Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pXVI7F68IGZPKKzgsK8Ty8WEJGY.roa
File: pXVI7F68IGZPKKzgsK8Ty8WEJGY.roa (raw, json)
Hash identifier: O+jQz1zXsqpk8IR7wP3Tgu05F67Brx8JAOoS470diH4=
Subject key identifier: A5:75:48:EC:5E:BC:20:66:4F:28:AC:E0:B0:AF:13:CB:C5:84:24:66
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C6D723E3C6DF71E014055B8A9F9144304
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pXVI7F68IGZPKKzgsK8Ty8WEJGY.roa
Signing time: Fri 15 Dec 2023 12:27:32 +0000
ROA not before: Fri 15 Dec 2023 12:27:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
81.168.119.0/24 maxlen: 24
81.168.126.0/24 maxlen: 24
89.213.180.0/22 maxlen: 24
89.213.182.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
82.153.246.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 09:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:72:3e:3c:6d:f7:1e:01:40:55:b8:a9:f9:14:43:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 15 12:27:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a57548ec5ebc20664f28ace0b0af13cbc5842466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:03:c4:83:8a:28:eb:ff:65:9f:cd:e6:5d:
2c:6f:56:9b:57:cd:9f:4d:90:8d:8b:b7:02:5d:6f:
24:95:1b:98:2f:9a:d4:57:08:09:13:33:53:17:57:
fd:92:cf:e0:43:a7:e6:f2:1d:5c:f6:f5:18:26:36:
47:94:82:18:d6:ca:89:57:dd:4a:b6:ed:f9:e2:e4:
4a:0e:ed:7d:9d:4f:60:07:bd:05:90:21:f5:ab:78:
ec:77:e8:32:16:bb:11:38:35:2e:31:80:02:ed:10:
2b:99:37:50:d8:77:05:c4:60:36:fd:ea:d0:06:1c:
e5:22:21:dc:93:bb:d7:38:a0:f2:2f:88:59:c1:1f:
8d:4b:13:bd:ba:59:dc:a4:31:b3:31:23:e8:4c:33:
ca:f8:7d:4c:1c:71:fa:ba:63:40:5f:51:e5:5a:da:
ba:a1:c8:e7:37:2a:ce:97:97:bd:ab:32:ba:d7:1d:
31:c9:5c:95:21:f8:07:4e:39:ec:f6:40:6a:9b:cc:
dc:72:12:f1:5a:46:cf:fa:a2:2f:a4:11:91:5b:ee:
6e:39:68:cd:85:f8:8c:1a:22:05:96:7d:80:5d:8f:
8f:79:3e:7e:b0:a2:b9:e6:f8:e8:49:97:71:87:09:
b1:e4:54:36:a3:e8:2b:33:ff:10:fd:07:cf:c8:d0:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:48:EC:5E:BC:20:66:4F:28:AC:E0:B0:AF:13:CB:C5:84:24:66
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pXVI7F68IGZPKKzgsK8Ty8WEJGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.126.0/24
82.153.136.0/22
82.153.246.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/22
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d6:2e:b6:d0:4a:af:2b:09:ef:83:d4:42:e9:14:d3:5d:f1:
5f:22:36:0a:43:62:98:9a:99:84:fb:49:4a:eb:d1:f8:83:ab:
23:14:ce:9d:5a:9e:95:8a:4a:05:d3:4c:61:10:46:c0:6b:2a:
72:e6:51:75:d3:61:15:82:09:4b:6d:8d:9d:47:61:71:29:a3:
e9:eb:33:4b:fa:57:37:2a:0e:57:f7:c6:24:89:1e:46:58:a1:
78:7a:47:54:44:f8:ae:91:4c:e4:97:d4:0f:2c:40:ae:d6:4f:
76:5b:3b:9c:92:bb:a6:b7:26:09:ae:c4:ea:c7:12:4a:5f:52:
43:8d:11:17:31:03:67:2c:51:9b:72:9c:9e:43:96:77:66:d5:
6d:f1:f2:a6:89:07:21:0d:e7:e9:82:dc:2b:bb:a0:ff:94:5d:
76:4b:df:4e:0a:0a:0c:f6:45:ec:75:23:db:6a:94:ed:e0:88:
30:43:b7:b8:51:4d:a2:47:6f:92:68:12:39:85:db:61:74:94:
06:76:84:6e:82:e2:c3:74:62:72:14:2e:af:27:e6:02:22:43:
be:38:89:ce:2f:f2:82:c6:b4:d5:0a:61:d2:02:5c:a7:cf:30:
2a:ec:30:c9:ed:03:34:18:c4:1f:c6:fd:47:48:0e:22:41:3b:
7f:e6:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org