Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gb2gQizvp1yVCgz2Ln-Y19kwpkA.roa
File: gb2gQizvp1yVCgz2Ln-Y19kwpkA.roa (raw, json)
Hash identifier: 9cwLWkbGqm/SMtOJvJRQYseyy7vm8OW3ylryMTg+dDI=
Subject key identifier: 81:BD:A0:42:2C:EF:A7:5C:95:0A:0C:F6:2E:7F:98:D7:D9:30:A6:40
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018571FA2D2D4E801F1B351CAEADD6094419
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gb2gQizvp1yVCgz2Ln-Y19kwpkA.roa
Signing time: Mon 02 Jan 2023 10:14:59 +0000
ROA not before: Mon 02 Jan 2023 10:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 82.153.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 07:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:2d:2d:4e:80:1f:1b:35:1c:ae:ad:d6:09:44:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 2 10:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81bda0422cefa75c950a0cf62e7f98d7d930a640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:00:0d:40:b5:37:ed:11:9a:ef:cd:07:29:
af:61:e1:29:e1:e9:ae:35:7c:8a:4f:14:77:22:97:
23:dd:91:dc:db:e7:a8:94:76:30:45:42:e4:d3:aa:
ba:03:50:96:0c:31:0d:37:fc:c2:24:1b:84:67:63:
e5:4a:2a:30:f6:4c:ef:86:d1:0b:ba:06:bb:9f:b3:
cf:7b:88:8b:08:fa:3c:3c:89:60:e1:a6:52:b4:9c:
01:c2:ae:45:24:02:5b:f2:35:4b:5b:6e:eb:c6:3d:
2f:98:70:51:18:91:6d:f3:f5:56:d3:27:0e:6f:53:
4e:49:e2:d6:2f:32:78:19:d2:3e:de:c2:f2:46:c9:
73:a7:e6:e0:36:8f:e3:99:e3:f5:7d:14:03:db:c1:
4b:3a:e4:cb:d5:7c:3b:d8:ff:d1:f8:57:99:08:78:
e5:aa:87:74:87:dc:89:a2:df:90:d7:6c:b4:90:fe:
e7:10:89:88:96:1e:14:2a:ab:58:63:cf:a1:1f:ca:
58:c5:78:36:62:96:a2:f2:81:1a:3e:c1:b8:4b:f6:
74:ce:79:e5:cc:dd:5c:47:19:f8:1b:5c:54:c0:88:
24:46:7f:db:51:2b:8c:64:70:6f:33:a4:d0:3a:97:
d5:fa:54:49:df:10:cd:9e:54:64:b0:b7:04:b1:f9:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BD:A0:42:2C:EF:A7:5C:95:0A:0C:F6:2E:7F:98:D7:D9:30:A6:40
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gb2gQizvp1yVCgz2Ln-Y19kwpkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.66.0/24
Signature Algorithm: sha256WithRSAEncryption
79:49:d7:bb:86:3f:b7:5d:d4:b8:1f:00:a2:48:6d:be:ce:a5:
30:80:cf:4f:77:9b:01:16:1d:42:13:99:0b:e1:e1:05:2a:31:
a2:3f:11:fb:68:8f:a8:ef:5b:bc:dd:3e:40:22:a9:d3:ef:73:
f6:d6:6d:e4:3c:8a:50:c1:27:1d:b3:07:94:a7:2e:b5:18:bb:
9e:dd:5d:34:ec:d2:67:c9:47:5a:85:78:40:f8:a0:2f:1a:58:
10:53:57:6b:4c:7f:fe:fd:88:4a:2d:63:7c:b8:34:21:8e:18:
25:be:f3:8c:50:66:11:36:b4:41:10:17:f2:ed:ed:64:f2:ee:
0c:96:e8:0c:44:22:5e:5e:ca:d0:bb:b4:e1:bd:f7:e9:c0:ff:
06:34:61:cc:62:93:67:b0:64:ca:11:e6:d3:bb:f1:61:d4:c0:
48:5a:3e:de:b9:56:e0:33:f1:6d:99:87:37:70:7e:5e:b2:fe:
a8:8b:2f:71:27:bb:8e:1c:54:de:d9:cc:38:02:f7:de:9f:20:
3d:62:f0:3c:62:47:80:ad:47:db:61:25:64:69:d6:eb:19:ed:
ca:3e:a0:ee:3c:b7:c6:a5:a9:e9:e6:e2:01:36:46:86:61:7d:
55:0a:2b:63:22:71:b5:cf:33:61:3b:83:72:6d:51:ce:ca:b1:
11:d4:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org