Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cbNr2as5Gwy82jNHSOACDg_oKkQ.roa
File: cbNr2as5Gwy82jNHSOACDg_oKkQ.roa (raw, json)
Hash identifier: mxthFYqBoswKSZpiWAQd8gOYmn8x/KFJoRlT7CGf7fM=
Subject key identifier: 71:B3:6B:D9:AB:39:1B:0C:BC:DA:33:47:48:E0:02:0E:0F:E8:2A:44
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F81BA5CA2B45035F9E15F784C4B964D45
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cbNr2as5Gwy82jNHSOACDg_oKkQ.roa
Signing time: Thu 16 May 2024 14:07:05 +0000
ROA not before: Thu 16 May 2024 14:07:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 82.153.225.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.99.0/24 maxlen: 24
89.213.131.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
109.176.239.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.225.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 07:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:ba:5c:a2:b4:50:35:f9:e1:5f:78:4c:4b:96:4d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 16 14:07:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71b36bd9ab391b0cbcda334748e0020e0fe82a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:8f:3c:73:22:fd:6f:62:9d:6a:fe:75:0e:
70:7f:a6:4b:15:e8:8f:69:9e:3d:b1:76:a6:f8:b2:
97:79:b1:5e:2c:bc:b4:a1:33:38:be:27:cd:62:12:
7a:ba:09:b6:3d:c7:66:5f:7f:aa:98:15:c1:68:92:
00:f0:53:2c:61:29:3e:c6:16:85:27:45:57:51:f3:
be:c7:2f:98:80:73:29:c2:62:37:3a:ae:87:5c:f0:
0c:30:6e:de:e4:09:ee:d8:0d:fa:90:a0:e8:ec:43:
27:80:20:45:2c:eb:0d:e3:1f:f4:87:89:09:a2:6a:
f8:9f:92:4a:a1:86:e7:d6:f2:11:c6:b1:3b:63:e4:
7d:43:6e:22:5f:66:29:35:4b:dd:48:08:64:34:7d:
9f:d4:dd:1e:af:4b:ed:80:44:b7:5f:60:ab:da:9a:
ce:d7:e8:6d:c8:bd:16:ab:7a:8e:8c:52:4e:f3:84:
70:c4:41:60:da:bc:db:72:2a:e4:e0:04:0b:78:80:
fa:ff:11:ed:b6:ce:55:70:da:ed:4d:22:7b:87:63:
a2:f3:f6:55:6f:24:b6:ac:9e:26:9a:bc:de:ff:7e:
d0:4a:80:a4:40:a8:54:05:16:95:04:4e:32:ad:bf:
19:2a:c5:73:40:e8:86:80:cb:a6:bb:df:22:10:e9:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B3:6B:D9:AB:39:1B:0C:BC:DA:33:47:48:E0:02:0E:0F:E8:2A:44
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cbNr2as5Gwy82jNHSOACDg_oKkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.225.0/24
89.213.43.0/24
89.213.99.0/24
89.213.131.0/24
89.213.145.0-89.213.146.255
109.176.200.0/24
109.176.239.0/24
213.130.155.0/24
213.218.225.0/24
213.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
54:26:9b:63:07:a4:c1:ce:c8:e3:01:09:e0:12:49:e8:02:14:
5c:ba:ab:45:72:aa:4d:b8:20:94:03:82:9e:5c:34:f4:bc:87:
e2:24:b3:0d:31:02:d8:c8:f5:6d:ef:bc:3a:91:d7:4d:62:f5:
79:71:62:35:16:c6:b0:c9:2e:af:76:41:81:31:2c:b5:6d:56:
5b:f4:97:71:b2:6b:e5:d6:81:3c:63:4b:a0:1e:61:2c:9c:89:
90:d5:87:97:0f:c1:9b:1c:a4:7e:9c:c4:7c:64:31:49:d4:41:
c9:54:a3:3f:16:7a:a9:43:42:e3:74:e9:7c:59:8e:a3:b6:b6:
cd:a2:8d:1f:90:84:31:e6:fd:ff:a9:46:b9:f3:1e:d1:c3:38:
4f:5d:02:6d:8a:85:32:84:cd:8f:31:1f:41:af:d6:f5:46:56:
f6:27:0c:27:86:92:3e:9f:3f:5a:0c:14:47:2e:c9:6b:a7:e4:
f7:20:4b:60:95:2c:9b:1e:fc:df:2d:43:5a:b6:db:9d:26:3b:
52:3a:d4:6f:bd:8a:db:40:21:63:75:5d:1c:86:50:ad:39:ed:
36:32:4f:50:ae:f7:95:48:a7:4b:4a:f9:d9:89:f6:29:bf:6d:
dd:82:c6:b4:82:61:e6:fb:bf:67:a4:a5:f3:b0:fc:64:76:7c:
32:b8:62:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org