Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sEJ_MaxoVh91jKwfLG2dOQdHM9Y.roa
File: sEJ_MaxoVh91jKwfLG2dOQdHM9Y.roa (raw, json)
Hash identifier: zT24T1rXqtmFafIClew0kk/grkk9h4BhsNClWwskmnM=
Subject key identifier: B0:42:7F:31:AC:68:56:1F:75:8C:AC:1F:2C:6D:9D:39:07:47:33:D6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189405DB862B1177CF140062530FF2EA0CF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sEJ_MaxoVh91jKwfLG2dOQdHM9Y.roa
Signing time: Mon 10 Jul 2023 15:13:51 +0000
ROA not before: Mon 10 Jul 2023 15:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140155
IP address blocks: 109.176.252.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
89.213.47.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 16:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:5d:b8:62:b1:17:7c:f1:40:06:25:30:ff:2e:a0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 10 15:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0427f31ac68561f758cac1f2c6d9d39074733d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:65:02:bb:db:ef:43:8c:99:61:04:9a:48:
57:4e:f3:cc:db:d0:6f:db:7b:f5:c7:87:17:a9:87:
7c:ad:b3:92:78:ba:9f:6d:73:d2:7e:fd:59:4e:8c:
de:3a:98:5b:fa:e7:eb:49:1d:88:fd:3d:be:0b:b7:
30:0e:11:66:a2:70:c7:f4:e6:9a:66:5c:d5:56:7e:
df:0f:31:28:eb:8b:5d:6c:49:6b:11:de:83:86:1d:
2a:e7:b3:45:9c:88:91:60:b3:4c:3c:95:c1:3e:da:
fa:41:ea:0f:11:1a:01:a7:e2:6b:7f:09:a2:67:5a:
c3:77:61:0f:1f:a1:13:d5:78:51:19:e5:c5:01:55:
10:6c:86:55:29:63:94:86:bc:3b:61:1c:bf:e0:fc:
7f:a3:92:43:a6:28:10:d0:c9:75:06:14:4c:c2:81:
2a:8b:8a:a4:6f:bf:07:e6:2b:d1:3d:4e:91:51:f6:
5e:85:d0:55:55:f4:5d:7b:bf:f8:43:57:9c:b4:5d:
35:f7:12:17:ac:49:7c:92:d9:e2:3a:87:e6:ec:c7:
1d:9a:b7:8f:4e:51:b5:5f:66:6a:ee:fe:14:49:bb:
7c:0f:93:40:b6:17:01:2a:e7:fd:2d:c6:a1:12:61:
74:3d:b0:c7:71:e8:f4:e2:c1:40:4a:12:45:c1:9b:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:7F:31:AC:68:56:1F:75:8C:AC:1F:2C:6D:9D:39:07:47:33:D6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sEJ_MaxoVh91jKwfLG2dOQdHM9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.225.0/24
82.153.227.0/24
89.213.47.0/24
89.213.141.0/24
89.213.146.0/24
89.213.154.0/24
89.213.162.0/24
89.213.164.0/24
89.213.174.0/24
89.213.181.0/24
89.213.188.0/23
109.176.251.0-109.176.252.255
Signature Algorithm: sha256WithRSAEncryption
1d:38:6d:8b:3b:59:4d:3f:39:8a:78:10:d9:40:34:ab:d3:4b:
aa:bc:a9:38:64:a4:27:b5:c0:af:36:b2:de:30:a8:3d:bc:f1:
6a:30:f4:30:25:73:e8:94:bb:c4:c1:61:da:e0:d9:72:4d:cf:
34:a3:ee:5a:a5:2f:99:73:42:25:de:f4:f8:8f:46:cb:8c:20:
3c:34:69:0b:0c:31:43:5d:d1:3b:44:96:39:a8:10:73:e9:ad:
b7:28:ac:0b:9d:15:42:ef:e5:11:57:a3:66:80:3c:6e:8d:9c:
6f:22:1c:f0:c2:d7:4a:be:af:fc:74:d9:a8:0d:f1:64:29:e3:
f4:c2:93:ac:e7:ca:3b:6a:de:8c:1b:7f:bc:5e:af:02:88:8d:
11:97:d2:73:84:15:8d:87:a3:85:37:37:d3:cf:0c:e6:7d:f2:
c2:0f:11:42:9b:2e:68:50:67:76:1a:ad:a0:1e:1b:0a:d9:1c:
35:1a:93:73:e3:87:7d:b4:91:e7:1d:0c:63:99:64:b8:61:f1:
f5:b1:db:50:ce:4a:5c:f0:38:cf:11:06:70:05:90:d6:3b:52:
a2:06:5a:ea:9b:06:9d:c8:aa:88:96:83:a6:6a:25:59:4f:04:
83:24:0c:14:29:a9:63:a2:3e:99:7a:0f:8c:a6:4d:cd:23:17:
b5:88:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org