Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RknVIom-eilXz1VqDsZACaGand4.roa
File: RknVIom-eilXz1VqDsZACaGand4.roa (raw, json)
Hash identifier: PzknItR7HU3ITzaFbeXlVCrE82A1kvOKfDE3YHexKrk=
Subject key identifier: 46:49:D5:22:89:BE:7A:29:57:CF:55:6A:0E:C6:40:09:A1:9A:9D:DE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F59697DF3D7BE31C1EFAD2E494FE7CF3C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RknVIom-eilXz1VqDsZACaGand4.roa
Signing time: Wed 08 May 2024 18:13:56 +0000
ROA not before: Wed 08 May 2024 18:13:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.168.126.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.180.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
213.130.149.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 07:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:69:7d:f3:d7:be:31:c1:ef:ad:2e:49:4f:e7:cf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 8 18:13:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4649d52289be7a2957cf556a0ec64009a19a9dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:3e:e4:bd:10:29:48:2c:12:c3:9a:c0:2d:
83:7b:1e:d0:03:4d:ec:fe:4e:59:4d:1a:a0:b4:55:
c1:35:7b:30:e8:c9:44:5f:40:89:33:b3:d3:60:17:
65:43:c5:43:fa:1d:e9:8c:9d:7b:73:5a:14:11:0a:
5c:05:39:f5:0b:75:3d:85:7e:be:f5:a0:dc:e5:42:
7e:5d:a8:3b:75:aa:2d:28:be:2d:75:98:a5:ae:2f:
b0:68:17:1d:47:53:34:36:27:1d:06:3c:de:5d:cc:
1a:91:ab:f9:c1:04:f7:26:68:59:1a:a6:54:2c:68:
e7:49:79:f2:f6:a7:a1:2d:db:7d:64:79:63:6a:7d:
28:df:18:ce:61:bf:58:b1:ff:30:9f:93:ce:32:9f:
a2:b9:ee:69:62:20:d3:19:0d:73:2d:a2:b2:f9:cc:
20:0b:42:64:63:f3:45:53:d3:88:59:db:87:cb:27:
b7:6b:ab:40:d1:a5:8d:bf:38:78:a5:81:1f:14:27:
eb:ef:f1:8f:8f:0e:33:e8:f3:dd:eb:00:bd:13:e0:
d8:87:91:c0:41:72:06:ba:a4:2f:0c:83:a1:27:37:
11:67:3e:70:70:8d:5e:a0:1c:73:86:0b:ce:58:6f:
e7:0d:55:fa:bd:95:fd:e2:85:94:da:fc:c7:ac:4f:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:D5:22:89:BE:7A:29:57:CF:55:6A:0E:C6:40:09:A1:9A:9D:DE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RknVIom-eilXz1VqDsZACaGand4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/24
109.176.16.0/21
185.49.126.0/23
194.105.80.0/20
213.130.149.0/24
213.218.210.0/23
213.218.213.0/24
Signature Algorithm: sha256WithRSAEncryption
54:45:cb:15:79:df:c2:98:99:a9:e9:8c:9c:07:42:6c:b4:ad:
78:70:6a:2e:be:bc:cd:a3:49:0e:61:c1:29:f0:f7:79:6d:ea:
37:a5:6b:d2:53:45:02:ec:ee:be:97:9a:56:e1:a8:15:56:f5:
2e:86:dc:73:cf:71:27:99:61:aa:45:39:a0:bf:ff:cd:22:46:
50:24:fe:c6:2e:f6:d8:03:91:57:b9:65:e9:64:e4:de:82:34:
76:35:54:6f:29:1b:d0:99:e2:e8:9a:da:28:68:77:7f:e9:55:
ab:fb:8e:8c:61:fe:ed:27:18:ec:89:a5:fc:c4:7d:f1:d3:f7:
5d:78:7c:1c:16:48:6e:e0:31:3d:2c:ae:d3:e5:35:0e:a8:12:
b8:0b:7b:2d:89:01:60:b4:ec:18:a5:45:31:cf:f2:cb:60:b0:
ac:7a:c7:30:e5:f4:8f:70:58:d9:ef:e6:da:35:31:df:bd:a0:
11:4b:76:99:74:a6:66:2e:e1:77:18:39:7a:1a:29:8c:69:4f:
c2:9e:4c:18:c4:18:e9:31:0b:5c:e9:03:51:8d:68:b1:4d:1d:
ea:4f:7f:df:11:38:9f:64:ad:d0:ea:9a:5b:10:12:5e:97:5a:
fe:4c:a8:d8:4c:5d:4d:83:f5:13:8d:40:77:95:1c:1c:31:cb:
ae:5e:10:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org