Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nvhgubqySBbKyEsEfsfZThqNsi8.roa
File: nvhgubqySBbKyEsEfsfZThqNsi8.roa (raw, json)
Hash identifier: jL8Tch/TvGH08CFmfRzwb27u7c8Hf1EgcU63SxcUYWw=
Subject key identifier: 9E:F8:60:B9:BA:B2:48:16:CA:C8:4B:04:7E:C7:D9:4E:1A:8D:B2:2F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E7A91E4A5DDA8519024D08A0C70EE8584
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nvhgubqySBbKyEsEfsfZThqNsi8.roa
Signing time: Tue 26 Mar 2024 11:42:45 +0000
ROA not before: Tue 26 Mar 2024 11:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.180.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 07:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:91:e4:a5:dd:a8:51:90:24:d0:8a:0c:70:ee:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 26 11:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ef860b9bab24816cac84b047ec7d94e1a8db22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:c4:33:c6:d9:d7:17:24:b8:e8:0e:6f:73:
41:1f:d3:9f:5b:f5:c4:8f:ad:2f:43:cc:83:1c:cc:
62:98:b4:e1:7a:50:68:66:eb:fd:79:3a:00:a1:ad:
4d:69:1e:10:07:88:19:c6:a7:ef:14:bd:56:a2:2d:
d0:c2:9c:6a:bc:99:39:f6:9e:98:17:c3:b4:39:b1:
e1:7e:05:d9:0b:8c:ff:1c:56:36:3c:50:eb:3d:0b:
3d:a9:11:00:5f:d9:48:c2:ec:ee:b9:68:08:18:16:
81:72:a3:03:e0:cf:20:10:5c:d9:43:91:51:45:3a:
59:a6:40:5e:a4:99:8a:f5:f2:82:63:3f:6f:ca:c3:
2b:90:a7:61:1f:a1:95:a3:ec:cd:4f:ac:9b:8e:2c:
67:20:7a:85:53:36:cc:27:9d:61:40:0f:72:76:66:
90:0d:e8:09:92:7f:2b:e7:fb:d6:94:70:ce:3c:8f:
e1:f5:03:5f:d3:80:71:3f:bd:e9:e3:aa:ec:99:54:
d3:8d:37:28:c3:40:5a:6d:4b:38:f0:49:cb:6e:6d:
6a:1c:65:64:c0:14:ec:66:a4:8c:8f:ce:71:6c:98:
45:22:e9:9d:14:59:d2:c7:5f:cb:91:3a:17:e2:16:
37:90:7c:a3:63:29:a2:8c:d4:ab:e1:05:73:9f:ec:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:60:B9:BA:B2:48:16:CA:C8:4B:04:7E:C7:D9:4E:1A:8D:B2:2F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nvhgubqySBbKyEsEfsfZThqNsi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
109.176.245.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:91:29:cb:81:9b:a0:41:0b:b6:be:5a:1a:ce:2a:1c:33:b7:
bb:59:0d:e2:4e:98:d2:7e:a3:e2:2c:2f:6a:53:c6:09:07:75:
d3:25:1b:7e:68:bd:ca:02:10:9f:4a:de:40:89:3d:f5:c0:e8:
91:53:82:3b:10:82:b2:e9:61:d3:d6:dd:f3:24:da:7e:1e:cd:
86:46:17:17:c5:46:73:a7:4d:24:d7:82:c7:e2:f0:da:c7:42:
85:d9:96:2a:b7:b9:c8:29:3c:32:cc:bc:1e:71:6f:0e:b5:68:
e9:f8:8b:7a:cc:e1:64:61:01:b9:e6:26:a9:62:4e:3b:aa:8d:
fe:5b:dd:5c:a4:e2:52:7d:7e:1e:7b:0b:15:b2:8a:a4:3f:85:
4e:d0:a7:1a:7b:2f:a5:03:ca:d6:d6:21:33:3e:a5:2b:36:cf:
a4:0e:e7:e0:4a:31:41:00:78:02:13:0d:08:5c:6c:8d:cf:03:
aa:76:f3:66:21:2c:0f:d6:cb:31:df:8b:72:7e:75:a8:79:02:
b2:fa:18:ad:ff:df:94:7b:7f:be:03:14:ef:a0:ab:35:c0:e1:
67:52:04:0e:05:31:83:8d:d6:19:7b:e5:20:c4:86:3d:82:ec:
6e:3c:eb:c8:10:f9:e7:4b:55:65:da:71:fe:30:07:2f:ea:85:
58:97:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org