Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XaqwNR2eL3FrMDvQk1ugRNOFrgU.roa
File: XaqwNR2eL3FrMDvQk1ugRNOFrgU.roa (raw, json)
Hash identifier: 7XWnMeqtOmLtBnckes+xtZ2zGTmvMDR5dwFwoA5TTD8=
Subject key identifier: 5D:AA:B0:35:1D:9E:2F:71:6B:30:3B:D0:93:5B:A0:44:D3:85:AE:05
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EEB23E7D529A0DF4B08380135FADE61E4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XaqwNR2eL3FrMDvQk1ugRNOFrgU.roa
Signing time: Wed 17 Apr 2024 08:19:42 +0000
ROA not before: Wed 17 Apr 2024 08:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.245.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.130.149.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 07:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:23:e7:d5:29:a0:df:4b:08:38:01:35:fa:de:61:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 17 08:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5daab0351d9e2f716b303bd0935ba044d385ae05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:61:a3:9e:5f:79:35:8d:34:bf:bc:c2:1f:
3c:e6:2f:51:9f:37:dd:82:c9:48:72:ac:96:95:01:
7b:22:62:9f:5d:a3:d2:69:f3:78:37:b2:2a:a4:55:
1d:e5:01:61:ea:a8:2d:1b:21:12:b2:5c:9d:10:ca:
35:74:52:f8:af:e2:a8:41:71:4e:71:5a:89:8b:d1:
81:93:0e:4a:51:3f:5c:15:92:af:5a:ce:e5:3b:ce:
53:63:5f:ca:79:1e:ea:78:f5:27:7e:cc:dd:32:5f:
c7:45:a7:89:02:9e:fe:3a:8e:4a:b9:25:02:07:31:
91:03:d0:df:5d:bf:cd:f6:32:26:40:db:70:83:93:
36:1c:cf:5e:91:fc:f7:68:81:ca:ec:fa:c4:01:f2:
27:70:42:37:3d:78:f6:b6:91:0e:7b:c7:15:6c:33:
9f:03:d5:6d:da:5f:5e:c6:99:90:4f:7e:df:0d:0a:
76:6a:64:d7:67:91:ee:b0:d8:35:fe:84:cc:d5:2a:
ce:98:db:be:75:b0:a6:03:b0:ea:80:d9:09:d6:69:
77:9e:81:c8:1b:72:25:f6:5c:c9:d3:b0:f4:65:18:
db:f4:95:de:9e:59:9b:56:21:dd:be:57:4f:a1:ec:
2d:5a:14:c3:ea:e3:77:fd:06:05:cf:0c:d9:1f:b7:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AA:B0:35:1D:9E:2F:71:6B:30:3B:D0:93:5B:A0:44:D3:85:AE:05
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XaqwNR2eL3FrMDvQk1ugRNOFrgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
82.153.245.0/24
89.213.133.0/24
89.213.139.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.130.149.0/24
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1b:f7:e1:fb:94:40:c0:1a:f8:f9:7e:d4:8c:65:6a:5b:3f:
67:04:72:23:f1:0e:a0:d3:a8:63:5a:0d:47:4a:14:13:13:38:
3d:d4:52:f0:17:30:7d:0a:08:13:5c:62:c5:50:79:cd:f1:09:
3a:16:64:5a:a1:54:4b:51:3a:99:73:49:4a:85:8d:8d:fb:4a:
e6:e4:f0:8d:a2:12:02:a2:98:76:5a:0a:8c:f2:2e:bd:c8:b6:
ee:86:12:40:8b:c2:0e:ce:11:70:0c:28:32:1c:e8:d9:92:d8:
7b:b0:5e:31:94:0d:73:7c:80:16:7b:11:e9:ee:62:9c:1d:0f:
b3:90:15:82:1f:cc:af:0f:de:58:a5:29:8f:6e:11:a2:b6:b1:
77:d3:ed:11:3c:8e:df:59:84:fb:d6:65:5f:74:d3:44:b8:74:
2e:e7:66:a5:4a:d7:a8:5b:6f:3f:a8:62:1f:fa:89:31:20:d9:
8b:a1:f9:fe:48:82:04:cc:99:ae:0e:ae:53:f5:e7:42:f8:ce:
48:0c:3f:a4:e8:87:f3:d2:78:76:e7:a3:be:49:fd:84:0e:7d:
00:6f:1e:77:86:21:f5:c0:e2:9b:c7:da:f1:7d:d1:f7:02:93:
4f:d1:08:f3:21:5e:15:d7:21:bd:1d:48:c4:df:0b:09:71:9c:
34:83:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org