Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qGPnsdbs74lAwnNzSrn1_riKGkM.roa
File: qGPnsdbs74lAwnNzSrn1_riKGkM.roa (raw, json)
Hash identifier: ldnotkIixAMQWBaWefQi9d1iZNTqmkLG8F8wTz2JSq0=
Subject key identifier: A8:63:E7:B1:D6:EC:EF:89:40:C2:73:73:4A:B9:F5:FE:B8:8A:1A:43
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3494C668D94BA39F5066972C1BDCAD2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qGPnsdbs74lAwnNzSrn1_riKGkM.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 89.213.181.0/24 maxlen: 24
82.152.174.0/23 maxlen: 23
89.213.143.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
82.153.208.0/22 maxlen: 22
89.213.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 08:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4c:66:8d:94:ba:39:f5:06:69:72:c1:bd:ca:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a863e7b1d6ecef8940c273734ab9f5feb88a1a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:30:21:5e:2a:d4:d2:aa:bb:d8:e8:9a:0c:
f8:65:21:0d:e3:22:12:52:2c:c8:2e:63:7e:ec:34:
77:14:df:1a:77:04:e0:e7:67:2b:06:15:31:f5:c0:
f0:fd:3d:ae:2e:41:71:ce:ab:88:bd:3a:8f:e3:58:
f1:be:6d:a2:f0:21:53:29:0b:88:52:11:14:28:f2:
de:0d:02:82:28:77:67:3c:fb:a6:25:f1:f5:6c:f0:
e6:8a:4c:a6:b4:6c:97:af:e6:bb:c8:af:44:2f:dc:
35:e4:c9:6f:3f:68:d3:0d:27:55:98:7f:ab:ba:1d:
25:6f:75:76:22:e7:0f:0d:22:f1:8e:79:94:7d:77:
c9:45:a3:67:aa:f6:c4:33:ae:a0:4d:df:2e:72:cd:
92:32:e7:75:77:ee:cc:66:9d:5e:9c:71:e9:38:e0:
0c:a2:00:3f:fd:2d:fc:79:2f:d9:fc:56:9b:ff:3d:
3a:27:7b:12:84:7a:05:db:db:8c:b7:a0:91:60:59:
8d:58:2e:89:86:48:d2:9b:a1:49:00:f0:12:42:3f:
17:6e:4e:92:b0:76:01:2d:52:c2:d5:d8:21:22:09:
4b:85:62:e5:4d:20:b2:03:e2:97:8a:60:66:07:fe:
75:0e:3d:31:bf:5f:c1:52:a2:0b:a6:c2:7a:8a:32:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:E7:B1:D6:EC:EF:89:40:C2:73:73:4A:B9:F5:FE:B8:8A:1A:43
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qGPnsdbs74lAwnNzSrn1_riKGkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.174.0/23
82.153.208.0/22
89.213.143.0/24
89.213.147.0/24
89.213.158.0/24
89.213.181.0/24
109.176.246.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7f:0f:dc:9c:d8:67:f8:d2:52:b3:5c:94:0b:ea:2e:49:72:
70:0d:93:43:73:7c:5a:f7:d3:ea:e5:24:81:47:86:a1:48:fa:
88:89:97:40:5e:01:c8:e6:ab:32:1c:47:8f:64:af:47:16:16:
1f:af:4e:df:cd:f0:ab:a9:35:2c:61:77:33:e7:76:90:41:ed:
b4:5f:cb:77:22:03:21:b1:ec:08:bf:34:67:f1:48:79:6d:be:
92:57:14:2e:ae:38:f6:37:c6:77:2c:ea:ec:59:79:7a:3f:12:
e0:6c:5f:fe:71:d6:2b:29:8d:e2:80:15:6d:cb:ea:55:c5:ec:
79:d1:48:16:2b:d2:48:cc:4d:9c:0b:e1:81:90:98:e8:e5:2b:
c4:72:90:03:f6:8f:e3:39:d7:ad:51:9b:66:71:53:14:d0:da:
47:e5:f1:ef:51:5c:e0:4e:18:92:1e:63:71:5a:3a:e1:53:49:
50:28:2b:31:4b:56:17:68:b2:59:80:11:08:bd:2b:3f:b6:12:
0c:b4:db:1f:1b:32:aa:81:a6:ae:99:65:c9:e3:3a:54:5b:7d:
7d:c6:02:2c:b5:77:d4:8a:2d:3a:63:99:d6:e0:b7:4b:b7:ec:
8f:86:a0:4c:66:4c:d8:f7:c2:8a:36:d6:32:6c:d8:d3:f7:f0:
3c:13:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org