Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sHNBl8xbiTk8TFDc_wHC-0l-wzg.roa
File: sHNBl8xbiTk8TFDc_wHC-0l-wzg.roa (raw, json)
Hash identifier: 1/yIVXNl3wrAj5UqMOac0x+MOVJ+pgS/YAIWhlpi3yE=
Subject key identifier: B0:73:41:97:CC:5B:89:39:3C:4C:50:DC:FF:01:C2:FB:49:7E:C3:38
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F8AB6297695F306F4773CB048FF140C7D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sHNBl8xbiTk8TFDc_wHC-0l-wzg.roa
Signing time: Sat 18 May 2024 07:59:04 +0000
ROA not before: Sat 18 May 2024 07:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 82.153.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 07:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8a:b6:29:76:95:f3:06:f4:77:3c:b0:48:ff:14:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 18 07:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0734197cc5b89393c4c50dcff01c2fb497ec338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:d9:92:7b:e0:a8:51:aa:60:e5:4a:4d:73:
09:0b:3a:ea:6f:16:7b:80:61:cf:dc:7c:08:5a:84:
ac:f9:48:8f:76:29:5d:e2:50:dc:24:9d:74:85:cb:
92:ac:a0:67:c7:c7:76:10:8d:da:5d:e9:d4:a4:5e:
fb:32:05:af:83:9e:76:01:c8:fc:fe:cf:e9:8b:93:
4b:08:cb:3b:d6:93:16:9d:67:39:35:39:64:d3:28:
29:08:a8:59:18:44:75:34:a4:c5:f8:23:88:85:2e:
06:02:b0:02:4a:12:55:46:62:39:b8:8d:5e:20:bf:
b3:ea:9f:c5:28:fc:59:83:da:04:a4:33:75:b7:dd:
4f:b4:53:fc:7f:52:c5:70:ed:3d:39:1a:31:1d:bf:
54:a7:68:63:15:22:2b:e3:11:63:88:d1:62:20:10:
ec:0c:dc:17:42:c7:57:d6:6e:cb:c9:4c:6d:b5:7a:
ef:2f:d0:84:96:2a:f1:6e:d2:31:ef:5a:da:b0:6b:
eb:8a:3c:4f:b4:a2:ab:41:42:6f:d0:3d:5e:44:b3:
9f:28:b9:bb:c7:4c:d6:20:13:3b:5f:56:d0:e3:53:
2c:7b:d1:4e:1f:7a:54:90:f9:8a:54:9e:36:81:b1:
57:b8:fe:c6:59:dd:b6:58:db:44:24:4e:22:9f:0e:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:73:41:97:CC:5B:89:39:3C:4C:50:DC:FF:01:C2:FB:49:7E:C3:38
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sHNBl8xbiTk8TFDc_wHC-0l-wzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.222.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5b:13:fd:3d:f7:e2:34:3b:7b:02:2a:1e:b1:94:73:57:56:
11:8c:f0:f2:04:c8:3d:08:36:07:22:65:e2:98:3b:87:7e:ba:
a7:e5:e0:c8:b7:12:b7:68:37:4f:d0:ba:0b:c2:b0:0a:6c:69:
67:29:6b:ed:8d:38:93:13:2b:51:f2:36:0f:5d:fc:de:42:59:
be:1c:df:a6:e0:58:4d:3c:1a:22:99:4d:9d:65:51:03:30:d8:
bb:a2:58:a5:16:9f:84:0d:f1:0d:37:8c:63:f4:0b:89:e9:40:
76:8e:9d:f4:b0:74:df:a1:94:9b:8c:e9:09:57:c0:04:de:7d:
c2:72:60:fc:3f:c5:e0:d4:f2:48:d8:32:e6:e9:28:45:92:f0:
07:bd:37:09:4c:25:58:77:61:b3:9a:51:5d:3f:14:44:ec:25:
5e:ad:8d:50:bc:7d:0f:6d:55:c9:82:1d:7b:90:ea:f1:0b:ae:
b3:12:1d:4a:17:42:6b:6e:4f:c5:84:0e:2c:ab:3c:d1:a1:ad:
81:65:75:86:53:35:f6:7d:55:29:da:e0:b3:91:75:04:d3:44:
dd:18:10:fb:f3:11:16:5a:50:22:2e:9c:12:9c:a6:1b:0e:aa:
77:c1:93:bb:96:72:d1:43:f9:7c:4a:39:88:25:1e:5d:8d:99:
56:9b:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org