Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TezOm98A86k9_-L0Uuh5QMg6Gok.roa
File: TezOm98A86k9_-L0Uuh5QMg6Gok.roa (raw, json)
Hash identifier: yT20g6nWSpCh1XRoXPFcFCvPT5DnrZFeStXfymsnQKI=
Subject key identifier: 4D:EC:CE:9B:DF:00:F3:A9:3D:FF:E2:F4:52:E8:79:40:C8:3A:1A:89
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C13098A736AA015DFD8CB76BEA8B6EF3D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TezOm98A86k9_-L0Uuh5QMg6Gok.roa
Signing time: Mon 27 Nov 2023 23:07:21 +0000
ROA not before: Mon 27 Nov 2023 23:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
82.153.70.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.180.0/22 maxlen: 24
89.213.182.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
82.153.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 14:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:13:09:8a:73:6a:a0:15:df:d8:cb:76:be:a8:b6:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 27 23:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4decce9bdf00f3a93dffe2f452e87940c83a1a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:52:70:b6:99:2a:a1:6c:44:17:8c:d1:fb:
15:cd:50:d2:01:b3:06:bd:66:a1:c6:00:e3:b1:d3:
e3:f5:0f:7a:43:88:11:4f:38:26:01:5a:df:aa:6d:
7e:6c:29:28:58:15:7a:f5:2e:f8:90:9d:dd:53:cc:
69:54:d0:5e:df:be:dd:d2:01:c4:99:ec:af:9d:96:
79:50:e4:b1:e6:81:25:d0:65:2d:69:77:5c:5d:15:
ea:60:9f:64:10:9d:df:99:5a:c0:89:61:82:74:8f:
a1:17:ef:12:39:73:17:fa:49:15:d0:ed:ab:e5:e8:
39:c5:87:90:af:ec:2c:fb:b4:a5:2a:ae:1a:b8:a4:
b1:39:5b:39:55:e4:58:c8:96:95:6b:d7:6c:01:95:
1d:f1:da:b8:14:58:32:8f:c0:a0:30:ca:ba:19:d3:
17:0b:cd:95:8d:7c:cd:2d:50:00:85:03:3e:26:2c:
0b:21:8c:3e:9b:dc:40:08:24:ad:95:79:c7:3f:28:
c9:b1:c6:45:f2:b9:04:ab:9a:fa:2c:92:2f:4b:79:
ce:dd:9a:9a:f7:a1:f4:45:01:61:a0:8c:ef:66:b7:
13:45:29:24:b4:90:fc:2c:f9:f0:2e:6a:dd:11:3b:
d3:ae:2b:75:07:05:42:a8:a5:1a:c6:55:3e:db:29:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:CE:9B:DF:00:F3:A9:3D:FF:E2:F4:52:E8:79:40:C8:3A:1A:89
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TezOm98A86k9_-L0Uuh5QMg6Gok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.153.10.0/24
82.153.70.0/24
82.153.136.0/22
89.213.140.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/22
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8d:3d:8f:86:37:b4:2d:be:ca:02:4e:4b:87:2c:de:21:34:
17:f9:83:16:4e:e6:b2:50:ed:32:ab:f4:72:ec:e6:07:7f:99:
92:d4:12:78:2d:e7:34:0a:9b:b1:bb:cb:94:b7:69:e4:26:ec:
12:bf:50:25:e3:59:36:17:2a:1b:c8:69:11:d8:7c:7b:7a:fd:
25:c8:96:0b:53:a2:f2:ea:b7:6d:a8:cc:39:82:25:77:58:e6:
27:8a:15:00:07:26:4a:ee:ab:b1:8a:ec:b9:2a:0c:1c:da:81:
c0:51:0b:b5:98:09:7a:d8:f0:ac:36:46:2c:d5:b3:d3:e3:f3:
29:41:82:b9:f7:ab:f3:dd:b0:01:c2:d5:ef:b3:4a:f5:fb:71:
b8:b8:60:ef:43:e5:33:13:74:f6:9f:36:81:0a:10:2a:ab:c2:
c3:9c:c3:73:b8:37:bf:41:73:17:5d:f0:f1:54:84:9d:87:2d:
2d:43:aa:29:b0:71:76:3f:c2:46:46:89:78:aa:f4:9b:e9:88:
b2:1c:1b:64:4a:6e:e2:1e:66:ff:df:be:47:1b:f3:0d:0d:c6:
01:30:90:b2:2b:db:f9:18:d3:51:36:bc:fa:30:1f:47:c9:c7:
22:27:62:8b:33:a1:5f:5e:c6:12:d9:ad:42:41:87:54:82:1b:
9f:b1:b7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org