Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LcdJSF6hQZgzmuM89YBjqbZYSko.roa
File: LcdJSF6hQZgzmuM89YBjqbZYSko.roa (raw, json)
Hash identifier: Z7Qih7lnbAXZWn3BQE+VYA0Gj5XGGWoCgT6PPLSdmtM=
Subject key identifier: 2D:C7:49:48:5E:A1:41:98:33:9A:E3:3C:F5:80:63:A9:B6:58:4A:4A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D35F95F74D5F65A9E53425DE36E86E466
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LcdJSF6hQZgzmuM89YBjqbZYSko.roa
Signing time: Tue 23 Jan 2024 10:59:11 +0000
ROA not before: Tue 23 Jan 2024 10:59:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.228.0/23 maxlen: 23
82.153.242.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 16:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:f9:5f:74:d5:f6:5a:9e:53:42:5d:e3:6e:86:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 23 10:59:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dc749485ea14198339ae33cf58063a9b6584a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:9e:cc:29:9a:19:fb:08:a6:03:5e:c2:ef:
b6:14:56:96:ba:1c:9d:7b:9f:67:f4:05:7a:3e:eb:
68:d9:1b:2e:18:1c:a6:a4:cf:4d:d8:ed:fd:32:cf:
b4:5c:c3:83:46:9a:a6:cf:eb:1a:2f:ee:06:6c:1e:
7f:65:7c:2e:53:b2:6f:9c:33:f7:ff:cb:7a:72:10:
48:03:a3:af:e1:78:25:ab:6d:90:23:9d:74:82:2f:
fa:96:0e:dc:7a:48:2b:c2:60:de:cc:08:67:55:16:
f3:d6:5c:97:e7:46:73:00:b6:01:ee:32:25:06:94:
f9:ad:a8:5f:33:6a:c6:0d:50:17:d9:8e:0f:14:52:
93:45:20:bb:25:f2:f7:2d:1a:e6:da:d6:3e:57:02:
e2:78:4f:29:1c:ab:9d:fe:b7:a3:d8:a7:87:58:58:
f2:be:42:f0:8d:f6:7b:83:41:08:db:17:b4:9c:66:
6a:c8:7f:33:aa:b4:10:e1:8e:d5:7a:bc:63:88:a8:
6e:ea:72:07:db:a9:07:46:84:b3:43:61:fe:33:6d:
0f:03:06:ec:89:56:29:bd:d5:06:73:1b:cc:f5:7e:
2f:53:6d:3e:e0:65:e8:62:99:09:68:58:7f:6d:18:
ce:70:79:b7:59:00:c4:a6:d4:b4:df:fb:a1:21:37:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:49:48:5E:A1:41:98:33:9A:E3:3C:F5:80:63:A9:B6:58:4A:4A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LcdJSF6hQZgzmuM89YBjqbZYSko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.228.0/23
82.153.242.0/24
89.213.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9f:b2:25:df:98:6f:ab:48:3b:d3:a5:00:c7:7b:3d:ff:d1:
2d:8a:b9:5c:15:e1:72:43:c8:2f:8f:83:d0:3c:c4:84:ca:22:
3e:ba:63:1d:7d:be:25:64:a1:41:f8:94:de:3f:4e:0d:f1:37:
16:11:8f:a5:5f:9d:64:56:d7:7c:0b:a2:d9:5f:47:fd:6f:e6:
94:68:a7:57:a5:3b:a2:df:dc:0e:06:00:24:5c:ac:2a:c4:89:
14:60:3f:0b:29:b2:2c:af:fb:ad:21:04:02:4c:d5:60:0c:07:
54:84:d6:4b:5e:03:a2:da:50:59:f3:ff:67:bb:56:75:73:51:
89:e3:1e:9d:4e:c5:64:f4:ec:59:b5:6a:a0:48:62:7b:47:d9:
65:48:42:c2:a1:fb:0c:db:71:f8:5e:01:44:c0:77:47:a4:2e:
65:a6:11:67:06:f7:f0:7d:97:80:7a:ec:a0:2f:2f:9c:af:e8:
22:0f:eb:81:eb:5b:82:85:98:ab:50:8f:1a:23:eb:66:d1:21:
5f:e2:a3:f4:7a:fb:b6:f9:03:c3:7a:80:09:51:f4:d9:8b:78:
b7:76:3c:ef:0c:92:b0:fd:f2:ee:c7:a8:c8:1e:71:ce:3d:68:
f0:1d:43:2e:32:2c:08:6a:fc:24:93:84:8e:8f:2a:ce:87:31:
a9:a3:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org