Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hqVv-UcMCETsI04Iu-sp7qGYBd4.roa
File: hqVv-UcMCETsI04Iu-sp7qGYBd4.roa (raw, json)
Hash identifier: xoLqKIFWSynoGXxf43NJ+XZ0OsJtEDr7VwQO/qxEfXM=
Subject key identifier: 86:A5:6F:F9:47:0C:08:44:EC:23:4E:08:BB:EB:29:EE:A1:98:05:DE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C10096A033259218010B2683BD3F359DD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hqVv-UcMCETsI04Iu-sp7qGYBd4.roa
Signing time: Mon 27 Nov 2023 09:08:21 +0000
ROA not before: Mon 27 Nov 2023 09:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395839
IP address blocks: 109.176.248.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 17:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:09:6a:03:32:59:21:80:10:b2:68:3b:d3:f3:59:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 27 09:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86a56ff9470c0844ec234e08bbeb29eea19805de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:a4:a4:cf:1e:50:f8:5f:8f:db:4d:a6:d8:
0e:3a:6a:cb:88:d3:fb:66:ff:bf:ee:a8:79:7c:a5:
71:b4:5d:9f:c7:cc:0a:7f:21:03:8f:8c:9e:86:fb:
14:23:6f:f2:91:91:68:b1:ad:a1:52:9a:ed:c4:ae:
9d:49:2c:94:c1:ad:0f:6c:25:03:96:aa:4b:0e:27:
36:95:2d:08:55:d9:8c:b9:9a:8a:a4:9b:c6:b4:d8:
d5:94:d0:6c:a6:3f:50:ee:c5:0c:45:51:86:9b:28:
6d:b1:e4:a7:bf:5c:65:c0:49:0d:2f:c5:fa:3e:6c:
f7:38:40:ca:c7:3b:a0:92:19:22:50:92:03:1c:20:
df:e7:ff:b8:6c:0f:19:0d:b4:f9:9f:24:8c:94:5c:
6d:93:52:da:21:81:20:7d:90:3e:10:c0:58:49:96:
4e:d4:25:f0:09:33:22:2c:4d:4e:8b:85:80:b9:39:
62:87:b3:9a:02:ab:02:76:4e:d1:c9:60:7d:98:84:
bd:cc:d3:a0:b6:06:99:8d:9d:c3:8e:f7:f0:89:19:
ce:ba:d5:72:c3:10:1d:81:a7:41:8b:1f:14:b4:29:
25:6f:b3:a0:5e:a4:3a:65:b5:1a:8b:d2:0a:a3:8a:
68:63:00:cf:82:56:31:c6:41:62:e0:46:be:06:e4:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A5:6F:F9:47:0C:08:44:EC:23:4E:08:BB:EB:29:EE:A1:98:05:DE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hqVv-UcMCETsI04Iu-sp7qGYBd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.1.0/24
109.176.248.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a7:43:d2:61:00:ff:f8:d2:2f:15:a3:b2:f8:75:5b:ae:7e:
b7:68:37:54:99:9d:24:a8:f3:a7:95:74:d6:f9:d4:9f:77:d3:
c0:b8:4b:86:5c:e9:01:d8:40:d8:3a:ba:6d:b0:f6:e2:0f:f1:
ce:a3:85:01:bc:2a:32:12:2b:4f:1e:fa:13:55:a4:56:7f:1f:
54:8a:cc:f2:a6:20:86:41:e8:ee:ee:9c:30:c0:44:7f:94:e0:
f3:b8:c3:84:4b:59:37:8b:e4:df:13:41:50:c6:af:42:eb:73:
9e:02:6a:d6:5f:90:6c:6a:91:16:14:7e:e8:68:fa:8a:bb:f9:
a8:00:de:de:e3:49:e7:ae:6b:91:ba:76:8d:e1:c6:d0:4a:b6:
5b:31:65:92:44:5e:0a:1a:7c:02:ba:e9:9d:96:ee:9a:d5:6a:
b9:56:1c:9f:3a:73:30:8a:0b:5a:14:5f:75:a4:ba:1d:19:02:
3f:bb:8e:40:1c:d8:aa:3f:e8:47:7f:8c:39:54:31:29:6a:7a:
ff:b6:b4:d2:46:60:61:b5:83:1f:a9:9e:5c:19:8c:8d:87:f4:
d4:d7:22:3f:b8:07:95:7e:94:f1:07:c5:04:1a:57:8b:e5:01:
df:98:0b:51:32:07:ca:6a:dc:e8:29:50:1c:ca:7f:5e:ca:6f:
b4:e6:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org