Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QKbjAzlUp8euXS3vSlhJQL3pMrw.roa
File: QKbjAzlUp8euXS3vSlhJQL3pMrw.roa (raw, json)
Hash identifier: VSvL9RGl//FqFNqJvh81n51LyVMeeeSnVO6nSiBLo24=
Subject key identifier: 40:A6:E3:03:39:54:A7:C7:AE:5D:2D:EF:4A:58:49:40:BD:E9:32:BC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D40CF6D0630A87834F8ABBC2267F9F6E3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QKbjAzlUp8euXS3vSlhJQL3pMrw.roa
Signing time: Thu 25 Jan 2024 13:29:12 +0000
ROA not before: Thu 25 Jan 2024 13:29:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 82.153.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 12:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:cf:6d:06:30:a8:78:34:f8:ab:bc:22:67:f9:f6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 25 13:29:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40a6e3033954a7c7ae5d2def4a584940bde932bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:bf:02:50:a2:f2:bc:84:e4:c6:84:c2:d5:
54:0a:d8:20:83:b5:24:4d:a0:db:8b:5e:83:42:9a:
ea:7c:20:a2:8d:77:e2:f9:e5:5e:c0:48:52:d4:e7:
45:8f:f0:3a:dd:78:51:8f:7f:43:38:2b:65:52:81:
66:ab:8a:1b:3e:84:f6:ff:93:3a:27:6e:ab:a3:72:
aa:7b:bb:27:31:18:bf:a2:e9:7f:d6:dc:f0:e4:65:
30:f9:21:42:d3:1b:03:98:32:02:ee:35:24:4b:58:
a0:8d:91:48:50:6b:d4:27:ca:75:37:fc:70:63:00:
22:f8:b2:07:3c:be:da:29:57:87:9c:85:e9:0e:5a:
ed:e3:c4:c2:50:cc:10:a9:28:cf:5a:e3:3f:25:e9:
63:78:0e:32:83:b6:30:98:b4:2f:69:55:e9:4a:d7:
f6:0a:f0:56:5e:53:b8:f3:f0:72:3e:fe:77:f5:05:
16:f6:28:a3:1f:36:1d:b6:ff:bc:a6:94:bb:88:76:
d7:16:19:e9:17:55:8f:2b:b7:97:8a:61:b7:b9:02:
77:b3:41:c4:a1:5b:c5:13:c8:f6:1f:fb:c0:9f:81:
33:99:d4:19:42:66:5c:f3:d1:c4:4b:fa:92:25:b0:
55:f9:95:51:0f:df:91:b8:ab:57:b5:12:3f:dd:78:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:E3:03:39:54:A7:C7:AE:5D:2D:EF:4A:58:49:40:BD:E9:32:BC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QKbjAzlUp8euXS3vSlhJQL3pMrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.1.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8c:81:a9:d8:af:67:5c:3b:80:b3:42:40:7b:c5:63:94:7b:
9c:c3:25:81:1c:c3:1e:2c:5a:8f:10:a3:c3:bf:19:4c:64:d0:
34:2c:9e:9a:2c:e1:8a:11:73:72:a8:44:b3:46:36:08:d9:a8:
0a:98:e2:69:5e:9d:44:d4:ad:71:8d:57:f3:42:5e:6f:4b:c5:
e6:8b:20:8d:b1:80:41:23:3a:d0:7c:41:5f:3d:6c:87:06:ba:
4d:f2:a6:11:f3:bd:17:94:06:a4:1c:0f:3c:86:a8:1c:b2:0c:
cf:41:6a:64:ef:87:b0:1f:a8:c4:69:21:38:2a:21:87:cd:84:
dc:8b:24:e7:6f:e9:ed:cb:1f:33:c5:f3:36:6a:33:cf:f6:17:
46:c0:84:80:7a:a7:73:90:48:18:15:b0:60:97:a4:b5:e9:f7:
11:27:d8:4e:3d:dd:96:42:b9:9d:38:42:0c:76:94:e0:cb:cb:
13:fe:d0:91:62:37:45:31:96:4f:2f:af:3b:83:0e:72:ba:a7:
52:45:af:e8:02:b2:bf:8a:b7:f5:c0:16:37:b8:a5:71:d2:2c:
6f:dd:64:10:34:bd:0f:73:f5:e0:52:cd:47:12:dd:b9:c9:ad:
59:65:f3:ea:71:02:9a:c9:1d:32:64:2b:50:4c:35:3c:d7:d0:
50:a4:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org