Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cJ8biTbeMOfHi4Z7FqWWY009Xo8.roa
File: cJ8biTbeMOfHi4Z7FqWWY009Xo8.roa (raw, json)
Hash identifier: VPs18y7IkCgpAxq0lERfvZmOcu16L6gDpJyCWwTz3LE=
Subject key identifier: 70:9F:1B:89:36:DE:30:E7:C7:8B:86:7B:16:A5:96:63:4D:3D:5E:8F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A929F07F80FA2753A063CF649540B0441
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cJ8biTbeMOfHi4Z7FqWWY009Xo8.roa
Signing time: Thu 14 Sep 2023 07:36:50 +0000
ROA not before: Thu 14 Sep 2023 07:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 82.152.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 07:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:9f:07:f8:0f:a2:75:3a:06:3c:f6:49:54:0b:04:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 14 07:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=709f1b8936de30e7c78b867b16a596634d3d5e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:d8:09:29:35:e5:92:30:77:76:17:c4:82:
80:7f:74:81:a7:b2:52:e7:78:b6:45:c7:60:49:6a:
35:ec:8e:d5:92:88:d2:f6:a3:c9:2c:ef:1b:92:34:
2f:06:f9:73:17:45:a0:f1:fb:74:f7:8c:25:b3:55:
0c:1d:25:95:2f:e8:fe:ec:b6:e0:68:ce:04:d5:9a:
63:14:fd:cf:3d:1f:66:0a:6a:12:78:b3:b6:ec:17:
37:ac:b4:bb:f6:d3:c8:9b:10:de:e1:ac:59:9c:9d:
0c:2a:5b:3c:12:d5:86:48:f1:17:89:9c:ba:28:d2:
0c:23:36:c6:42:95:ff:09:f4:5c:e7:1e:28:6a:de:
02:2e:eb:ce:d4:95:06:36:f0:73:62:77:86:e2:de:
b9:22:38:18:14:39:c2:ab:98:49:3d:74:85:ff:47:
e3:38:1c:ec:91:20:72:e4:fe:50:6d:4c:d5:cd:65:
56:8c:65:b8:9b:c5:0c:73:14:0a:dc:63:8d:6d:9d:
23:34:57:cf:fb:30:4d:ba:3c:48:23:22:23:0c:29:
a8:1f:29:06:f0:23:0a:79:15:37:1f:9d:b8:81:0d:
d4:c7:8e:b1:aa:d3:0a:0b:eb:c0:7e:68:94:e2:b2:
4e:1b:b0:b8:53:f6:15:a7:8f:0c:7b:4e:7e:04:e2:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:1B:89:36:DE:30:E7:C7:8B:86:7B:16:A5:96:63:4D:3D:5E:8F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cJ8biTbeMOfHi4Z7FqWWY009Xo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:03:1b:c6:ca:e8:5a:d5:8f:f8:cc:7f:65:80:43:81:61:55:
24:8b:60:92:1b:8b:12:66:80:a3:1a:9e:da:29:18:19:1a:f9:
d3:af:cb:ee:b7:ff:47:c3:7b:19:89:fd:a4:6d:02:3c:dd:15:
71:5e:a0:6f:2a:bf:c8:e0:8f:ed:de:9c:8a:3c:28:ba:c7:1e:
fe:d6:0a:aa:2e:23:c4:ac:b7:c9:3b:1d:7f:47:ad:5e:6b:6c:
21:ff:ab:15:bb:d6:0a:3c:04:1e:0a:77:e3:e5:6d:02:af:f7:
1e:99:19:f6:f5:95:8f:6d:33:10:73:6d:84:04:a3:61:8f:5e:
f8:e8:5c:39:f5:73:c9:8f:b3:b1:8b:59:e9:ed:6c:4d:ff:8d:
fe:59:da:c8:7d:74:2f:5d:93:2b:0e:d0:dc:12:13:65:58:cd:
5c:5c:17:88:1b:b0:2b:e0:ab:60:f4:cd:66:da:b7:2f:b8:75:
1a:80:26:60:56:50:c1:cf:17:27:de:82:b9:0f:17:91:f8:d2:
ba:fd:38:2f:a9:35:f3:af:45:62:00:0e:b2:be:39:6b:e6:d4:
a8:64:d5:78:cb:36:01:bd:88:29:db:61:c0:74:7e:5a:89:e5:
4e:68:63:97:73:fb:c8:3d:44:07:6b:0a:24:8c:24:ef:58:69:
4c:c8:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org