Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dDGQV5ASXd6qxLwajhZOQ-7c4Rs.roa
File: dDGQV5ASXd6qxLwajhZOQ-7c4Rs.roa (raw, json)
Hash identifier: rdV34rY09WLuNuU1fcT6a0n81RwwOoLpT4pgjbmCPH8=
Subject key identifier: 74:31:90:57:90:12:5D:DE:AA:C4:BC:1A:8E:16:4E:43:EE:DC:E1:1B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018870EA536DB9A58E99870CDB99D6D6E913
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dDGQV5ASXd6qxLwajhZOQ-7c4Rs.roa
Signing time: Wed 31 May 2023 08:26:24 +0000
ROA not before: Wed 31 May 2023 08:26:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 82.153.228.0/23 maxlen: 23
82.153.241.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 Nov 2023 11:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:ea:53:6d:b9:a5:8e:99:87:0c:db:99:d6:d6:e9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 31 08:26:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7431905790125ddeaac4bc1a8e164e43eedce11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:8d:28:e8:20:0b:48:1a:db:3f:40:79:0e:
ef:9d:a8:e2:9a:0f:ce:13:a7:a3:4f:ad:f1:9e:b1:
c3:1b:bc:08:26:1c:c5:48:db:bb:63:05:72:e6:2a:
9b:ca:e7:ac:a4:3f:ba:9d:b9:78:ec:05:b3:ac:16:
78:bf:9c:33:52:78:5b:1f:24:5a:20:8a:40:7e:31:
76:b9:29:2d:14:60:bd:9b:62:6b:7d:de:d3:52:c8:
a1:7f:b1:7a:6e:e3:4f:de:e0:d9:e3:2d:e5:f9:d7:
e8:b2:22:fd:23:67:ed:ba:43:d9:63:5d:a5:3e:81:
5b:fe:bd:89:97:d9:fa:f9:2f:81:13:f5:52:97:20:
32:a2:da:2d:f1:de:9b:f9:91:e6:3b:aa:1a:ca:c2:
17:99:a6:56:fb:f1:a1:c4:16:19:d0:2a:f7:18:ac:
3e:75:f3:21:69:ae:e6:13:5f:13:86:f5:8c:85:6c:
f3:b0:84:af:5a:56:89:18:aa:ae:06:1f:9a:6e:88:
ea:20:2a:1f:3d:7a:8a:61:0d:44:b0:f0:d7:d3:f1:
b3:6b:44:36:ca:6f:2e:85:f6:a9:66:a5:1b:b4:08:
7d:b2:d5:b7:0f:5d:30:5d:3f:f0:0f:b1:06:0b:0c:
22:9b:2c:2a:0a:4f:41:8e:96:d3:eb:d5:ca:35:f5:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:90:57:90:12:5D:DE:AA:C4:BC:1A:8E:16:4E:43:EE:DC:E1:1B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dDGQV5ASXd6qxLwajhZOQ-7c4Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.228.0/23
82.153.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3d:b7:87:40:ff:40:10:d1:d0:52:eb:91:e3:47:53:55:10:
57:d7:f6:f8:8d:41:45:99:74:a1:fb:1a:2c:4a:a8:2e:05:05:
06:2e:66:b9:49:bc:58:0b:dd:4c:fd:d3:ee:87:02:c5:ee:3e:
e2:79:fb:03:08:0d:a9:1b:af:89:1b:4a:eb:2c:14:fd:54:bc:
41:47:2a:0f:65:4e:f7:f2:30:6f:f3:b9:51:86:3c:cf:b9:6d:
c6:16:ec:69:3f:19:43:be:43:0f:18:d5:94:a6:62:c9:39:79:
a4:e1:a2:a4:09:60:51:9c:90:17:86:c9:b0:25:40:b9:32:b5:
92:14:70:f8:25:a3:1a:54:d8:f2:88:1f:ac:d4:23:94:a4:90:
2d:a3:51:8f:0b:2a:ea:4b:9b:73:1f:33:d6:d0:d6:0b:9a:1b:
82:e1:93:bd:4a:18:2f:83:63:37:8b:e9:05:2e:24:75:cf:9d:
d0:08:18:29:f3:59:28:a9:1d:15:97:3e:c2:ee:2c:f7:94:ea:
ec:d9:f1:ad:3a:c8:c4:34:24:fe:23:60:70:18:cd:98:d4:2e:
b0:7a:d3:e8:f6:83:06:ea:8f:cc:ed:ee:53:5d:b5:8e:87:96:
1c:3f:88:5f:1f:ab:b1:47:a5:75:d8:74:54:11:42:09:e1:b0:
d4:7c:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org