Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fJy5vgn9JsjOKR7Li2zk_0zvo2M.roa
File: fJy5vgn9JsjOKR7Li2zk_0zvo2M.roa (raw, json)
Hash identifier: YYGqv6w62gP7wYw/rravfgXig0hzBRcVWcGEchDEwkk=
Subject key identifier: 7C:9C:B9:BE:09:FD:26:C8:CE:29:1E:CB:8B:6C:E4:FF:4C:EF:A3:63
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F5DFB18EA812F20A7D1306CF67B90DAEC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fJy5vgn9JsjOKR7Li2zk_0zvo2M.roa
Signing time: Thu 09 May 2024 15:31:28 +0000
ROA not before: Thu 09 May 2024 15:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.54.0/24 maxlen: 24
82.152.160.0/21 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.163.21.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.180.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.201.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.130.156.0/24 maxlen: 24
213.210.59.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
213.218.249.0/24 maxlen: 24
217.144.158.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:fb:18:ea:81:2f:20:a7:d1:30:6c:f6:7b:90:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 9 15:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c9cb9be09fd26c8ce291ecb8b6ce4ff4cefa363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:50:cb:3a:8a:0a:c6:cc:6d:80:a1:3d:44:
6e:10:3d:56:ee:40:d1:e7:f9:88:8f:3c:c6:bb:b3:
ae:d8:84:f5:72:da:24:ba:fc:61:f1:a8:08:f2:0b:
c7:02:9f:89:6d:49:d9:10:19:2a:c9:ac:0f:fd:18:
c3:da:ab:38:ba:85:3d:94:6b:f4:f5:0e:05:fe:80:
d6:1a:a7:61:50:ab:92:27:03:78:03:cc:2e:e7:d1:
4b:d8:f0:13:dc:f6:46:1d:06:50:63:04:49:ae:63:
0f:db:02:90:8a:0b:09:fa:86:de:e4:8f:23:bf:43:
26:39:95:30:e4:e1:ed:e6:6c:2c:26:3d:57:cc:6e:
c9:0b:7b:4f:39:93:0d:19:c0:cd:a1:54:60:32:3a:
58:7c:ca:80:5b:bf:56:3a:95:56:f0:da:5b:ca:bf:
4e:aa:fc:fc:ff:cf:da:ca:cd:83:b5:31:9c:e4:8c:
a6:14:79:7f:27:23:29:83:f1:1d:cc:04:35:3a:dd:
e7:de:d3:11:4a:2d:fd:94:92:d6:3a:50:0c:19:37:
c1:21:a8:1b:db:48:b4:10:78:f8:8c:ac:71:63:cf:
dc:da:b2:e0:65:60:5e:39:78:87:32:a5:54:f5:43:
9d:a2:f7:e8:9f:02:b0:22:d2:2f:53:4f:51:02:c8:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9C:B9:BE:09:FD:26:C8:CE:29:1E:CB:8B:6C:E4:FF:4C:EF:A3:63
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fJy5vgn9JsjOKR7Li2zk_0zvo2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.54.0/24
82.152.160.0/21
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.163.21.0/24
89.213.98.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/24
109.176.16.0/21
109.176.201.0/24
185.49.126.0/23
194.105.80.0/20
213.130.130.0/24
213.130.149.0/24
213.130.156.0/24
213.210.59.0/24
213.218.210.0/23
213.218.213.0/24
213.218.227.0/24
213.218.231.0/24
213.218.249.0/24
217.144.158.0/24
217.145.66.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7f:5e:fd:7f:da:14:82:26:af:7f:97:c1:34:88:92:71:aa:
32:e8:e5:d4:3a:66:9c:a4:bf:8b:ba:0a:d6:3c:18:b1:38:cd:
10:42:5b:f2:a9:2c:4a:57:a1:c3:65:3d:49:f2:0c:2e:cc:42:
8e:d2:42:e7:fc:39:2f:e8:51:f3:79:64:0f:d9:15:8c:6d:26:
86:b1:dc:6c:14:05:8c:a8:58:e2:a9:a6:6e:65:39:47:38:ae:
8c:c5:a7:91:85:d5:eb:ea:07:59:e6:0c:75:55:5c:09:9f:e6:
a2:d1:9b:11:69:91:5c:14:c9:9a:ae:4c:84:d7:75:0b:59:93:
83:b7:72:e1:20:b5:1c:c1:0b:cb:77:3e:b2:f6:cd:00:be:45:
25:c2:ce:7f:fc:0d:84:79:ea:9a:3e:69:fb:94:c5:ac:0c:4d:
90:82:9a:d1:91:20:9e:3c:84:b0:73:d0:6a:b1:6b:bb:df:01:
0b:e5:ef:a3:1e:b2:7b:1c:1a:bd:dd:de:b6:5f:6f:4d:1d:56:
94:dd:8d:0d:e8:b8:f9:87:18:75:c9:73:87:e5:76:64:ca:22:
fb:ab:a0:45:71:51:36:68:be:35:78:6f:c5:80:f3:72:87:c7:
6d:d3:5c:70:09:4d:57:90:f9:07:a7:12:7f:e6:d1:54:b9:52:
bf:de:50:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org