Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/je2EWNmroavNBmRvQ5yPe8BIgLA.roa
File: je2EWNmroavNBmRvQ5yPe8BIgLA.roa (raw, json)
Hash identifier: MiFGWwJ+bZ8kido2QHxW9qGs7GZCt5wUHX7ITEa9Qz0=
Subject key identifier: 8D:ED:84:58:D9:AB:A1:AB:CD:06:64:6F:43:9C:8F:7B:C0:48:80:B0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC34968F26CDF934B7AF8153866560212
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/je2EWNmroavNBmRvQ5yPe8BIgLA.roa
Signing time: Mon 01 Jan 2024 04:30:17 +0000
ROA not before: Mon 01 Jan 2024 04:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 82.153.245.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 09:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:68:f2:6c:df:93:4b:7a:f8:15:38:66:56:02:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ded8458d9aba1abcd06646f439c8f7bc04880b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:97:77:29:40:2f:93:1b:1e:4e:63:f1:aa:
53:b4:db:27:ac:3c:2f:90:fc:b7:ca:8a:b5:e0:6c:
b0:77:67:a1:3a:c1:7a:51:4d:a7:26:cf:03:8c:a7:
84:d4:b7:12:2c:b8:12:8e:55:90:14:aa:72:41:32:
b2:81:a0:72:77:4d:33:38:f7:42:de:58:4e:04:95:
aa:09:e2:1c:0b:35:81:5b:62:0f:49:09:1b:e4:3c:
b6:a1:45:97:09:db:9c:6c:27:46:e0:56:a5:44:fa:
1b:cc:9d:8c:53:ed:e3:aa:6c:ed:d9:4f:f2:43:b0:
80:6a:3b:7f:bb:7b:e8:7b:e7:74:da:7d:38:5b:11:
8b:41:1a:26:72:33:5e:c3:bf:ea:b7:d2:a7:41:c4:
81:04:0e:ce:58:4f:a4:03:d0:e4:f5:57:40:7e:1f:
05:db:a4:e8:13:99:4c:9e:4f:a1:c4:b2:49:87:df:
12:ed:86:37:41:5e:b5:37:f2:f4:c8:50:d6:d0:01:
bf:f9:23:e1:e4:19:f0:d5:4e:db:9a:77:12:60:7a:
04:37:ae:71:fa:13:0b:4a:84:61:5c:8c:87:0c:88:
62:07:0b:6f:c5:cb:28:06:26:a3:bb:57:de:cd:9d:
69:bf:01:22:68:2d:51:57:2a:e0:74:2d:d7:37:56:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:84:58:D9:AB:A1:AB:CD:06:64:6F:43:9C:8F:7B:C0:48:80:B0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/je2EWNmroavNBmRvQ5yPe8BIgLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.245.0/24
89.213.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:27:01:8a:d9:3e:21:42:08:a4:c9:85:0e:42:c7:19:ce:69:
93:80:ad:e0:0e:51:7b:2c:67:ae:6c:c2:40:f6:de:06:ba:70:
65:d8:03:c4:1c:70:e7:d0:44:67:75:eb:b1:9f:95:44:b3:99:
43:50:45:b6:e7:d3:06:e5:76:ec:03:2c:a0:5c:15:5b:a4:96:
df:20:ac:9f:cc:65:ef:c7:d5:03:d4:bf:78:61:67:64:2c:a2:
bd:63:63:2b:83:67:20:40:f2:d0:62:77:90:2a:f7:5d:21:f9:
1f:15:c3:12:c5:fe:00:f6:4b:0b:63:7e:90:f1:55:8f:c5:bd:
72:e4:85:57:f9:fd:10:64:d8:09:15:d6:a3:ab:e6:b9:a5:e5:
aa:18:97:e6:fc:82:ed:d3:be:ae:18:b5:2e:df:20:82:52:07:
9c:4f:39:1f:56:f2:74:46:0a:82:76:8a:76:50:89:a6:e5:78:
d0:86:ec:e9:63:03:90:28:17:0a:a6:8d:ad:32:48:e1:19:6d:
4f:8d:e7:26:9c:a8:2b:5a:5b:06:c8:88:65:82:91:77:3f:eb:
2c:94:2d:5b:f0:ba:2a:63:fc:68:76:d2:99:1b:d6:d7:6e:de:
f3:2c:bd:16:f7:8f:6f:3d:a8:b2:aa:32:2f:3b:6d:34:19:9e:
83:f6:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org