Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Vi9NYpYsf5nFapo5FnvLi_lIl6c.roa
File: Vi9NYpYsf5nFapo5FnvLi_lIl6c.roa (raw, json)
Hash identifier: JmTJnqxAWUyySMuo28knaYq8VQYGQoO5hp+f4f/LDxU=
Subject key identifier: 56:2F:4D:62:96:2C:7F:99:C5:6A:9A:39:16:7B:CB:8B:F9:48:97:A7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CF7D139A73DFBEA3F2FEE6C1A9F3C98A2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Vi9NYpYsf5nFapo5FnvLi_lIl6c.roa
Signing time: Thu 11 Jan 2024 09:18:53 +0000
ROA not before: Thu 11 Jan 2024 09:18:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 11:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:d1:39:a7:3d:fb:ea:3f:2f:ee:6c:1a:9f:3c:98:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 11 09:18:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=562f4d62962c7f99c56a9a39167bcb8bf94897a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:71:ec:b2:a4:17:5d:13:7d:22:f5:83:98:
3c:32:96:33:68:4f:a7:2f:d5:48:ea:ed:a0:36:6d:
b2:a2:11:f8:72:7e:7a:1b:b9:c7:44:b4:b7:6a:74:
7a:3e:d6:b1:ac:11:24:ba:7a:25:d1:19:19:e9:f8:
21:ba:99:77:c1:f8:26:c0:12:c7:97:3f:2c:ba:bc:
ab:dc:7a:e0:c1:46:e2:e2:20:16:d8:11:61:54:20:
c8:3a:5d:89:d2:b0:85:2f:a0:c1:ba:5b:f3:a4:dc:
bc:87:5c:bd:e3:f5:72:b5:ff:ce:b1:16:88:e5:5b:
56:27:4f:4f:b3:c2:00:4e:53:5a:14:51:dc:cb:59:
db:e2:48:92:ef:a2:2a:6a:82:80:15:e7:83:f0:d0:
8a:82:f7:f8:9f:f7:af:c5:ca:c3:0e:fe:ef:2d:43:
05:93:16:f5:b7:39:ad:fd:e7:55:88:e2:57:71:c3:
c9:40:c3:ee:7a:64:30:02:22:69:3c:93:18:18:75:
a5:13:65:d6:2e:92:e2:3b:1e:04:6e:2f:a7:96:8c:
b6:7e:52:49:10:91:9c:bd:17:00:98:cd:8a:77:0f:
0f:cf:6a:16:b0:aa:ad:74:44:07:dd:cc:2f:11:e5:
45:d7:12:a3:94:ad:bc:f9:0f:d6:a5:ce:b5:67:cd:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:4D:62:96:2C:7F:99:C5:6A:9A:39:16:7B:CB:8B:F9:48:97:A7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Vi9NYpYsf5nFapo5FnvLi_lIl6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:12:00:b2:8b:c3:bf:fc:dd:34:c4:15:fe:2d:69:32:f6:e3:
f1:ed:10:f5:ff:08:23:b7:8c:88:d5:76:a1:da:64:f5:0d:86:
d9:a8:04:4c:cb:5e:e2:49:0c:db:47:65:4a:f3:64:8d:87:98:
b8:09:7a:d6:a4:b6:3b:2a:f8:43:dd:23:18:63:17:eb:ee:f1:
44:26:bf:0a:c8:e7:d0:40:02:28:73:c0:82:38:bc:ec:11:24:
d2:62:78:7b:e0:d9:93:e8:58:5a:e0:fa:e7:5a:1f:2f:b7:f8:
66:d5:b0:6c:25:22:76:7b:ba:72:56:bf:ed:0a:8f:1d:01:6b:
45:d4:7e:65:38:f7:c0:97:47:fd:6b:53:69:0e:66:f2:e4:bc:
ae:d1:37:fb:f7:95:50:9e:35:dc:2c:30:bd:c9:78:65:34:bf:
0d:68:53:a6:a8:42:79:4d:40:c4:da:c4:c4:04:e3:40:e9:4f:
a3:fe:d0:3d:50:08:f0:24:a4:df:4d:80:1d:c1:01:35:bf:52:
a4:a3:4f:e8:6c:8e:96:07:f1:af:31:e9:37:7b:aa:27:a1:cb:
86:4a:87:2e:42:3d:da:53:32:0a:19:c5:72:f9:a3:99:51:f0:
a4:ad:65:13:96:37:8c:a2:ce:35:82:a9:de:ee:ec:aa:95:2c:
d1:25:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org