Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M5xqLaQxE6q1be1q1YN3HKR4zJI.roa
File: M5xqLaQxE6q1be1q1YN3HKR4zJI.roa (raw, json)
Hash identifier: Hf5Baroyc16RYlEF1l3PYEJqdCkomOzmNGfS7EXjaYw=
Subject key identifier: 33:9C:6A:2D:A4:31:13:AA:B5:6D:ED:6A:D5:83:77:1C:A4:78:CC:92
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E582E2DDAC796AAD22EB198C1DB86A2E8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M5xqLaQxE6q1be1q1YN3HKR4zJI.roa
Signing time: Tue 19 Mar 2024 19:26:45 +0000
ROA not before: Tue 19 Mar 2024 19:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 82.153.32.0/24 maxlen: 24
89.213.224.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 25 Mar 2024 16:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:58:2e:2d:da:c7:96:aa:d2:2e:b1:98:c1:db:86:a2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 19 19:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=339c6a2da43113aab56ded6ad583771ca478cc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:49:ac:10:66:4c:d3:e6:a9:b0:65:71:95:
e9:70:2f:81:de:2f:fb:f6:de:9b:3e:97:29:17:b1:
28:71:68:40:27:d5:2a:cb:8b:02:5f:07:4a:a3:c7:
9e:e6:0d:7b:49:48:c7:5f:46:bd:18:59:95:35:20:
5f:1b:4a:6c:96:8d:ea:ad:47:20:ce:b1:18:a9:17:
71:2d:ca:1e:5b:ae:d7:85:3d:63:b5:e2:66:97:fd:
0b:a2:62:43:4e:1d:37:bc:02:3e:48:1b:b6:e3:83:
13:b1:2d:fc:8d:c6:c5:36:5e:4e:f9:d6:36:c6:ed:
7b:40:1a:84:34:85:9f:64:09:94:e2:d7:7d:07:d6:
3b:26:46:85:ef:15:fc:d4:08:bf:0e:cb:85:08:41:
74:9c:aa:75:ab:6e:73:39:81:8a:95:8e:ea:ab:28:
7f:09:9c:f8:6b:79:69:da:4e:34:d6:0e:77:f0:e8:
60:2e:53:6f:cb:a4:35:6c:dc:0d:5a:1d:e6:07:4a:
4a:45:14:e8:3b:09:a3:10:5c:32:a3:a1:6c:27:35:
4e:41:5c:65:19:f7:e8:bc:9c:ac:e0:29:f9:11:47:
ef:5b:1a:22:c6:d9:59:98:72:ec:47:dd:fe:d6:a5:
48:d1:57:18:e1:2a:b2:e8:d4:89:22:00:38:c4:91:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:6A:2D:A4:31:13:AA:B5:6D:ED:6A:D5:83:77:1C:A4:78:CC:92
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M5xqLaQxE6q1be1q1YN3HKR4zJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.32.0/24
89.213.224.0/23
Signature Algorithm: sha256WithRSAEncryption
61:a3:9f:0e:05:e2:5c:9a:44:00:06:cc:4f:6f:d0:18:15:43:
77:99:f8:ed:6f:9c:2f:61:6f:9e:c0:b6:a8:77:5b:86:b3:af:
a3:4a:c6:00:ac:07:f1:f6:58:c7:98:49:58:10:a9:49:eb:b8:
7c:2f:98:58:1f:4c:95:07:a5:f8:7b:02:09:80:91:d4:09:c3:
18:f3:8a:4f:88:a6:c7:ac:64:a8:c4:1e:86:c3:39:85:87:0a:
ab:63:de:61:9e:89:15:a4:ee:ad:38:71:5b:19:b9:94:59:c0:
f2:d6:93:77:a4:2d:b2:b9:0f:0e:05:36:75:be:17:6c:12:f2:
60:51:6f:70:58:ba:60:3c:d0:32:66:84:08:05:07:a8:78:51:
a3:c2:ec:b2:69:10:cc:9e:d5:84:14:30:43:e7:87:34:83:9f:
f9:fe:84:0b:58:d6:03:45:b6:b6:9a:26:e7:c8:82:af:17:68:
9c:63:a2:9d:50:f4:ac:55:9b:1e:e3:ca:3f:f4:39:4e:aa:7d:
27:a6:7d:a0:96:6c:e8:01:4e:da:79:90:ec:43:65:5b:14:4a:
8f:5f:a2:b7:80:7a:7d:fe:3b:4f:e1:d6:65:bf:6d:f1:91:6b:
75:6e:ee:93:2b:0b:17:6c:52:0d:c5:e2:8b:f1:54:d9:96:47:
4c:3e:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org