Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lfup3XnTSVgdADgmI59QrN3qB-I.roa
File: lfup3XnTSVgdADgmI59QrN3qB-I.roa (raw, json)
Hash identifier: Xq3hrGHyJ91cMHL0Or3DCrR5joZ0g29kgCzCpg40ZfE=
Subject key identifier: 95:FB:A9:DD:79:D3:49:58:1D:00:38:26:23:9F:50:AC:DD:EA:07:E2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A5FE8E8F76D983E4E037687F9E50C60A8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lfup3XnTSVgdADgmI59QrN3qB-I.roa
Signing time: Mon 04 Sep 2023 11:16:54 +0000
ROA not before: Mon 04 Sep 2023 11:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204174
IP address blocks: 82.153.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:e8:e8:f7:6d:98:3e:4e:03:76:87:f9:e5:0c:60:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 4 11:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95fba9dd79d349581d003826239f50acddea07e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:e3:03:1d:3d:7f:11:97:2c:7d:4c:58:50:
ae:fd:f9:bd:f1:6d:9d:4b:aa:cd:41:27:cf:df:62:
f6:4b:b3:43:84:92:99:ef:51:ab:ea:80:ab:5f:c3:
13:53:52:b7:cf:11:20:7f:6f:e2:3b:9b:72:5b:9a:
7a:f1:a0:73:1e:e3:4f:bf:be:a5:77:df:9e:0a:d3:
dc:fc:0b:09:ae:0b:8f:02:df:c1:8e:52:a8:04:61:
70:82:ee:2a:d5:8f:90:9a:dc:83:11:27:38:0b:e6:
4e:44:83:ef:05:62:99:28:a5:71:a5:78:d6:19:48:
1d:8d:81:0d:ce:3b:dc:15:e3:55:a1:8b:c5:30:b3:
55:fb:fd:1b:da:80:b9:1b:3e:74:31:37:60:50:ec:
d9:95:49:f9:c0:fe:71:02:bd:36:2c:78:02:4a:22:
0e:31:58:08:d7:86:c6:ed:82:73:c2:c8:ac:4d:2e:
e3:91:62:2d:8f:f3:b0:b1:78:76:de:c5:c2:07:59:
4c:69:52:2e:b5:f3:97:50:23:95:ee:3d:0c:5a:b7:
4a:ce:a4:6f:a2:7f:ae:fe:ca:44:f9:6e:e7:00:88:
12:86:be:23:89:b2:bd:f6:1a:1f:ed:ca:a3:28:d5:
46:85:8c:ee:7f:d0:4c:a2:3e:ba:3d:fa:28:ca:5a:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FB:A9:DD:79:D3:49:58:1D:00:38:26:23:9F:50:AC:DD:EA:07:E2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lfup3XnTSVgdADgmI59QrN3qB-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.222.0/24
Signature Algorithm: sha256WithRSAEncryption
36:30:1d:80:31:97:39:fa:e0:f9:e6:bb:26:a4:5f:c6:ef:8e:
d0:3e:55:4f:66:8a:f0:fe:21:7f:3c:6b:61:10:a0:d6:ae:38:
4f:e8:cd:49:44:79:44:d4:47:c1:32:dc:1b:94:16:7b:81:ae:
a4:3a:e2:45:e4:41:2d:28:ff:5d:c3:ee:54:29:d5:d6:a4:05:
6f:89:8c:79:3e:ff:d0:e4:fa:cf:42:54:08:7e:44:79:c7:4d:
15:ea:1c:41:15:84:c8:a6:c7:62:8a:4c:b8:3b:1f:e3:9f:87:
e2:f0:c2:2d:1b:6d:31:3b:bf:9e:58:80:17:8e:a8:a3:6e:98:
42:f2:d0:d1:77:f0:21:60:7b:b3:81:90:ff:99:ef:9a:38:38:
e8:ae:e3:af:e4:cc:98:0a:30:25:d2:c1:f2:04:80:6b:82:50:
12:d0:a9:98:05:f6:74:95:31:23:a6:ce:f0:b5:7f:cd:b3:52:
e3:45:75:73:41:8d:d2:78:2a:c2:1d:76:32:65:a9:8a:44:94:
74:d6:c3:e2:8b:e6:88:df:e0:85:0d:0a:19:d6:09:d4:94:c8:
55:69:9d:d1:f8:36:00:cf:b4:f6:91:4d:68:d6:60:37:e9:54:
9d:4e:e6:0a:94:f0:7c:0e:72:89:f5:0d:0b:b3:f8:62:47:2b:
db:a8:55:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org