Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rF7KW_OLW9H4wC4a9f6B0jLIFB8.roa
File: rF7KW_OLW9H4wC4a9f6B0jLIFB8.roa (raw, json)
Hash identifier: /xHJaKfYJYZ65qkDySQsDqVQYNVfMslIIw9ClkRrTbU=
Subject key identifier: AC:5E:CA:5B:F3:8B:5B:D1:F8:C0:2E:1A:F5:FE:81:D2:32:C8:14:1F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E74D1EE58F8538DCEDDEE607731EBC818
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rF7KW_OLW9H4wC4a9f6B0jLIFB8.roa
Signing time: Mon 25 Mar 2024 08:54:58 +0000
ROA not before: Mon 25 Mar 2024 08:54:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 82.153.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 18:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:d1:ee:58:f8:53:8d:ce:dd:ee:60:77:31:eb:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 25 08:54:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac5eca5bf38b5bd1f8c02e1af5fe81d232c8141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:4e:19:5f:1d:ee:f1:20:61:76:de:1d:fd:
92:7c:56:44:d7:01:3b:20:53:85:76:b5:cb:c2:31:
d0:c1:48:f3:8f:53:3f:b3:41:43:62:69:09:cc:a6:
8a:a8:28:69:de:cc:6b:24:85:a3:21:52:72:46:f7:
ae:b7:94:64:7b:72:af:cc:71:24:b9:c0:0c:5a:c1:
80:27:5c:a4:e5:6a:04:11:73:54:b9:43:f2:43:de:
ac:9d:08:20:c7:f4:f7:68:c4:ec:7a:f7:2e:f6:57:
9b:28:4e:8d:e0:45:04:ce:99:99:ba:f2:f6:78:15:
5f:72:f4:22:0a:c6:0b:d0:c2:b2:5c:58:3e:47:9d:
66:bc:31:4e:16:f7:25:c0:8d:25:9f:4d:86:ab:3a:
4d:a5:36:74:17:5d:2e:7a:5f:d6:13:69:c9:35:af:
65:89:d7:5b:5e:d2:44:82:c4:ce:7b:55:36:12:32:
3b:09:ec:15:b6:1a:cf:48:66:00:72:6d:76:2e:59:
9f:3f:af:c1:10:29:a0:7d:41:91:b6:4f:7f:a4:44:
d6:5a:1b:85:b0:14:f6:21:18:b1:53:f5:8c:4e:52:
86:06:fd:bf:b9:03:2d:bb:bd:e1:82:ea:8d:49:fb:
15:51:07:ab:15:57:52:23:cf:65:6b:4c:66:ad:68:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5E:CA:5B:F3:8B:5B:D1:F8:C0:2E:1A:F5:FE:81:D2:32:C8:14:1F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rF7KW_OLW9H4wC4a9f6B0jLIFB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.255.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2f:23:96:0d:16:c3:54:9a:48:69:fb:07:aa:f3:32:3c:2d:
70:2e:2d:68:f1:be:bf:6d:a7:26:ac:1a:00:75:b2:e3:7d:60:
5c:9d:b9:7c:1d:49:87:e8:76:b3:a9:af:58:e1:cd:e7:3b:06:
74:e5:d3:89:c4:31:02:31:8a:a9:28:d3:34:07:10:c2:15:e0:
de:ee:15:b2:66:40:87:31:dd:19:a0:27:dd:c2:4d:da:95:c8:
f8:6d:e3:27:4b:fb:2c:bb:a1:f5:12:e4:a9:f8:9c:c8:ac:94:
85:ac:99:64:32:d1:98:9f:0e:b3:33:db:f4:e5:0f:0e:0f:36:
e5:fe:17:be:c4:29:86:bd:9b:cb:52:91:d2:41:eb:7a:52:03:
b0:56:6c:aa:48:24:fd:e7:17:8a:d0:f3:2d:0c:f6:b8:bc:a3:
68:3a:3e:2b:37:cb:b8:2e:a0:73:fa:cd:7e:3c:22:0d:33:e6:
cb:a7:c5:52:b6:07:2a:68:c8:41:9f:69:b9:a1:8d:31:ca:13:
c1:20:20:9a:a0:f8:23:d4:a7:20:18:c9:9a:ed:4b:42:93:cf:
ee:0f:50:ee:4c:5a:a0:a6:3e:b5:9d:27:ab:8e:ea:b1:5d:16:
2e:1f:9d:62:0f:8b:a1:16:c2:22:f4:82:c6:52:39:8f:57:49:
15:dd:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:13:28 2024 by rpki-client on console-ams.rpki-client.org