Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SSQsSyeCeqNR00tU37zs1f9ft_0.roa
File: SSQsSyeCeqNR00tU37zs1f9ft_0.roa (raw, json)
Hash identifier: B4Zn5b7IddOw7Asv2RrWzrl32xzMF8L7PGeFEyolzhM=
Subject key identifier: 49:24:2C:4B:27:82:7A:A3:51:D3:4B:54:DF:BC:EC:D5:FF:5F:B7:FD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F5331655510516075FCEF0735F869B98C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SSQsSyeCeqNR00tU37zs1f9ft_0.roa
Signing time: Tue 07 May 2024 13:14:57 +0000
ROA not before: Tue 07 May 2024 13:14:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 82.153.1.0/24 maxlen: 24
82.153.245.0/24 maxlen: 24
212.38.68.0/24 maxlen: 24
212.38.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 09:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:31:65:55:10:51:60:75:fc:ef:07:35:f8:69:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 7 13:14:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49242c4b27827aa351d34b54dfbcecd5ff5fb7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:c2:e2:50:81:fc:64:fc:6d:5b:56:2b:d2:
77:08:76:e8:ce:b3:66:7d:ef:69:43:32:7b:68:cc:
c4:e1:4e:1f:46:2b:c0:fc:8f:7f:6b:5f:f2:28:12:
ba:48:3b:79:27:84:56:e1:ba:04:d1:cc:a5:8f:73:
f1:e2:df:63:66:85:cc:e8:06:8e:f6:af:ac:a9:ab:
39:26:23:12:73:d3:0a:19:1f:04:a5:8a:83:95:0c:
4b:78:09:05:f1:0a:e5:6b:3c:a4:64:85:6e:f3:56:
03:1c:ec:b1:26:01:81:f9:98:be:d4:66:d2:cc:a5:
dd:b5:ca:7b:fe:03:ca:86:a0:9f:f9:d6:a3:36:41:
55:96:f9:ee:08:d1:48:f4:56:92:e2:f4:51:ea:0f:
a9:04:8c:86:bb:d8:6a:d6:3a:74:98:9f:08:83:98:
b9:7e:3b:e7:23:1a:8d:b8:ea:3e:61:1a:5b:ba:7d:
57:3d:f9:ab:03:82:00:d8:a2:19:b7:52:e2:41:5e:
3f:b0:de:c6:40:a7:f3:e4:9c:2a:5b:ee:86:29:b9:
4d:a3:c6:a7:bf:cc:e9:55:30:74:30:1f:6e:15:89:
0d:ee:1a:f2:ba:04:7a:bc:85:f4:0e:28:00:97:d8:
ff:91:11:eb:b2:51:51:ab:c3:1e:f1:94:03:5b:59:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:2C:4B:27:82:7A:A3:51:D3:4B:54:DF:BC:EC:D5:FF:5F:B7:FD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SSQsSyeCeqNR00tU37zs1f9ft_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.1.0/24
82.153.245.0/24
212.38.68.0/24
212.38.74.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2e:0f:d2:56:0a:25:a2:b6:d9:ad:26:08:1a:1b:36:0b:c3:
1b:38:7c:c8:5c:bd:58:a7:87:f0:60:68:6c:32:d1:df:71:b8:
25:d7:50:79:33:bb:41:44:0e:bd:9f:82:e0:d4:f3:14:a1:d5:
82:d0:31:7e:d1:8d:d6:82:ca:40:ef:88:27:0c:24:82:06:98:
20:74:09:34:64:c5:9e:91:23:7f:64:ec:e4:00:47:4c:46:e9:
af:b0:0e:f2:90:da:bf:85:10:3a:ce:dd:60:7b:45:d9:63:12:
fd:03:73:f5:2a:dc:09:1b:8b:53:78:a8:94:4a:95:0c:8d:a1:
9c:3c:a0:88:0b:d8:bd:4b:b7:3a:2b:c1:39:e9:31:88:4f:e8:
33:06:b4:78:fc:f1:ba:36:cd:42:d3:84:09:ce:b9:ad:16:1f:
92:51:9c:b1:cc:72:fc:56:40:2c:ab:78:58:f3:c0:4f:c1:07:
b6:1f:63:c7:96:70:e8:19:90:df:82:bd:a1:e6:a9:94:e0:e1:
66:cf:f2:a2:47:04:61:a7:34:47:66:d1:13:76:24:f0:27:9d:
03:f7:06:97:19:53:f5:b3:30:d7:85:25:05:77:28:77:31:00:
1e:a5:59:ef:c8:37:36:ca:00:2e:cd:b7:81:e4:c2:df:9b:26:
ba:9f:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org