Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/al2836yqnlatnqGy183zj21AfAM.roa
File: al2836yqnlatnqGy183zj21AfAM.roa (raw, json)
Hash identifier: YTfw+EcWF7qiw2X1a0Oib1wciZBg8D3f/pBaj/AgIws=
Subject key identifier: 6A:5D:BC:DF:AC:AA:9E:56:AD:9E:A1:B2:D7:CD:F3:8F:6D:40:7C:03
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018595DA7C174C22DAE7E0763044D1365102
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/al2836yqnlatnqGy183zj21AfAM.roa
Signing time: Mon 09 Jan 2023 09:26:41 +0000
ROA not before: Mon 09 Jan 2023 09:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 82.153.240.0/24 maxlen: 24
82.152.176.0/24 maxlen: 24
82.152.177.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
82.153.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 15:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:da:7c:17:4c:22:da:e7:e0:76:30:44:d1:36:51:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 9 09:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a5dbcdfacaa9e56ad9ea1b2d7cdf38f6d407c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:b5:09:c0:4a:d1:2d:11:b4:d7:44:62:7c:
14:c6:d1:28:1f:3b:49:16:ac:63:9b:af:63:ac:55:
a4:8a:ad:34:cd:fe:51:0d:19:1d:24:ec:8e:35:cd:
68:9d:13:04:3d:64:72:71:84:35:1d:14:59:12:18:
54:6f:c0:d7:6c:c8:6b:22:cf:91:8b:df:9f:96:ae:
96:42:4d:c6:01:f6:46:fc:dc:79:eb:ff:25:70:c6:
ca:44:57:fc:58:2c:9c:38:11:cb:46:6d:ea:25:ac:
27:e7:1e:b8:1a:b4:08:0e:22:bb:8f:59:94:da:61:
0e:65:61:65:f0:71:8b:da:ca:c4:bc:fe:b8:b4:7d:
ed:2b:d0:06:5d:f8:34:be:18:db:71:6c:ed:3f:4f:
53:7a:a2:c6:9c:d1:fb:56:4c:18:a5:75:5c:04:30:
e8:e9:5e:5c:54:af:a5:09:9c:bc:c6:ed:20:6f:6e:
70:27:e9:c4:eb:2d:f2:3a:5d:46:2a:ad:97:0a:d3:
50:61:0d:f7:cd:de:83:57:d5:df:de:df:18:28:ef:
be:3e:83:9d:1a:c5:35:70:85:fc:40:63:95:ef:09:
49:7f:ac:8a:4d:cf:d5:8d:24:cf:bb:04:2d:23:e9:
5c:43:0b:15:37:54:9b:77:8c:6a:fb:29:e4:6b:e9:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5D:BC:DF:AC:AA:9E:56:AD:9E:A1:B2:D7:CD:F3:8F:6D:40:7C:03
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/al2836yqnlatnqGy183zj21AfAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.68.0/24
82.153.240.0/24
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:60:3c:d8:e9:55:76:42:7a:f8:c0:fa:c0:4a:59:1a:6f:b8:
1d:12:a5:60:8f:04:48:47:81:29:0d:4f:32:98:93:cb:c5:f7:
d0:b5:2c:bc:87:54:bb:8c:3f:0f:7f:68:36:3e:3c:6e:e9:5a:
cf:29:b6:37:00:70:98:d2:4f:3e:ec:d4:b7:49:86:83:1d:2c:
26:ea:1b:91:61:8d:6c:4a:a6:c0:ec:3d:72:4a:5f:89:f4:4e:
77:3d:53:4b:1c:56:ed:4f:16:2c:a5:e0:08:71:cc:41:2c:df:
84:ac:cd:35:5d:92:e1:a7:07:a3:fb:64:6d:45:18:16:be:22:
b6:8b:98:27:79:2e:21:f7:36:ab:7e:e7:9f:5c:55:ad:7e:d3:
4e:77:2b:0d:df:fd:86:98:91:9c:a8:80:37:34:b1:7b:aa:48:
44:80:22:f2:81:ae:66:06:7f:6b:68:bd:18:eb:fa:bb:c8:fd:
d8:72:e6:66:7a:81:bc:28:41:b7:f1:5d:af:d3:11:af:fd:e3:
2e:33:7f:f7:32:5c:05:cf:b2:cf:d4:4b:b4:0a:bc:9c:d6:63:
d1:58:da:26:09:81:90:77:75:02:b2:0c:60:99:78:7c:d8:9d:
6d:ab:47:14:1e:54:1b:93:5c:0f:27:e9:a3:09:52:67:64:d1:
62:37:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org