Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sD9ogH3zoxv6W6kPwDwjIWM2a3E.roa
File: sD9ogH3zoxv6W6kPwDwjIWM2a3E.roa (raw, json)
Hash identifier: Zh+8FnJoczRH7kOls8WBQCCOle5gx2V9pSeNjEi94/8=
Subject key identifier: B0:3F:68:80:7D:F3:A3:1B:FA:5B:A9:0F:C0:3C:23:21:63:36:6B:71
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F49EE2DA38A567781E68911FA2002D8F0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sD9ogH3zoxv6W6kPwDwjIWM2a3E.roa
Signing time: Sun 05 May 2024 18:04:56 +0000
ROA not before: Sun 05 May 2024 18:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 81.168.120.0/24 maxlen: 24
82.152.248.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
89.213.4.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.190.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
185.49.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 16:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:49:ee:2d:a3:8a:56:77:81:e6:89:11:fa:20:02:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 5 18:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b03f68807df3a31bfa5ba90fc03c232163366b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:4a:ee:67:ce:3f:f2:c5:2d:64:b4:9c:d7:
79:72:d8:3d:42:ac:1f:75:20:6d:fd:48:72:e8:df:
f4:42:7c:01:08:ae:94:ad:9b:52:37:13:14:5a:4a:
a3:fa:7b:70:16:df:b3:d1:7b:5a:4b:04:6d:e8:2e:
07:5a:f7:f3:3d:31:6a:d5:cf:8b:0e:ad:96:d2:2a:
a9:d2:b9:31:8d:66:46:2e:46:b3:5f:7e:47:2e:a1:
99:9f:b5:d0:03:d5:af:87:09:54:57:6b:60:33:b2:
21:83:45:13:1b:42:df:76:fa:89:06:65:bd:70:c3:
59:0e:39:7d:9d:2a:cc:37:8e:b4:75:01:30:9f:c7:
6d:42:db:cf:36:db:80:c7:da:14:53:2e:da:e9:3d:
05:af:64:6e:5e:49:a8:39:6c:5d:78:16:1c:6c:08:
da:1d:1b:6e:8b:0e:20:db:8f:52:05:67:dc:c3:94:
2e:e9:6d:ee:f2:b4:62:40:d9:37:6b:c3:06:b1:f6:
44:c8:2c:5b:19:13:0d:65:3a:b2:18:66:3e:54:cc:
65:0f:37:3c:0c:0a:a6:28:f3:7b:78:32:02:ab:3d:
98:8c:35:91:63:69:7f:29:56:0b:c0:15:f6:8c:5a:
8b:9f:23:14:09:e9:41:a0:5e:46:09:64:fd:d7:14:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3F:68:80:7D:F3:A3:1B:FA:5B:A9:0F:C0:3C:23:21:63:36:6B:71
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sD9ogH3zoxv6W6kPwDwjIWM2a3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.120.0/24
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.69.0/24
82.153.72.0/24
82.153.79.0/24
82.153.132.0/24
82.153.224.0/24
89.213.4.0/24
89.213.6.0/23
89.213.130.0/24
89.213.190.0/24
109.176.247.0/24
109.176.251.0/24
185.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6e:c0:80:28:c4:aa:62:a7:06:6c:cb:c3:6e:b4:0b:f3:ab:
b0:fb:6a:67:cf:9f:20:45:9e:de:ec:5d:d5:5d:c7:53:58:1a:
57:81:7b:3f:24:f4:e5:33:0e:9d:08:9d:59:eb:52:df:69:9d:
b1:0e:b0:e5:c3:70:2a:18:20:3f:e1:9c:0f:8d:9b:9b:60:fe:
7d:49:15:23:17:11:27:0d:02:62:9b:1c:0c:ce:a7:de:c7:01:
2a:28:17:3c:34:13:80:63:f9:5b:48:a1:e7:e2:eb:27:17:78:
b1:b5:34:42:5b:c5:03:c3:c9:70:89:c5:84:48:05:4d:e4:5e:
bb:77:9e:db:65:94:47:61:b1:44:15:b9:63:ab:b0:fb:14:fe:
3e:2c:a5:78:89:dd:dc:dc:a2:ea:26:d1:a7:5c:fc:85:c6:41:
89:c1:45:c4:bf:0a:b3:9c:94:68:94:c9:88:e0:2f:92:5b:de:
48:0e:e2:60:bb:71:66:5a:77:18:c7:92:7f:fd:23:f7:df:71:
24:b7:53:2c:3c:c4:8d:90:04:e5:c6:0b:56:b7:6b:99:3a:82:
85:f4:5c:bb:97:66:a9:5a:11:a5:c3:8a:28:42:8c:eb:32:21:
c6:08:a0:e5:0c:02:8b:e3:d5:3e:f0:b1:ce:c8:b5:01:7b:93:
6f:f4:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:18:54 2024 by rpki-client on console-ams.rpki-client.org