:a3:03:0e:9e:46:
fd:a6:9f:20:d3:d8:93:95:f3:b6:cd:9e:3b:54:b6:92:75:35:
d3:ce:6c:b9:93:30:27:56:44:fe:5f:2c:5e:56:8e:72:6f:9f:
2d:eb:24:6f:00:19:b4:63:2a:53:9c:9e:52:58:36:c4:7a:22:
2e:1b:cc:49:7b:e1:97:5d:1b:9c:20:c9:e9:f2:48:e5:2f:6a:
48:0f:98:db:80:0c:ad:7c:09:24:c5:02:77:3c:73:54:b1:e5:
6d:be:81:46:43:d5:a1:ba:d4:4e:36:ee:2a:24:cc:c4:07:56:
74:b7:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org