Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fdKP9K8ulbGwpD3h1X17LjtTBGc.roa
File: fdKP9K8ulbGwpD3h1X17LjtTBGc.roa (raw, json)
Hash identifier: BOZ5KcyQjinNPla3FvpDjfJHixybvAShqTPib7Lz4Gw=
Subject key identifier: 7D:D2:8F:F4:AF:2E:95:B1:B0:A4:3D:E1:D5:7D:7B:2E:3B:53:04:67
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0185CF93F18D38E8CD9BD55B9EAB75F92CB9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fdKP9K8ulbGwpD3h1X17LjtTBGc.roa
Signing time: Fri 20 Jan 2023 14:27:37 +0000
ROA not before: Fri 20 Jan 2023 14:27:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 82.153.246.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 09:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:93:f1:8d:38:e8:cd:9b:d5:5b:9e:ab:75:f9:2c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 20 14:27:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dd28ff4af2e95b1b0a43de1d57d7b2e3b530467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:2b:16:41:01:8c:c7:02:f1:62:03:c1:e9:
a4:33:2a:1d:a6:f5:8e:41:a4:db:e4:99:72:42:d3:
32:9a:be:d5:f2:7a:9a:ee:7f:c8:c0:38:3f:cf:59:
44:a4:bb:88:70:86:b7:9a:a6:e0:70:00:b0:0e:94:
0b:22:0b:0b:aa:bd:a8:fd:30:24:71:4f:3d:78:11:
00:1f:66:77:41:53:42:c4:f9:7a:cb:ab:9a:d8:02:
21:8c:e5:da:d7:3f:bc:e4:8d:01:ad:ff:4a:15:0d:
d7:f0:2a:79:ce:bc:f6:50:3b:9b:89:83:db:30:cd:
2b:11:f1:c6:44:f4:ec:ee:5e:9c:8c:43:1f:12:7a:
2e:fd:3c:78:d7:51:35:13:6d:07:6a:4d:9f:0a:7a:
68:19:ce:7d:83:f9:6d:1c:3e:1c:bb:4e:b4:2e:56:
c1:dc:ec:03:9a:ab:59:56:03:a1:5e:a5:eb:7a:09:
bf:0f:98:2e:52:ff:ec:3b:50:43:20:06:9b:9a:b3:
25:e6:f6:c7:0d:99:c4:5a:2a:6c:1b:38:d3:20:81:
ef:9f:77:47:27:e0:73:ae:f0:f9:2c:32:7b:e0:20:
af:59:76:c8:07:74:d6:42:9d:9a:5e:64:e4:9e:90:
3c:73:61:e0:3c:d8:88:bc:d9:d0:18:98:2d:d9:7a:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:8F:F4:AF:2E:95:B1:B0:A4:3D:E1:D5:7D:7B:2E:3B:53:04:67
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fdKP9K8ulbGwpD3h1X17LjtTBGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.224.0/24
82.153.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:43:5e:0f:e9:6e:0a:ba:4c:b3:6f:3d:07:07:31:c8:73:c9:
b4:9e:7a:7f:f1:03:bf:5f:a1:ba:ba:a6:df:d6:aa:e5:ff:98:
b6:c9:34:5e:f8:0f:31:66:cf:4d:a2:0d:ad:ff:f8:c5:dd:90:
ac:05:13:fb:bc:51:a4:29:bd:f4:93:09:c7:89:a3:de:c5:eb:
3e:c0:91:4b:b6:c6:6a:19:4a:86:03:b0:ff:b1:8e:74:b9:1f:
6b:ec:00:59:0c:04:5c:51:b9:52:d8:bd:40:e0:10:a7:0e:d7:
26:f3:d9:9d:9f:10:2e:21:f2:f3:a2:fb:52:eb:50:28:1d:85:
1e:f7:de:db:5d:11:f2:27:85:5c:82:7d:de:bb:ca:5b:24:59:
a7:f2:1e:26:22:2a:b1:f7:56:89:58:ba:f6:ac:2b:c1:fb:c1:
bd:db:5b:c4:06:40:3f:f5:b4:bb:9a:b4:d5:f1:84:c7:11:da:
59:cc:df:50:b7:ff:0b:29:79:60:35:d1:59:13:ff:31:4e:db:
e9:82:38:e0:e1:f3:42:4e:2d:90:3d:ee:6a:eb:b9:7c:2a:b2:
47:dd:9e:08:b4:1c:0f:90:8e:4b:9f:c7:99:71:70:0d:cf:3a:
b8:22:93:8d:37:19:8b:40:2e:cd:2c:95:f8:fd:b2:08:38:90:
f8:04:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org