Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K2QkQqWzNtQ0swUqls2AOSraGXA.roa
File: K2QkQqWzNtQ0swUqls2AOSraGXA.roa (raw, json)
Hash identifier: A2zmbjzpFdDiHEgiy60UqXtDxCfcbCQRGGj8JxWf7GE=
Subject key identifier: 2B:64:24:42:A5:B3:36:D4:34:B3:05:2A:96:CD:80:39:2A:DA:19:70
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189060F8E1CD731274081A68284C5CE5FAC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K2QkQqWzNtQ0swUqls2AOSraGXA.roa
Signing time: Thu 29 Jun 2023 07:30:29 +0000
ROA not before: Thu 29 Jun 2023 07:30:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 82.153.243.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:0f:8e:1c:d7:31:27:40:81:a6:82:84:c5:ce:5f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 07:30:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b642442a5b336d434b3052a96cd80392ada1970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:81:1f:fe:bb:d3:3e:56:9a:ef:f6:dc:52:
3c:a1:37:4f:fd:e0:84:ec:63:76:cb:ad:67:49:bf:
37:b1:bc:9c:c9:9f:ef:11:0f:75:d1:c1:0a:14:45:
99:b3:9e:db:5d:65:ef:78:99:93:61:3d:b9:64:0e:
09:5e:30:aa:17:bb:ce:e7:2b:ef:fd:f4:62:97:4a:
91:e5:39:35:ef:89:43:d1:60:7b:7d:33:d6:b9:14:
c8:aa:76:db:1b:1e:f5:27:c5:57:1e:cb:f8:d4:02:
c4:a9:00:e5:af:c7:bc:4b:c8:13:23:a7:f1:c5:78:
5c:53:db:6b:57:c7:14:13:1e:94:85:97:4c:77:dc:
6e:0c:1e:e3:ce:bc:2a:da:9b:ef:56:05:7c:0b:6b:
66:8f:b3:a0:86:58:28:2d:76:5c:01:e5:2a:46:4f:
53:f6:ff:1d:7e:a7:c6:a7:d2:27:6e:ae:59:82:5c:
bb:24:bf:7b:05:a2:5a:6f:db:fd:d5:e7:a2:c3:92:
43:1b:5c:3e:10:c2:f0:1e:36:0a:08:73:e3:18:0b:
47:b5:44:e0:02:b4:b5:64:b4:2a:8d:33:2c:f3:c2:
dd:fd:ce:99:20:3d:6d:41:db:60:09:35:f1:7d:9f:
87:83:b6:67:6e:2e:cd:3e:f1:48:c9:c3:a4:55:5a:
62:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:64:24:42:A5:B3:36:D4:34:B3:05:2A:96:CD:80:39:2A:DA:19:70
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K2QkQqWzNtQ0swUqls2AOSraGXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.224.0/24
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
88:20:89:a8:99:94:64:5c:e5:56:5c:e3:5e:60:8f:33:1a:c6:
9e:fd:fe:7a:c4:61:52:cd:16:03:46:94:64:c6:f9:cf:0b:62:
51:0f:04:f3:8f:c8:e5:c9:43:8e:52:9e:ba:20:60:fd:67:2f:
03:0b:b8:d7:46:9f:05:d6:1d:b4:92:15:3e:6f:b4:fc:f8:d6:
85:95:11:25:4d:d2:df:9c:e8:80:b5:86:e8:d8:1f:16:0e:f7:
71:18:f8:28:b1:e8:e3:03:6e:31:af:57:61:52:54:c5:66:92:
7b:c1:d3:8d:d6:04:1e:45:fb:ab:fa:ad:99:c5:50:df:03:71:
51:82:91:07:9d:a9:f4:9a:55:e5:06:11:e9:93:81:66:1e:8e:
36:eb:23:af:3a:10:3c:67:ef:9a:10:45:65:c2:40:bb:4c:76:
17:c0:5c:75:72:9c:98:c9:60:4e:75:e2:5e:4f:b1:3e:27:fe:
37:0f:0f:a7:60:4d:0a:ef:db:cb:18:12:8e:43:65:b6:52:12:
b8:79:a5:7d:dd:ab:12:d4:13:b4:53:ce:91:44:28:bc:7d:82:
1b:20:05:a9:5f:c9:b8:87:f9:66:95:f4:14:01:3d:a0:96:b6:
e5:1d:e6:86:1e:e6:d0:49:7a:79:25:e5:2e:36:5e:39:6a:ad:
51:ac:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org