Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jn6TsX1ZJnTQDYTjUhzOc7GaVEw.roa
File: jn6TsX1ZJnTQDYTjUhzOc7GaVEw.roa (raw, json)
Hash identifier: AmiWNHvCS+i4qvFi4wq6LfxH7lr5F7dWVnOJKOcxh7I=
Subject key identifier: 8E:7E:93:B1:7D:59:26:74:D0:0D:84:E3:52:1C:CE:73:B1:9A:54:4C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F9587A166055C3DBDFE72B82A7D30DB80
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jn6TsX1ZJnTQDYTjUhzOc7GaVEw.roa
Signing time: Mon 20 May 2024 10:24:04 +0000
ROA not before: Mon 20 May 2024 10:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.152.176.0/24 maxlen: 24
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.98.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.250.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 18:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:87:a1:66:05:5c:3d:bd:fe:72:b8:2a:7d:30:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 20 10:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e7e93b17d592674d00d84e3521cce73b19a544c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9d:52:04:39:db:43:b5:a7:0e:ed:78:7d:2a:
a7:09:f8:77:d8:68:0f:1a:92:8a:f3:ae:a7:9a:19:
c9:b4:84:e0:03:c4:69:6f:1c:9d:02:32:51:ac:6f:
af:0d:bc:94:f4:69:c2:df:9d:7e:35:f0:d8:2d:68:
c7:5d:92:93:b5:03:18:c8:77:d2:6c:3d:42:64:f2:
90:b4:a3:96:93:88:c7:e8:c9:b9:f7:fc:d6:94:2b:
6c:69:03:23:f8:ed:ea:56:ec:a1:c3:31:92:1f:56:
f1:4f:64:b4:47:c5:2d:b2:06:12:b2:10:b3:2b:fa:
36:9c:96:37:f3:68:65:00:78:76:11:a1:74:d2:49:
9e:a4:1d:d3:da:09:7b:a0:54:92:0d:77:e0:e2:24:
0a:69:88:66:f4:05:42:48:18:9c:e8:75:35:14:cb:
ef:b1:08:26:be:b3:48:b8:c7:0f:a3:8e:ad:bb:bf:
6d:e0:11:28:43:b3:b8:cd:0f:57:ce:17:bc:d4:ca:
8f:a3:66:e7:b4:06:de:6b:11:00:3b:6c:cf:28:cb:
c5:ca:40:be:0e:1c:2c:fc:1d:7e:29:aa:79:c8:8e:
68:a5:9c:8a:7f:c8:54:b8:09:dc:b8:b3:d7:bf:95:
34:ac:f1:e2:fb:51:5a:bf:05:5a:d6:b5:d5:2e:6d:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7E:93:B1:7D:59:26:74:D0:0D:84:E3:52:1C:CE:73:B1:9A:54:4C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jn6TsX1ZJnTQDYTjUhzOc7GaVEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
89.213.98.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.250.0/24
185.49.126.0/23
194.105.80.0/20
213.130.130.0/24
213.130.149.0/24
213.218.210.0/23
213.218.224.0/24
213.218.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bf:36:22:4a:02:9a:ce:7c:32:f2:9f:15:cc:c4:0d:de:f4:
45:4c:0d:a9:9a:20:b9:23:9f:14:23:39:79:23:c4:5d:1c:8e:
e6:6f:96:55:03:01:16:6d:15:7b:4d:c1:cd:30:23:80:0a:ff:
73:b2:fe:6f:ca:8b:12:69:49:56:f1:1d:19:70:98:83:bd:ed:
f6:aa:c0:34:f3:22:2a:00:69:e6:15:3e:d0:7c:23:b9:b5:a6:
83:9a:6a:b3:3b:3f:a6:7a:6d:b0:f7:05:61:d4:09:2d:8e:1f:
96:6d:2f:8a:18:38:4e:09:42:d6:5e:ff:bc:a5:4a:26:f1:6c:
28:90:ab:11:1f:76:5b:33:49:af:be:95:07:e8:ca:65:a7:89:
bb:e9:43:60:94:1c:98:51:50:39:90:e9:9e:db:26:41:4d:d0:
67:01:53:89:fe:04:93:d5:73:1a:2c:4f:4b:40:ee:b6:75:4d:
a1:be:32:6d:67:b1:55:b7:f2:41:a1:4e:42:28:c8:6f:93:7c:
44:30:54:ff:3b:34:42:53:16:ff:f8:7e:37:9b:2c:f8:fa:72:
9b:9f:7f:f6:dc:4f:59:1c:29:6a:06:93:23:ae:21:69:10:ac:
b7:0c:8c:ae:31:51:1f:6f:a5:49:0c:e3:1b:f7:93:bf:2b:b2:
b7:19:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org