Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i4pwFH2NSsEkGdCaFLtapqrMSJA.roa
File: i4pwFH2NSsEkGdCaFLtapqrMSJA.roa (raw, json)
Hash identifier: /fGjVu4VaTlr8lxnlUA5vRO7DE3jfAgj0d1H7+pzo4o=
Subject key identifier: 8B:8A:70:14:7D:8D:4A:C1:24:19:D0:9A:14:BB:5A:A6:AA:CC:48:90
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E74DBCB4C7C954A32B409798ECDC90EEB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i4pwFH2NSsEkGdCaFLtapqrMSJA.roa
Signing time: Mon 25 Mar 2024 09:05:45 +0000
ROA not before: Mon 25 Mar 2024 09:05:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.108.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.178.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 11:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:db:cb:4c:7c:95:4a:32:b4:09:79:8e:cd:c9:0e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 25 09:05:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b8a70147d8d4ac12419d09a14bb5aa6aacc4890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:e4:5c:38:df:5e:ee:ed:7a:49:74:a9:4e:
7d:97:2b:f2:5f:d3:6e:65:8e:34:c4:a9:45:e9:5b:
88:8a:7b:c5:46:08:b4:18:84:e3:1b:d2:1d:29:e2:
c2:3d:f5:6b:51:99:f1:7b:e7:de:08:a9:7c:5b:89:
64:fe:68:3d:b3:4b:81:74:13:8c:f0:1a:cc:c2:37:
cc:07:4d:a5:17:8e:64:3c:71:df:1a:52:ec:cf:48:
ac:6a:18:34:9c:65:ac:7a:cf:44:27:d6:18:7c:0d:
a8:b7:95:99:32:13:86:7d:8c:c2:37:8d:53:8a:9f:
20:eb:2f:f5:1b:f4:55:b0:7f:af:ac:a1:22:a9:e5:
09:8f:01:4d:0e:3d:d0:64:ab:a2:e3:13:60:f1:23:
c3:4d:26:ad:85:8c:5c:47:23:1d:70:10:c8:1b:b7:
ff:8e:02:0a:83:ba:e3:e5:2c:e8:8c:86:aa:2d:7f:
78:d8:69:c4:9d:0a:b8:c6:d5:44:01:ee:4f:b6:3e:
0d:2c:31:ec:db:27:6a:73:81:43:99:b5:2d:23:15:
75:7d:6e:b0:4c:86:d6:12:f2:1b:58:32:40:bf:24:
4c:da:da:a1:84:f9:2b:6f:fb:1d:5f:b0:8d:38:ac:
7e:a4:11:cc:77:63:d4:33:b4:ca:7d:04:65:42:02:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8A:70:14:7D:8D:4A:C1:24:19:D0:9A:14:BB:5A:A6:AA:CC:48:90
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i4pwFH2NSsEkGdCaFLtapqrMSJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.108.0/24
82.152.176.0/23
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.178.0/24
89.213.180.0/24
109.176.245.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:82:12:46:b4:ab:06:ff:4e:e7:72:64:fa:3b:79:3d:7f:eb:
c0:a7:a4:a4:e0:9d:57:6d:48:ad:40:60:fe:f9:35:93:0b:ba:
83:15:cf:bb:15:61:cc:dc:ec:6c:00:70:20:41:80:6c:f3:55:
25:d2:1c:6b:5d:15:f8:fd:2a:71:0c:9b:d7:b3:34:35:8d:5e:
44:26:72:6a:a8:13:a2:e9:0c:a0:bb:e9:18:fc:79:ba:07:51:
f7:aa:05:a8:7d:7b:68:83:a9:e9:b2:03:54:aa:b9:bb:64:2f:
81:a0:6c:f4:80:00:a0:df:0a:47:8c:45:fc:f7:83:da:33:b4:
05:ea:ab:5e:1a:38:66:7d:cd:d5:fd:3d:fa:15:03:e0:66:b7:
a0:61:6e:bf:22:8a:f9:40:29:2c:34:fc:1d:38:c1:fa:60:b0:
1e:ce:ff:78:45:27:45:2d:dc:0d:7b:39:65:de:de:df:30:5b:
e3:2d:a7:35:8e:f2:4d:7b:8d:72:91:64:2a:f0:43:6d:79:1c:
ed:45:7b:29:a8:fa:e1:aa:83:9c:20:11:3d:60:a7:a3:db:41:
79:81:41:35:fe:95:a7:89:a8:f6:8a:05:b8:10:fb:61:43:d6:
20:2c:31:9f:e3:a6:7d:69:7c:6c:03:ff:f6:4f:4c:55:38:09:
f5:ca:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org