Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_5m9mzxCnAqMM4zeCIaO-io4Uzc.roa
File: _5m9mzxCnAqMM4zeCIaO-io4Uzc.roa (raw, json)
Hash identifier: d6cewHxBc3KaKf6SzvhLg7/bScyvuFAPXIkJZTP0RAI=
Subject key identifier: FF:99:BD:9B:3C:42:9C:0A:8C:33:8C:DE:08:86:8E:FA:2A:38:53:37
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0186B635BFCB119DA14D3B6AC8CAF0142EE8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_5m9mzxCnAqMM4zeCIaO-io4Uzc.roa
Signing time: Mon 06 Mar 2023 09:17:01 +0000
ROA not before: Mon 06 Mar 2023 09:17:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 82.153.136.0/22 maxlen: 22
82.153.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Mar 2023 09:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:35:bf:cb:11:9d:a1:4d:3b:6a:c8:ca:f0:14:2e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 6 09:17:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff99bd9b3c429c0a8c338cde08868efa2a385337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:f0:df:4c:a1:d4:06:7f:40:ab:95:0a:1f:
e9:d3:a7:8f:f9:a2:47:10:62:6f:a8:4e:b7:ce:b9:
02:d3:96:5a:ac:a3:ce:eb:44:95:ef:6f:bc:da:25:
3e:62:2d:4e:8d:58:7d:56:f9:8d:2e:c4:48:a5:d9:
4b:d1:93:e9:81:ab:77:c1:61:db:b8:f2:41:45:32:
3b:c3:12:a5:2e:bd:92:78:37:19:e3:61:2e:01:c4:
e0:f2:53:61:95:74:a0:25:f2:08:53:3b:28:2e:f9:
81:ec:f0:56:95:af:12:ee:8b:47:24:3c:a9:44:47:
b6:be:4d:55:8f:ff:b2:f9:d6:fd:60:c4:20:80:44:
db:32:d9:2f:ed:2f:bd:48:b5:1b:49:99:7d:a5:ce:
11:92:d5:71:fe:a6:94:f2:bd:0c:1b:1a:b1:a2:10:
b3:6c:26:d6:e2:2c:e8:08:5b:0c:66:f6:d8:00:20:
87:ba:59:f4:92:25:2d:de:3c:cc:ee:07:e0:f7:08:
8e:b1:08:99:5d:7a:b7:0c:42:af:54:80:ac:e5:34:
3a:40:80:54:18:d6:88:f9:d1:e0:c2:72:41:64:a5:
1c:ce:ae:be:20:e6:64:d2:26:a8:16:9b:7a:08:1a:
f5:84:1a:44:90:da:96:56:e7:38:aa:02:a8:b1:8b:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:99:BD:9B:3C:42:9C:0A:8C:33:8C:DE:08:86:8E:FA:2A:38:53:37
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_5m9mzxCnAqMM4zeCIaO-io4Uzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.136.0/22
82.153.248.0/24
Signature Algorithm: sha256WithRSAEncryption
08:96:11:ff:a5:2b:69:f4:f9:96:98:26:2a:eb:37:c1:ea:04:
9c:e3:f4:dc:55:84:e1:c6:43:4f:a1:10:ac:c1:54:03:c4:64:
ee:bf:a4:76:73:97:8f:39:82:cf:43:ee:b8:7c:6b:46:bd:31:
9a:39:6f:28:c9:ac:12:4f:36:45:db:fd:8b:64:fa:ca:2c:ee:
6b:4c:1a:1b:0a:40:a8:00:04:37:4c:01:14:bc:d6:f4:53:9f:
01:a5:35:0c:15:85:d5:27:31:15:67:48:e0:8b:92:65:4c:a4:
81:da:f1:7f:49:69:cd:47:5b:a3:73:b0:70:f7:64:49:b7:2b:
92:ab:a4:4e:62:b0:77:e4:8c:1d:74:81:08:f1:2e:53:fb:89:
2f:b4:40:76:b9:5b:b1:c8:ee:bd:ba:cf:2a:58:26:65:9b:bd:
d7:5e:eb:33:fd:c3:bc:9c:ba:44:9f:84:71:d4:90:b8:a6:57:
22:a7:a8:4c:31:be:98:86:41:13:fb:5b:ff:b1:e4:26:ca:2e:
b1:41:a2:f7:fe:08:53:73:05:00:cc:4e:a6:c7:99:82:bc:71:
16:65:9f:be:26:db:51:57:f8:4e:f7:fc:81:32:b4:29:6e:52:
85:ce:70:35:c5:d7:1d:37:38:30:bb:ae:59:0b:17:ff:27:af:
f6:ac:99:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org