Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ez1csDuhmt2qiX1M67pKwk24L_8.roa
File: ez1csDuhmt2qiX1M67pKwk24L_8.roa (raw, json)
Hash identifier: I3hd7uIOWEWWK4ixLcopi/OQiAVDW0YwYHZCkR1PgOM=
Subject key identifier: 7B:3D:5C:B0:3B:A1:9A:DD:AA:89:7D:4C:EB:BA:4A:C2:4D:B8:2F:FF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E0F508E2761CD97237F828ADCED4E3A43
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ez1csDuhmt2qiX1M67pKwk24L_8.roa
Signing time: Tue 05 Mar 2024 15:52:01 +0000
ROA not before: Tue 05 Mar 2024 15:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 12:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:50:8e:27:61:cd:97:23:7f:82:8a:dc:ed:4e:3a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 5 15:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b3d5cb03ba19addaa897d4cebba4ac24db82fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:9d:b4:33:c1:bf:8b:27:c2:92:be:9c:df:
7d:8d:09:d9:91:2e:4f:d1:83:96:19:92:ed:4c:68:
66:be:b2:59:e9:25:dd:1a:c8:60:c5:fa:3e:8e:f8:
16:b7:cb:82:77:86:9b:22:a8:93:00:d7:a6:29:0a:
f9:d6:e2:ce:23:2d:c6:55:ce:e5:f0:b9:a0:2f:9f:
d6:aa:2f:83:16:e0:dd:0f:48:4f:64:72:d1:86:7d:
f9:32:6d:46:fa:1b:10:8c:ab:eb:5a:d5:e0:cf:b6:
3a:df:0a:e0:cb:b9:8d:5c:0c:f3:0d:1a:a1:0b:fb:
93:73:02:78:b0:d4:78:51:d7:01:4e:99:61:cf:c0:
fe:f3:dc:14:a0:62:6f:da:54:f4:8c:7c:5c:1e:d2:
f2:59:80:53:b1:bd:c4:f9:62:29:97:b0:e9:08:b2:
db:e0:79:cd:e5:b5:56:eb:bb:d4:2d:af:07:37:19:
03:b3:1a:b0:c1:46:c9:8a:02:56:81:73:79:3e:fe:
fd:11:79:ac:03:14:81:df:a0:19:fc:4e:86:26:70:
b4:cc:93:0d:2c:ab:2e:10:ab:1d:05:7c:50:d7:d2:
1f:4e:9e:94:ed:4b:9e:44:27:6c:19:11:7a:7e:13:
3f:a1:46:6a:13:0d:f8:2b:45:12:d4:78:9c:e9:90:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3D:5C:B0:3B:A1:9A:DD:AA:89:7D:4C:EB:BA:4A:C2:4D:B8:2F:FF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ez1csDuhmt2qiX1M67pKwk24L_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
109.176.245.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:93:fc:15:3b:99:97:1c:69:d0:b6:54:c4:e8:12:79:42:c6:
2a:30:1a:a7:f4:57:27:9e:28:dd:eb:93:47:86:72:76:f1:d5:
ff:31:e0:c1:ea:28:f8:0e:80:34:9b:d1:c2:70:d4:96:d1:47:
36:d8:f2:2f:94:dc:a1:04:67:53:72:81:02:a9:5f:0c:fa:09:
73:eb:ef:fa:83:94:e0:ec:dd:d2:ac:22:ef:eb:0c:45:91:9a:
3c:40:bb:aa:50:38:93:18:ff:68:0e:a3:95:58:ee:03:9a:10:
b4:18:6e:de:60:b8:0a:17:30:34:c4:be:8e:48:5d:20:fe:b8:
76:9c:52:c6:64:e3:c2:d3:01:c8:46:f7:db:06:99:49:fc:26:
c1:0d:b8:d8:81:91:cc:08:1d:53:03:00:a2:0f:cc:39:85:c1:
e3:bb:07:6b:72:93:e5:ea:ad:2a:00:c5:a2:26:24:7d:94:7c:
28:1c:3a:e2:df:a1:80:bb:5c:21:2d:16:95:a1:47:72:3d:f9:
a1:42:a6:9e:f0:31:33:d8:c5:98:1c:2b:51:ee:35:5d:14:17:
b4:b1:e1:3b:b2:45:fd:ce:c8:39:5d:d5:ec:6f:e1:83:6e:82:
43:f5:dd:42:05:00:dd:6e:30:f9:79:a5:78:a6:6a:0a:73:32:
1d:38:73:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org