Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/plKXjP45lDdLrnpPRuF8b5CzfN4.roa
File: plKXjP45lDdLrnpPRuF8b5CzfN4.roa (raw, json)
Hash identifier: PpNPV3sXvmAekRCjxzF+smjHVjroHrxcJUXf5HrZVdA=
Subject key identifier: A6:52:97:8C:FE:39:94:37:4B:AE:7A:4F:46:E1:7C:6F:90:B3:7C:DE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EA2DE0EB7E74BC6427DC49B079FF68D4B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/plKXjP45lDdLrnpPRuF8b5CzfN4.roa
Signing time: Wed 03 Apr 2024 07:30:45 +0000
ROA not before: Wed 03 Apr 2024 07:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 81.5.189.0/24 maxlen: 24
82.152.49.0/24 maxlen: 24
82.153.65.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 07:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:de:0e:b7:e7:4b:c6:42:7d:c4:9b:07:9f:f6:8d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 3 07:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a652978cfe3994374bae7a4f46e17c6f90b37cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:dc:b4:0d:a0:ca:0f:9d:7c:56:61:e8:67:
d7:0f:ca:7b:3d:f6:27:f5:a9:f0:f3:20:2e:7a:7b:
2c:06:34:b2:0b:9e:3b:11:51:5c:d7:8c:a1:8e:d1:
b4:43:84:97:b2:c5:4b:09:97:42:9f:11:46:b2:43:
de:1e:03:55:ad:00:69:cf:c3:9f:f2:64:99:44:61:
83:1a:32:32:b6:c2:90:a4:18:4b:dc:04:02:dc:d9:
45:82:e8:8a:ac:1d:8f:0d:fc:47:15:37:75:48:21:
37:bb:59:a0:10:be:3b:8a:a6:16:bc:58:90:8f:8f:
dc:f4:8d:2c:1e:29:b3:ea:14:57:13:67:ba:47:16:
f9:31:9c:67:ca:67:c0:38:62:3b:4e:58:d5:66:b7:
1a:ba:e2:2e:79:98:01:7b:bb:3a:14:2b:b1:2f:a4:
eb:b9:a0:f1:4c:ee:47:4d:8b:88:a8:3f:2f:b4:e0:
cb:ee:38:cc:52:82:e3:84:de:ee:57:ac:5f:bd:96:
18:35:8e:4e:c2:d3:2b:3e:70:3b:c4:61:14:0b:90:
7b:9a:ac:5b:50:3c:9f:65:52:cc:e9:86:57:d2:81:
b0:2f:68:85:23:1c:c9:b4:41:3e:50:2e:53:cf:33:
57:c2:a3:91:37:4e:d0:5b:66:f5:b2:9c:87:8a:50:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:52:97:8C:FE:39:94:37:4B:AE:7A:4F:46:E1:7C:6F:90:B3:7C:DE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/plKXjP45lDdLrnpPRuF8b5CzfN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.49.0/24
82.153.65.0/24
89.213.152.0/24
89.213.176.0/24
89.213.183.0/24
213.130.138.0/24
213.130.149.0/24
Signature Algorithm: sha256WithRSAEncryption
62:33:76:a3:b1:be:0d:0e:94:c4:c5:2b:8f:9b:2b:ea:b1:ac:
ea:54:37:b6:ce:60:46:9c:35:86:66:a9:f9:1e:b4:e5:f1:da:
ff:25:0a:66:04:d1:e3:0f:56:f8:f5:1f:c4:bf:23:ed:21:68:
db:7a:96:88:5f:c8:13:57:86:af:3a:13:c0:bb:05:ea:a6:79:
3f:9b:a7:bf:ed:9d:04:2a:42:ba:13:63:26:93:a0:91:fa:4a:
c4:26:0c:c6:7a:9a:01:c3:e6:b0:3b:f4:5c:4e:32:23:9c:2e:
86:4d:bb:d3:f5:b3:23:0a:0b:40:cf:ad:35:f1:59:00:ba:48:
d6:b9:bb:16:63:99:11:f6:63:6a:bf:75:3b:78:fe:13:d1:ac:
be:8d:48:6c:a9:d5:c9:21:78:f0:a2:7d:79:b7:03:14:98:40:
f8:e3:5c:a8:fa:68:83:44:fb:a3:7a:03:c4:f4:d8:c4:de:86:
d8:b7:46:1b:be:76:ce:c4:a2:2d:4f:c8:dd:0b:f0:4b:ba:18:
fd:a1:b9:79:7a:36:7d:61:14:bd:39:71:e2:dc:ce:52:51:7e:
6d:1c:18:56:57:ee:f8:ab:88:0d:23:fb:81:50:a7:f6:7f:38:
e9:0b:e3:04:73:5a:25:3a:de:0a:2d:6b:c9:47:64:f7:48:33:
f5:03:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org