Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UnknDJSwNIj34uBxbmY6nvWQgQc.roa
File: UnknDJSwNIj34uBxbmY6nvWQgQc.roa (raw, json)
Hash identifier: sMKkxzxuoBW2W3OwEMStEiEZi8UpDMaH97MJZGz5tkw=
Subject key identifier: 52:79:27:0C:94:B0:34:88:F7:E2:E0:71:6E:66:3A:9E:F5:90:81:07
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D119BD144194F858616BEBB6F8899074C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UnknDJSwNIj34uBxbmY6nvWQgQc.roa
Signing time: Tue 16 Jan 2024 09:30:40 +0000
ROA not before: Tue 16 Jan 2024 09:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
109.176.253.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
82.153.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 16:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:9b:d1:44:19:4f:85:86:16:be:bb:6f:88:99:07:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 16 09:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5279270c94b03488f7e2e0716e663a9ef5908107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:75:07:bd:8f:93:b4:cf:d9:21:12:38:73:
e2:f8:cc:ad:03:5f:a3:ca:b9:a3:2a:e9:0a:69:a0:
4a:eb:e0:c6:af:7e:7f:70:60:f9:04:f8:84:52:4d:
fb:69:e3:e3:36:14:cd:8b:5b:3f:eb:45:e4:99:2f:
72:1d:3d:13:81:30:90:2b:22:44:6f:7b:3e:a4:ce:
44:86:8b:a2:0b:7a:04:af:18:5e:4c:03:e1:c2:43:
d2:82:98:ef:8b:68:e3:f9:74:51:98:20:78:3a:df:
8c:d8:9a:27:fd:5e:86:6c:c6:d0:d9:f4:b6:c4:d3:
0d:76:2f:cb:4c:63:a0:57:05:38:01:5b:f9:d4:9a:
a5:a4:b1:dc:46:34:08:64:2e:a0:75:8d:a9:41:d5:
30:1a:41:28:e7:14:c0:04:68:ee:ab:1c:30:24:2a:
bf:c1:a2:ae:a3:01:6b:92:a8:f4:21:70:1b:df:a6:
38:7c:47:2d:ce:ce:88:e3:ea:c4:9f:c8:de:2b:e6:
b0:af:73:1e:18:c3:08:d9:b0:c3:7b:b4:32:d3:1d:
26:78:69:7e:a7:19:9f:e7:c3:6e:c0:e8:e7:25:73:
b3:b8:3a:30:db:e6:d0:3e:81:ac:5b:5d:8b:df:d6:
0f:91:c9:c5:c1:6d:17:e7:cc:e8:bd:10:ad:f6:6e:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:27:0C:94:B0:34:88:F7:E2:E0:71:6E:66:3A:9E:F5:90:81:07
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UnknDJSwNIj34uBxbmY6nvWQgQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.136.0/22
82.153.220.0/24
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
109.176.253.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3e:58:1c:9f:61:61:38:db:3d:fc:9b:4e:2c:b5:50:76:22:
fd:a3:39:ed:1d:4c:f0:98:f1:f4:49:f6:f0:05:22:bb:df:dd:
36:35:f6:ec:8a:58:bf:a2:80:44:5d:47:18:51:ae:01:d9:fd:
0e:8a:1f:ff:e6:b5:a8:54:b0:f7:a8:77:80:60:5c:02:5a:d2:
f1:af:9a:21:44:79:3d:e7:40:f5:26:06:c4:be:27:88:63:e7:
12:fe:70:c6:41:45:af:e1:69:0c:7e:f7:aa:1b:2d:1e:b1:ad:
dd:d8:f1:98:43:4f:91:de:be:9a:b1:5e:ae:9c:23:e5:2f:68:
ea:34:18:76:80:31:e0:c9:fb:36:d2:85:77:9e:54:ee:6f:d8:
bc:5b:f8:7a:be:f2:85:58:3a:86:de:53:50:a0:b6:89:f9:e4:
19:99:1e:3d:4a:b4:3d:60:20:5c:9d:f7:c8:ec:d8:25:be:0d:
61:85:14:3e:6e:55:0a:0e:d4:2a:59:8a:7e:2e:2c:7d:f8:3d:
96:cf:04:ad:78:cd:e3:4f:ec:56:5a:36:44:35:96:60:85:aa:
c4:09:d1:dd:5e:3a:a9:e2:d8:c7:54:b1:63:8b:64:03:e2:dd:
15:6d:df:15:b9:93:6f:54:39:28:67:82:56:e1:49:b0:f0:d8:
50:30:0c:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org