Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R3YIhV_JKuR7bWg274ov1WA1CjM.roa
File: R3YIhV_JKuR7bWg274ov1WA1CjM.roa (raw, json)
Hash identifier: F4Gbf+M8vER+7c4llZIBAe92HgHhtqiapFV4iNf4rp0=
Subject key identifier: 47:76:08:85:5F:C9:2A:E4:7B:6D:68:36:EF:8A:2F:D5:60:35:0A:33
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC60582581891C80913B13E4ECEECA577
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R3YIhV_JKuR7bWg274ov1WA1CjM.roa
Signing time: Mon 01 Jan 2024 17:14:58 +0000
ROA not before: Mon 01 Jan 2024 17:14:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 82.153.228.0/23 maxlen: 23
82.152.176.0/23 maxlen: 23
82.153.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 08:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:05:82:58:18:91:c8:09:13:b1:3e:4e:ce:ec:a5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 17:14:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=477608855fc92ae47b6d6836ef8a2fd560350a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e5:e8:ac:9a:ee:a6:65:c8:5d:57:8a:ec:2d:
8b:5e:3a:8c:20:a2:86:d4:f4:ca:7f:dc:a2:75:40:
ac:14:39:1f:29:30:af:34:65:49:5f:5e:5a:e4:5f:
d0:30:88:63:64:01:1e:3d:6a:f5:ba:ae:0f:5f:52:
44:d3:81:4e:b9:23:66:d1:89:af:2e:1a:2c:b9:31:
13:61:95:99:7f:7e:d2:62:9b:90:a3:38:59:1e:71:
c8:46:40:bf:ce:89:be:0f:d0:81:24:4a:61:ab:60:
80:d9:3f:b6:b8:6e:e9:dd:8d:75:9b:9e:64:f0:58:
7c:e5:b1:0a:1d:49:06:c3:d2:d0:b1:98:9a:7a:e4:
8f:f8:d2:c4:95:2e:48:42:74:0e:88:23:4d:a0:4f:
f7:aa:41:8e:f9:bd:ac:e0:73:f2:22:81:a9:f5:a4:
d8:41:87:eb:53:38:22:6b:ba:89:db:2c:5d:17:e9:
4c:da:56:88:d6:da:63:92:a3:09:a2:7d:85:df:af:
2f:ad:01:89:2f:67:98:2e:28:eb:a1:8f:8b:fa:67:
16:82:ad:f2:a5:a5:9f:57:2a:ba:4a:8c:78:ea:9b:
e1:8f:5b:0f:08:cc:da:f4:7a:cb:56:10:06:e1:95:
90:90:4a:25:ac:31:0f:2a:2d:48:74:46:81:f5:5c:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:76:08:85:5F:C9:2A:E4:7B:6D:68:36:EF:8A:2F:D5:60:35:0A:33
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R3YIhV_JKuR7bWg274ov1WA1CjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.70.0/24
82.153.228.0/23
Signature Algorithm: sha256WithRSAEncryption
33:08:f0:67:8b:92:de:c4:cb:8d:f2:61:62:b8:41:08:fe:01:
50:3d:2b:c7:ab:a6:b2:da:1c:7a:8b:aa:3d:c1:59:6c:7a:9c:
73:92:86:a8:a0:b5:07:7a:75:f6:d9:f5:c1:83:e7:76:58:27:
5c:a7:05:dd:d3:d2:4d:51:fe:d1:2e:ad:a3:cb:46:90:7b:7a:
5e:28:01:02:99:25:5b:e4:b7:4c:38:6a:fd:11:92:ed:cd:4f:
8e:18:a3:8d:d1:da:bb:07:ad:51:89:c8:52:90:4e:9b:22:96:
7d:55:90:97:42:2a:27:54:b0:20:61:1c:e3:84:57:ea:11:07:
56:5d:e1:bb:28:e2:80:32:b0:f3:06:c8:28:54:56:f4:82:2a:
50:9e:1e:49:90:20:48:8e:fe:4a:f5:f4:01:30:2e:8e:5e:cf:
33:65:91:a1:c4:c6:3f:ef:fa:66:e3:c7:22:a2:2f:fa:be:ad:
5a:be:ac:0c:62:bf:fb:5c:1a:46:c9:0e:72:31:98:43:58:d7:
e8:30:69:6f:44:85:5e:7c:7c:b1:a3:3a:e5:98:66:42:7a:9d:
71:6b:75:9f:c5:72:db:5e:c0:20:e3:20:65:99:80:0b:6e:88:
1d:d3:0c:2f:50:26:3d:08:47:be:f6:52:db:9f:b8:99:b0:2a:
dc:91:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org