Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RNLddf6PnNdkbpb6Z1SUu_8bYW0.roa
File: RNLddf6PnNdkbpb6Z1SUu_8bYW0.roa (raw, json)
Hash identifier: i75WuNZas6MR53Vqe6q4KnxOeVYeQlvOfbJdaumua70=
Subject key identifier: 44:D2:DD:75:FE:8F:9C:D7:64:6E:96:FA:67:54:94:BB:FF:1B:61:6D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EAEB840D7B2BC9E54419A00896A6F3BF8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RNLddf6PnNdkbpb6Z1SUu_8bYW0.roa
Signing time: Fri 05 Apr 2024 14:44:54 +0000
ROA not before: Fri 05 Apr 2024 14:44:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.133.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.130.149.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:b8:40:d7:b2:bc:9e:54:41:9a:00:89:6a:6f:3b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 5 14:44:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44d2dd75fe8f9cd7646e96fa675494bbff1b616d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:61:ea:d6:96:7f:b8:a5:cd:92:b5:85:2e:38:
59:8b:b5:3a:de:57:19:f8:4e:15:5a:d6:58:8d:7f:
e7:c6:1b:41:3d:31:9f:aa:4a:bb:34:4e:2b:50:9f:
51:3d:e1:11:f4:76:4b:c1:49:93:34:f5:50:3d:1c:
3b:6a:1d:e9:95:0b:15:c0:6e:6e:d2:ec:8f:19:f3:
73:d3:ce:df:b1:c5:27:cd:87:db:62:cf:9b:03:e8:
8f:8b:68:ac:ac:07:27:af:d8:e5:45:cf:12:d2:c9:
19:12:4a:bf:b3:7e:6f:c1:d0:9b:bc:6e:fc:58:c6:
07:dc:d8:7e:8f:21:c6:2d:63:4c:5c:42:58:5d:59:
dd:db:32:e7:72:8a:59:ec:b4:f0:d2:e3:85:fe:21:
68:cb:47:c8:e5:c5:f6:b6:28:98:56:ab:2d:c0:b1:
39:72:a3:03:fb:80:07:4f:2f:75:06:f9:12:94:48:
b9:64:24:cc:2f:62:4a:78:c7:87:b1:51:38:0c:1d:
e9:89:d2:31:42:8f:19:7c:dd:59:0f:b8:ba:0f:8d:
26:0f:08:5c:89:76:d2:f7:1d:c5:a1:06:4d:e4:81:
60:b1:80:58:44:d0:dc:28:72:f3:ca:6b:f9:a4:c1:
2c:3d:54:a1:79:1c:96:2f:59:61:e2:db:4d:82:e1:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:DD:75:FE:8F:9C:D7:64:6E:96:FA:67:54:94:BB:FF:1B:61:6D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RNLddf6PnNdkbpb6Z1SUu_8bYW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.133.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.130.149.0/24
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7d:13:7d:84:56:09:6a:b3:8c:df:0b:03:d0:27:af:af:a0:
4b:34:da:81:53:b0:7c:80:fe:ba:32:6a:fb:60:38:b8:7a:a4:
ad:e2:53:c0:88:79:05:2b:73:87:13:94:ae:77:ed:f5:92:a0:
2d:1d:6e:c5:5c:98:7d:fb:ab:74:cc:7b:1e:31:d4:ee:ef:08:
6d:22:c7:1a:7d:97:ae:3a:26:7e:8f:e6:62:1a:db:1b:62:be:
23:aa:a0:c7:9d:c6:08:a9:3a:70:c5:be:c4:86:7d:e3:37:49:
96:b1:b8:4b:83:4b:75:4b:3f:9d:95:7b:8f:0c:82:08:f0:c1:
42:11:10:8a:40:8b:35:8e:0c:3e:de:85:46:ae:e0:53:00:79:
e1:25:78:53:b8:ca:cf:10:78:e7:16:17:4f:e4:58:c4:d9:8e:
82:05:d5:35:33:f8:6a:10:ee:66:9c:8a:bb:46:ff:89:01:57:
70:d7:ea:ec:54:b1:57:02:3c:66:4f:8d:a5:0f:38:71:ac:70:
9c:79:fb:c2:3f:2b:a4:d6:08:d9:ea:6e:8f:07:d1:a7:78:3f:
9e:a5:7c:69:b1:27:62:ad:63:68:59:8e:65:4f:a4:05:13:a9:
9f:b3:2e:51:fa:c4:e4:d3:42:9f:58:89:b8:03:3f:f0:65:48:
c8:f9:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org