Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cKtIcqR2tQCAWpoKNzexJT75_fc.roa
File: cKtIcqR2tQCAWpoKNzexJT75_fc.roa (raw, json)
Hash identifier: AjSQa+JDG7jRTG/72JvpfNiEpHW0eqNnvgOGLUc4sQ0=
Subject key identifier: 70:AB:48:72:A4:76:B5:00:80:5A:9A:0A:37:37:B1:25:3E:F9:FD:F7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC34945927377315BBE78619C6BACBAA1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cKtIcqR2tQCAWpoKNzexJT75_fc.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 09:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:45:92:73:77:31:5b:be:78:61:9c:6b:ac:ba:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70ab4872a476b500805a9a0a3737b1253ef9fdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:3f:49:7e:51:73:3c:c9:43:b9:63:95:76:
ec:09:84:6e:82:7d:a4:a8:72:58:5a:cc:0f:cb:a7:
36:9e:74:15:67:ab:9a:30:5b:02:30:86:84:fc:99:
6a:b0:cb:04:82:1b:2d:af:c4:a0:1a:61:ef:9a:fd:
e0:86:3e:6e:35:a3:47:03:44:85:dd:e5:75:0f:2b:
aa:8b:09:f6:c6:62:a2:a1:e1:22:2c:a4:02:ca:66:
68:d2:ff:c3:dd:54:46:05:6c:91:55:e0:8a:ab:e8:
ed:cf:45:59:4a:25:d7:51:82:1d:cb:3f:bd:be:0f:
a4:ed:fa:60:ba:2b:24:ec:c8:b3:91:8b:a2:f4:18:
c0:92:1c:06:f9:9c:7b:cd:0c:36:ce:0a:2d:76:5c:
a3:cf:e8:3a:cb:d9:e8:86:eb:7e:5a:af:9f:3e:33:
c2:82:93:6b:4a:0e:8f:b4:d7:a5:2f:91:8a:5e:a2:
ac:ce:0b:63:87:a9:35:a0:46:0f:c4:43:95:d3:87:
20:39:fa:10:98:72:bd:a0:1b:9f:2d:35:16:ed:53:
10:4b:f4:21:43:b5:71:22:1b:9e:b1:1d:7d:1b:5d:
c6:e1:92:f1:c6:31:99:f2:34:1d:dc:f2:74:e8:4b:
2e:93:db:30:3f:c2:34:fe:69:8c:05:9c:9d:f4:7f:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AB:48:72:A4:76:B5:00:80:5A:9A:0A:37:37:B1:25:3E:F9:FD:F7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cKtIcqR2tQCAWpoKNzexJT75_fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:55:40:e6:77:29:0e:32:82:3d:ae:21:0a:ad:a0:b8:53:11:
25:49:81:36:be:82:56:4b:bb:d2:ec:f8:4f:a4:04:25:b5:2f:
28:30:c6:e6:9d:d7:17:33:e7:bb:6a:cb:78:35:c4:bb:4f:e6:
36:d5:fa:cc:01:45:70:c8:63:1c:bd:0f:a7:ce:bb:07:2b:38:
40:aa:ba:0a:a8:8d:44:79:8c:9b:c9:1f:71:36:85:d9:d0:aa:
2e:f4:1d:a9:6e:83:55:94:ea:b8:48:19:5b:87:91:40:1c:4f:
5a:9c:d3:95:cb:9c:2f:f2:a5:70:f7:34:08:14:69:37:ac:a9:
c0:21:60:7d:f8:df:c5:03:94:e7:53:b9:ee:89:99:81:eb:2a:
cb:07:a2:44:88:cd:4c:b7:4f:1e:74:55:fd:a5:8f:9d:04:e2:
1e:54:94:a8:00:7f:59:b1:61:11:59:77:b9:4c:3e:1c:b6:2b:
c0:c4:6a:1e:93:9a:ef:c6:75:d0:0c:3e:ab:d2:81:7c:95:3e:
bd:7e:79:8e:2c:ce:d4:ff:11:67:b2:13:7e:b3:f7:05:df:e1:
a7:8c:17:9d:0e:e2:66:e1:bc:4d:4b:9b:0c:67:a1:a8:5f:e7:
a8:5e:0d:d4:7d:16:b9:a5:e1:8a:03:d2:b8:03:12:c6:b6:d0:
74:0f:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org