Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_znwVHfS1Wbw6AADBACKAay87QE.roa
File: _znwVHfS1Wbw6AADBACKAay87QE.roa (raw, json)
Hash identifier: FfB5Eadaw9hZGZddtdYa3KC7jWMRWWPDbnAEPiaXNiA=
Subject key identifier: FF:39:F0:54:77:D2:D5:66:F0:E8:00:03:04:00:8A:01:AC:BC:ED:01
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EB83E4C5FB4721E8A2D5EBAB9953314AA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_znwVHfS1Wbw6AADBACKAay87QE.roa
Signing time: Sun 07 Apr 2024 11:07:54 +0000
ROA not before: Sun 07 Apr 2024 11:07:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59895
IP address blocks: 82.163.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 13:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b8:3e:4c:5f:b4:72:1e:8a:2d:5e:ba:b9:95:33:14:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 7 11:07:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff39f05477d2d566f0e8000304008a01acbced01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:0f:0e:69:7d:63:92:53:65:29:cf:a5:40:
87:4f:0c:92:f0:53:8b:fb:9a:ff:81:1f:94:be:5c:
ba:13:7f:d8:1a:6b:ec:64:ea:a5:a7:cd:fc:4f:5b:
9c:0e:f5:e5:17:c3:4d:5a:58:b2:83:d3:19:e9:77:
10:50:32:8e:c8:cb:4f:a4:9f:1f:0e:af:31:1b:8e:
51:22:9e:67:7a:68:49:c2:42:c8:fc:a6:4e:b2:61:
25:25:9d:cd:a4:1e:fb:36:b2:85:df:ea:b6:31:69:
40:7c:a3:c2:68:76:96:b0:3f:66:a5:e5:e9:78:59:
1c:6e:6c:5f:77:b7:6d:2d:1b:c7:1c:2d:c3:ea:15:
44:6c:c2:f1:ad:2b:0c:63:ec:0d:e4:0b:82:a5:34:
46:1d:6a:d3:6f:81:ab:66:d0:77:21:97:c5:e8:b9:
9d:18:5d:e5:15:3e:b4:36:63:48:79:8e:74:52:73:
f5:37:64:09:08:3f:fa:4e:e6:55:6f:59:4e:c8:82:
38:d2:11:66:a0:c9:1f:21:8a:ff:2a:ba:03:57:27:
d0:17:8d:b1:d2:44:ba:ee:59:47:41:3a:d0:15:14:
5d:d0:9a:09:13:2b:97:70:fa:ce:a8:72:c6:9b:58:
99:e4:ea:b8:ed:3e:d3:4b:7f:a8:ae:ae:4a:92:d8:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:39:F0:54:77:D2:D5:66:F0:E8:00:03:04:00:8A:01:AC:BC:ED:01
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_znwVHfS1Wbw6AADBACKAay87QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:34:44:1d:a0:31:d9:8a:a8:cd:f0:58:34:8c:4c:c9:be:83:
b8:d4:47:d5:ad:26:8d:be:cd:4d:43:2f:64:5e:4f:c9:e2:57:
54:7e:be:25:d0:ec:3f:9b:4e:70:b9:69:bc:09:ed:3b:46:e9:
4e:89:15:84:c6:41:65:79:c8:52:b7:94:43:98:83:b9:40:26:
68:47:39:a7:b8:42:a7:c4:4e:13:6e:e2:6d:2e:a3:88:77:9d:
17:d9:dd:f2:b7:65:03:c8:40:1c:44:b3:63:27:c3:2f:d7:e9:
65:0a:95:4b:2a:28:45:21:20:e7:6f:68:bd:56:c2:ba:55:d4:
1b:fc:71:57:8f:b6:75:08:94:f0:52:f1:45:ec:4c:bb:7e:46:
61:e7:3e:d7:e9:1b:4f:0d:b1:7e:ef:d4:30:7e:3d:5c:81:55:
8e:da:d7:34:74:96:c3:9f:70:f7:dc:6b:36:20:72:cf:3c:e0:
7b:e2:6e:3c:86:f8:48:12:c6:37:63:73:b7:2a:7c:b8:69:3f:
9e:66:5a:c0:83:7e:0b:3c:b1:be:90:8a:02:c9:5c:d4:17:f6:
9f:6a:c7:bd:62:6c:de:7e:57:59:32:99:96:e7:6d:9e:60:37:
d9:aa:03:cd:a6:ec:f7:f6:d2:5b:41:6d:f8:29:ef:54:ce:f2:
1c:57:51:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org