Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RDUglNrMTXV81spOe_SwgvGpIc8.roa
File: RDUglNrMTXV81spOe_SwgvGpIc8.roa (raw, json)
Hash identifier: 6NAl3PNQIeMkYXvBb/WBNtBpQYEv6nrycdthop7hhbo=
Subject key identifier: 44:35:20:94:DA:CC:4D:75:7C:D6:CA:4E:7B:F4:B0:82:F1:A9:21:CF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CE87D32D2CDCF8CFE86A09E7D0A5204E8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RDUglNrMTXV81spOe_SwgvGpIc8.roa
Signing time: Mon 08 Jan 2024 09:52:48 +0000
ROA not before: Mon 08 Jan 2024 09:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
82.153.245.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 09:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:7d:32:d2:cd:cf:8c:fe:86:a0:9e:7d:0a:52:04:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 8 09:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44352094dacc4d757cd6ca4e7bf4b082f1a921cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:df:f0:36:a9:85:2b:6c:6a:1f:de:dd:05:
a1:35:20:75:c8:36:db:2e:b8:a4:97:0c:c0:90:4c:
b1:33:d7:a9:38:87:dd:af:d9:79:25:c5:1a:e4:39:
27:7c:06:32:6e:1a:27:41:d9:51:b0:bc:71:18:cf:
ff:d6:6e:bf:98:ba:18:e7:f7:fa:21:e2:7c:21:e2:
1d:00:72:02:d5:69:4a:5c:62:65:8a:04:89:47:e8:
20:69:fc:d8:ba:a0:10:cf:07:28:f1:45:4e:4c:6c:
e8:e3:fa:72:28:24:b2:10:2d:b2:ee:49:5d:9f:2e:
4c:0b:40:4b:ab:dc:d9:91:30:96:66:d0:8f:a0:cd:
50:c7:81:12:47:48:97:69:7c:22:43:7e:d3:7e:90:
41:12:8b:d4:31:3a:f7:07:76:a7:02:28:d0:d4:da:
f1:ab:8c:25:96:6b:c4:ba:8f:b3:ba:fc:e2:3a:88:
50:8a:62:da:4e:17:f7:ac:21:74:60:8a:e1:32:ef:
df:c7:3f:88:cc:dc:e0:49:ef:b4:4f:b3:7a:d9:73:
55:93:19:a0:ac:2c:06:62:ed:81:99:cf:be:31:fd:
42:46:a3:28:94:03:99:a2:81:72:0c:14:07:36:a1:
1c:7b:64:d4:d6:1c:14:42:05:b4:62:01:0c:3e:0e:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:20:94:DA:CC:4D:75:7C:D6:CA:4E:7B:F4:B0:82:F1:A9:21:CF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RDUglNrMTXV81spOe_SwgvGpIc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.136.0/22
82.153.245.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ec:b6:70:cc:6d:40:18:26:37:66:b9:45:6e:69:ee:30:52:
98:bb:92:a7:a7:d6:09:77:6a:3c:60:3a:d8:9d:d1:06:fe:94:
60:72:b9:5a:5f:ac:68:f1:fc:55:a4:6d:ea:36:09:ac:e7:0a:
08:0c:d9:ee:90:e8:85:e6:9c:54:57:f5:66:8d:68:22:0f:17:
11:26:a2:88:a5:25:4c:f3:30:48:d3:72:6a:57:bf:c5:41:84:
c4:84:59:53:a2:47:3a:22:cb:bb:c5:d2:2a:35:68:db:59:bf:
ac:f4:6e:8a:e8:59:08:59:81:65:d9:49:10:9c:b8:42:19:aa:
d2:68:d2:66:9a:ab:8c:57:0e:78:b5:70:6b:c1:5c:94:f4:64:
48:48:56:b7:e5:94:47:2f:ff:70:99:8d:d2:b8:8a:f9:6b:27:
1c:52:79:8f:c5:a8:a4:05:a9:b9:31:e2:9e:fd:c3:72:9c:58:
ac:7d:b6:cf:f9:6d:05:24:a3:f2:a5:84:b7:a3:d7:87:9a:92:
11:12:b5:a3:c4:9a:2a:30:0a:ae:d5:df:f8:83:4d:18:36:4c:
80:dc:f2:24:7a:cc:00:51:52:27:a3:28:eb:e1:93:3b:fe:95:
6c:4f:75:d5:21:ee:95:4b:c9:24:52:cf:9e:b3:60:ec:d3:61:
07:ca:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org