Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OoDgnTHnfusfvrdLG_JoSNXbBH8.roa
File: OoDgnTHnfusfvrdLG_JoSNXbBH8.roa (raw, json)
Hash identifier: qJ1ImnUVohRFWJPzmzW79jzhkHlSkVsEXUIeaTtWpBg=
Subject key identifier: 3A:80:E0:9D:31:E7:7E:EB:1F:BE:B7:4B:1B:F2:68:48:D5:DB:04:7F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E55A5144A29D34CAEB53317805260B040
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OoDgnTHnfusfvrdLG_JoSNXbBH8.roa
Signing time: Tue 19 Mar 2024 07:37:45 +0000
ROA not before: Tue 19 Mar 2024 07:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 82.153.225.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.131.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 12:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:a5:14:4a:29:d3:4c:ae:b5:33:17:80:52:60:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 19 07:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a80e09d31e77eeb1fbeb74b1bf26848d5db047f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:2f:e8:f9:38:8d:aa:bb:2c:65:93:e7:90:
cf:7a:23:2e:c5:26:74:45:a6:7b:2b:bd:d3:4c:80:
63:4c:1f:57:c6:c8:71:74:5e:73:04:b7:a3:10:01:
f2:1a:68:dc:46:c4:a5:16:66:b1:3c:33:74:d2:6f:
50:d7:9c:a1:24:20:82:9b:7f:9e:be:bf:2e:c6:30:
a7:b8:28:52:64:f3:5d:93:09:7d:10:74:7e:9e:7a:
92:1d:82:f4:43:be:5a:03:a5:05:8d:05:3f:aa:bd:
8c:36:d9:ef:64:b0:ed:ba:e0:78:1c:76:28:4e:f4:
9e:be:f4:96:aa:d5:60:bc:18:bd:01:c0:79:3b:13:
df:c2:c5:b9:d5:3c:11:15:48:b2:17:fc:74:0d:0d:
c8:94:b0:46:d4:5b:50:ed:07:73:a0:ec:d7:2b:f4:
0f:98:f7:21:e4:02:9d:b9:ab:b8:41:41:6b:36:a5:
74:9d:71:dd:75:85:e1:d6:4a:97:a1:0f:87:3f:bd:
fc:a5:95:99:2b:8f:47:51:f5:77:26:45:02:48:3c:
4e:b2:14:f4:61:4a:36:3a:f7:e2:2f:c1:44:b9:65:
1f:85:c2:09:9d:e7:44:2a:59:40:b1:e9:6b:63:d2:
0c:e2:0d:ad:4e:2e:9e:de:0d:89:28:5a:d0:d0:37:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:E0:9D:31:E7:7E:EB:1F:BE:B7:4B:1B:F2:68:48:D5:DB:04:7F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OoDgnTHnfusfvrdLG_JoSNXbBH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.225.0/24
89.213.43.0/24
89.213.131.0/24
89.213.145.0-89.213.146.255
Signature Algorithm: sha256WithRSAEncryption
45:a5:00:c3:2e:fa:19:b5:05:07:26:f4:2a:07:f8:a7:21:77:
f4:59:97:d9:b4:57:7f:93:36:e8:73:9d:06:b2:5b:3f:3e:59:
1c:23:91:83:78:26:1e:81:dd:ac:3c:47:57:31:a1:02:2f:d9:
86:ca:36:7e:a8:f5:2f:ba:ea:50:30:e7:a0:2d:26:6d:c1:b3:
e1:5d:b3:6a:48:75:3f:30:d9:9c:1e:e1:c8:f4:38:22:22:d6:
ce:c2:07:af:e5:81:99:21:84:c5:1e:ef:dd:9f:7b:a2:c8:9c:
0e:a6:1e:bb:bc:1c:94:b1:a8:60:96:ba:a5:33:07:cf:1a:e8:
9b:3e:90:34:33:6e:64:d4:8c:38:2a:6e:ec:13:bd:ca:77:a6:
03:e8:dd:e9:64:1e:26:11:01:5a:30:df:fc:35:53:b4:70:2a:
22:1b:12:e4:cc:00:0e:de:f4:60:ea:fc:c0:28:5f:25:a3:cd:
61:8c:2c:8a:a6:ad:20:ba:51:da:ec:03:71:55:4d:46:bf:61:
95:15:21:9f:be:2f:f2:c6:08:67:e4:00:44:6e:67:f3:06:f8:
03:ce:47:74:d5:9d:a8:92:5b:9c:bc:73:dd:04:00:ed:4b:df:
3a:f9:14:c9:79:aa:87:90:4c:2e:25:12:48:2a:2b:3e:49:68:
02:3a:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org