Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/L6u-LPIgDmFYKxMzOrk6ja9RGxg.roa
File: L6u-LPIgDmFYKxMzOrk6ja9RGxg.roa (raw, json)
Hash identifier: srhAQNVRd3rvMCTZEXIR/Ei5zNkeeVuvz/pXO2yv/34=
Subject key identifier: 2F:AB:BE:2C:F2:20:0E:61:58:2B:13:33:3A:B9:3A:8D:AF:51:1B:18
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C7C3B8BA5C37AB61D75724062D7131043
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/L6u-LPIgDmFYKxMzOrk6ja9RGxg.roa
Signing time: Mon 18 Dec 2023 09:22:06 +0000
ROA not before: Mon 18 Dec 2023 09:22:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 109.176.208.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:3b:8b:a5:c3:7a:b6:1d:75:72:40:62:d7:13:10:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 18 09:22:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fabbe2cf2200e61582b13333ab93a8daf511b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:7a:d7:ff:62:e5:34:5b:31:c4:54:10:71:
d8:ed:d6:2b:c9:3a:81:59:e7:a3:32:c2:7b:1c:36:
4a:e0:ef:70:d2:c9:20:42:5b:3f:54:c9:1e:66:f7:
bb:32:e3:81:3e:8f:f0:60:02:2e:64:5b:a3:85:12:
c3:19:8d:b3:91:2e:91:24:64:1a:79:0e:61:08:24:
23:d6:15:4a:4a:46:20:32:2c:d3:70:d1:f2:e0:92:
a7:98:03:16:c5:7e:c2:f1:89:f3:30:c0:cd:23:02:
a8:43:d7:ec:8c:80:5a:93:04:23:a8:17:50:f3:09:
6a:6b:c2:ac:56:e5:7f:68:1f:7e:73:39:60:e8:4b:
c6:a4:ff:5e:fc:60:fc:4e:bd:2c:4c:31:8f:ec:bb:
5b:56:a5:03:52:16:f5:de:14:e3:a3:e4:34:83:11:
2f:be:ea:91:64:c4:08:95:e3:49:e4:00:aa:6c:26:
07:57:77:31:d3:d7:c6:61:9f:b0:53:53:bd:5b:ca:
f5:ad:72:bb:bb:6d:a4:4d:61:18:98:ca:f4:57:87:
a8:78:ac:f4:4a:8d:96:ae:d4:c6:d2:49:8b:be:af:
e0:31:f7:49:f8:81:53:9f:3b:c0:25:a5:f5:95:a0:
14:41:94:89:df:d2:d1:63:98:a7:8c:ca:71:23:5f:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AB:BE:2C:F2:20:0E:61:58:2B:13:33:3A:B9:3A:8D:AF:51:1B:18
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/L6u-LPIgDmFYKxMzOrk6ja9RGxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.225.0/24
89.213.43.0/24
89.213.145.0-89.213.146.255
89.213.161.0/24
109.176.208.0/24
Signature Algorithm: sha256WithRSAEncryption
27:04:00:50:fe:be:5c:a2:bd:7c:44:39:db:17:50:dd:c2:bd:
e5:14:0a:9b:39:31:b0:73:d6:9d:3e:0b:f5:f7:95:ec:ec:62:
67:9e:cd:fe:d8:37:03:34:6b:12:d0:83:d2:de:81:69:2f:21:
82:52:23:f9:e6:a0:1b:15:2a:8e:d8:2b:c9:61:da:d9:a3:05:
c8:f2:37:de:21:55:fe:5c:c5:6a:3e:ae:96:3f:55:09:11:2f:
db:50:db:4a:1f:b3:00:4a:11:f4:7b:a7:57:71:df:be:20:0b:
e4:33:14:5e:02:26:9f:10:e8:dd:8a:e1:9b:00:ea:0c:dc:4d:
f4:b7:ee:e7:4a:16:b1:43:71:68:1d:a4:d2:88:25:b5:93:01:
f6:ec:ce:c8:8d:61:f3:6b:89:b0:cb:7d:e5:c3:34:75:b6:30:
0e:14:77:f6:69:83:5b:c3:85:29:f3:90:7d:8d:27:06:e6:3d:
3f:4e:c4:db:a5:57:06:30:f1:c2:2c:0a:be:b8:95:ef:4c:28:
7e:e1:34:ad:cd:9d:17:2f:91:5f:e2:a5:59:c3:06:f7:a2:24:
7d:66:35:aa:b1:8e:ee:66:9a:fe:af:e3:c3:09:a2:cc:60:3e:
43:c5:e8:9e:19:dd:68:15:16:af:dd:33:e1:6d:03:2f:df:4f:
85:ef:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org