Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y809VLt9-W9PkonwKMochVr86fg.roa
File: Y809VLt9-W9PkonwKMochVr86fg.roa (raw, json)
Hash identifier: LoHuph6b27A844Vh3tlXU2VPNOi0wAyqoRcc6HxDUpg=
Subject key identifier: 63:CD:3D:54:BB:7D:F9:6F:4F:92:89:F0:28:CA:1C:85:5A:FC:E9:F8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D35FD39FA1BC7F4CF55266FABE21F26FE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y809VLt9-W9PkonwKMochVr86fg.roa
Signing time: Tue 23 Jan 2024 11:03:24 +0000
ROA not before: Tue 23 Jan 2024 11:03:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.168.119.0/24 maxlen: 24
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:fd:39:fa:1b:c7:f4:cf:55:26:6f:ab:e2:1f:26:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 23 11:03:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63cd3d54bb7df96f4f9289f028ca1c855afce9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6b:93:3f:06:7b:b0:a3:8a:db:b8:ca:5e:70:
02:94:c4:56:3c:d4:52:28:84:c0:eb:15:19:ce:c0:
88:99:62:1a:dc:fb:95:ff:6d:96:b3:f0:e9:dc:08:
b3:7e:cb:b0:36:9e:64:ea:c4:23:f4:58:8b:96:63:
b3:42:1d:31:2f:b5:6b:ee:ce:e2:3a:8b:5c:7b:74:
86:04:f1:dc:27:81:f9:b0:7e:22:6c:11:71:6c:13:
bc:4d:78:42:00:52:2f:c4:17:a8:66:25:d1:f3:4c:
ff:99:4a:bc:4f:07:7f:ca:8b:6c:b7:4f:5d:45:4d:
da:66:8a:3f:fd:ad:56:33:fc:25:02:97:90:66:b7:
0c:42:1f:82:2b:94:90:03:4f:bb:c1:a4:dd:1a:bf:
98:12:08:d1:ca:89:b7:f1:81:a9:96:72:e1:7d:c1:
d7:6f:f5:35:c8:67:59:d2:d7:b2:17:43:de:f4:e7:
b2:4a:e1:49:91:60:14:c7:e5:50:16:e9:a3:e6:6e:
1f:eb:99:a5:64:c0:45:f6:2a:be:fa:03:1b:92:96:
0d:09:93:5b:2e:11:1e:53:8b:e5:a2:ff:a9:82:65:
dc:1c:41:7b:01:06:07:c5:a8:46:a7:7c:c9:3e:14:
4d:a7:f8:59:da:16:d0:9e:68:13:7e:ea:76:d3:fd:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:3D:54:BB:7D:F9:6F:4F:92:89:F0:28:CA:1C:85:5A:FC:E9:F8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y809VLt9-W9PkonwKMochVr86fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.50.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
77:63:1f:e4:21:71:3e:fe:70:76:75:dd:86:7d:8f:3c:fe:ae:
6c:d8:a8:54:05:8b:be:8f:41:34:b9:5f:ec:bc:d3:b4:e0:01:
7d:2b:ac:11:f6:76:b9:65:30:ed:ea:ee:cb:c3:5e:13:4d:31:
70:b2:1e:a9:48:ca:f8:08:fe:4a:f8:34:5e:ea:19:21:39:cf:
c8:88:b3:9a:ae:09:52:94:a7:2f:88:81:c6:49:5f:20:95:eb:
04:1e:13:c3:43:1a:3d:e8:ae:90:3f:6f:69:1f:a5:3a:10:ce:
82:c0:d1:18:a8:32:df:fd:d3:b9:28:df:d4:7c:01:c2:5f:b4:
65:82:d9:7a:86:61:cd:0e:c1:dc:c1:c6:83:5f:4b:e6:53:cc:
11:76:87:9e:29:97:11:ae:39:d5:01:b8:38:bf:70:81:da:f7:
76:4f:c1:21:9c:7e:ce:8d:fe:13:8a:46:2d:51:35:a4:92:40:
4a:19:07:61:7d:b2:76:17:d7:d7:53:5a:80:61:59:df:fb:ac:
3f:be:68:df:a7:d1:72:f0:59:13:99:eb:54:4e:99:60:44:dc:
c5:a8:3b:3b:e4:2d:98:85:dc:f9:8f:ca:a9:2a:78:81:f8:39:
da:da:bf:a8:cd:57:60:9f:8b:49:de:90:6e:90:57:07:92:fb:
09:25:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org