Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Vo-efVCSIOpDwsuFYxshZdG32h4.roa
File: Vo-efVCSIOpDwsuFYxshZdG32h4.roa (raw, json)
Hash identifier: taeHy3zsQswC/KX9nXIMaxc+q4KmwUHwanbJeVj54wA=
Subject key identifier: 56:8F:9E:7D:50:92:20:EA:43:C2:CB:85:63:1B:21:65:D1:B7:DA:1E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D598657E34048480E9808410C8C74209C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Vo-efVCSIOpDwsuFYxshZdG32h4.roa
Signing time: Tue 30 Jan 2024 08:39:53 +0000
ROA not before: Tue 30 Jan 2024 08:39:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 82.153.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 08:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:86:57:e3:40:48:48:0e:98:08:41:0c:8c:74:20:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 30 08:39:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=568f9e7d509220ea43c2cb85631b2165d1b7da1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:f6:cd:48:71:37:58:c8:4a:9e:97:20:f3:
c8:dd:29:96:cb:34:eb:2a:d9:77:17:1b:5d:4d:d8:
56:32:ce:2c:21:b6:25:17:42:93:53:41:a2:37:a0:
da:36:9c:5b:a2:8e:76:56:51:1f:59:36:11:1a:46:
6f:f5:ac:36:0b:58:e0:46:fc:84:33:3a:06:43:a9:
30:aa:96:3c:6c:44:0c:68:03:5c:f3:36:4c:a7:11:
56:d2:46:fa:d7:4f:76:c8:c0:52:22:93:41:8d:7b:
9f:13:91:18:ba:38:95:df:01:5e:ee:ca:ad:dc:1d:
d1:17:45:31:e3:f7:a5:49:86:b3:a9:a5:7e:c9:83:
c3:a4:77:98:2f:c1:39:6d:5f:c0:98:10:6f:57:74:
75:5b:8e:40:b9:83:e1:df:10:7d:a3:36:46:d8:3a:
cb:eb:b6:6c:a3:a6:11:69:a5:2b:4c:f7:7d:1c:70:
5b:a0:2d:27:4e:b6:56:c6:4b:df:d4:fd:b3:d8:c0:
23:3e:6d:3a:b5:bb:ca:5a:79:03:0e:6d:58:0a:c0:
df:3e:00:c7:03:4f:bb:05:f8:7f:92:a7:44:e3:d4:
be:2c:56:6a:33:e6:d9:ee:1b:bf:b6:96:e0:6e:d4:
72:97:7e:22:16:67:2c:9e:51:a9:6e:22:4f:35:7c:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:9E:7D:50:92:20:EA:43:C2:CB:85:63:1B:21:65:D1:B7:DA:1E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Vo-efVCSIOpDwsuFYxshZdG32h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.220.0/24
Signature Algorithm: sha256WithRSAEncryption
05:bd:ce:2f:ed:e5:83:e5:55:3d:0d:e2:1b:78:4f:e7:92:4c:
40:53:8c:ea:c9:99:de:d1:36:62:dd:6f:df:76:a6:74:c1:8e:
57:f3:ce:3b:76:6b:fc:23:86:47:51:e9:da:02:28:83:e5:f9:
d1:9d:c6:41:fd:b3:b5:ce:40:cc:ee:44:f1:4a:1f:d6:54:3c:
10:b0:1d:3c:58:08:68:66:18:dd:07:94:05:98:37:04:d8:e4:
e6:1e:59:44:ea:71:32:33:0b:80:23:0a:24:b0:3b:1c:8b:e9:
94:2d:a2:6e:96:cd:45:83:e2:d3:5f:4e:a3:26:d9:d4:45:3a:
2f:8a:08:01:42:66:7c:0a:48:b9:af:2a:14:2d:3f:5a:c0:62:
09:86:1e:99:24:59:ad:77:dd:dc:c3:6c:66:f0:a4:e4:c8:74:
47:de:47:7c:29:0b:6b:4c:65:27:b8:1f:bb:af:cf:37:82:0e:
38:8f:5f:62:0c:65:83:ad:38:06:4f:c4:17:d0:e6:94:98:1f:
cc:8f:84:d2:8b:4e:6d:43:58:e9:37:2f:61:d5:12:22:17:ca:
3d:91:e8:9e:55:bb:42:5b:72:a3:5f:14:73:b3:bd:62:10:64:
8a:cc:b9:2e:bb:96:7e:b3:dc:47:e9:f2:43:5a:d8:54:2f:a6:
e3:32:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org