Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ot-pBHd-F8TIwWcRFa46KcS92NQ.roa
File: ot-pBHd-F8TIwWcRFa46KcS92NQ.roa (raw, json)
Hash identifier: 2nPnno2pjc8yzlm6VaIK3H7jr+cUFg3i6Qv6ZRT7gYY=
Subject key identifier: A2:DF:A9:04:77:7E:17:C4:C8:C1:67:11:15:AE:3A:29:C4:BD:D8:D4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018DBB5A1F7E0905D0CD7687D2BD7795F234
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ot-pBHd-F8TIwWcRFa46KcS92NQ.roa
Signing time: Sun 18 Feb 2024 08:34:22 +0000
ROA not before: Sun 18 Feb 2024 08:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 15:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bb:5a:1f:7e:09:05:d0:cd:76:87:d2:bd:77:95:f2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 18 08:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2dfa904777e17c4c8c1671115ae3a29c4bdd8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:44:ec:ad:a0:56:7e:ac:0a:71:30:3b:18:
30:59:14:ff:58:4d:3f:ac:c9:c1:f3:cc:ca:bd:5a:
83:a7:f5:e1:15:e1:e7:a0:a5:94:31:ea:a9:ed:25:
17:4f:1d:ba:ff:f3:19:b3:fd:ff:00:20:ca:82:dd:
00:0f:53:d7:13:2e:be:c5:97:03:24:a5:61:eb:e7:
28:c9:0a:91:a6:6c:45:be:4d:9b:e3:69:89:8d:65:
b4:a5:00:4e:81:85:9e:ca:d6:92:1d:65:ed:28:0e:
8c:22:f0:db:5a:62:f7:8f:0b:a6:fe:c9:3c:ad:61:
a3:5b:60:9b:12:81:fc:c4:55:de:e5:99:a6:c5:b5:
b0:9c:71:54:b7:cd:d3:7c:4a:ea:d7:f4:f8:a4:12:
e4:dc:6d:83:24:a6:04:b3:32:9e:80:76:6a:71:fd:
4d:72:31:d8:a9:d0:f6:16:64:c2:a9:7c:58:12:ae:
46:83:3e:54:56:5b:ab:c5:56:d4:b4:6c:ce:e5:29:
68:1f:36:6d:69:9d:e9:db:86:73:24:ea:03:5c:db:
e3:96:e6:19:d5:5b:44:1f:0e:8d:6a:a2:9d:90:26:
3d:3a:d7:e5:49:09:2e:22:08:f8:fb:fd:7c:94:20:
08:a2:63:98:55:67:b2:b0:0e:47:dc:0f:7e:55:0f:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:A9:04:77:7E:17:C4:C8:C1:67:11:15:AE:3A:29:C4:BD:D8:D4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ot-pBHd-F8TIwWcRFa46KcS92NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b4:24:55:2a:91:03:00:62:7e:9d:f4:c8:0f:84:c3:91:8c:
04:82:0f:80:cb:a1:2d:ce:a7:14:a4:82:cd:e1:c6:34:13:ac:
8e:5b:fc:9c:8e:c6:b2:83:9b:46:4d:be:2d:c5:31:8c:15:53:
37:f9:1d:aa:e3:c8:ef:4c:e7:a2:30:c1:c3:09:f6:de:0a:07:
88:af:75:16:11:7c:eb:9b:c0:72:d6:20:7e:40:c5:5d:05:c6:
78:e3:a6:0c:3e:a9:c9:b5:a5:df:11:ed:09:dd:93:f2:65:98:
d1:db:ee:65:5b:9d:2f:9b:60:79:01:dd:62:91:b5:7b:00:cc:
b0:5f:83:1b:62:f0:fc:79:e1:6a:de:47:d2:99:a6:a5:5a:c0:
da:70:4a:43:fb:9a:dd:ef:07:72:cf:3f:fc:57:61:1a:58:31:
af:94:2a:36:cb:77:8c:03:c2:90:ff:36:13:4b:f2:49:f6:0f:
87:3b:0a:18:1d:0b:39:bf:f6:f4:1b:ec:5f:5e:7b:75:79:72:
34:bc:7a:22:48:54:94:fc:7f:f8:5f:1b:ea:6a:6d:43:12:97:
eb:ad:a5:ee:4c:b3:1d:cc:cb:3a:dc:df:b0:34:e1:27:d7:de:
e7:38:42:e6:f0:f9:f4:15:97:28:aa:da:6a:7d:da:59:c8:e2:
5c:9f:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org