Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tyjttNLPerUsaDAtXoT39wRmvD8.roa
File: tyjttNLPerUsaDAtXoT39wRmvD8.roa (raw, json)
Hash identifier: gnAeqCqSfvOnmDNjJb84mtkyGuP0Neau4AstX9hnIBI=
Subject key identifier: B7:28:ED:B4:D2:CF:7A:B5:2C:68:30:2D:5E:84:F7:F7:04:66:BC:3F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F867859A6CCAF9EE9A2FBEC86F1C2A4B6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tyjttNLPerUsaDAtXoT39wRmvD8.roa
Signing time: Fri 17 May 2024 12:13:05 +0000
ROA not before: Fri 17 May 2024 12:13:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.152.176.0/24 maxlen: 24
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.97.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.210.59.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
213.218.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 May 2024 07:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:78:59:a6:cc:af:9e:e9:a2:fb:ec:86:f1:c2:a4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 17 12:13:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b728edb4d2cf7ab52c68302d5e84f7f70466bc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f3:c4:e5:ba:a5:d4:a7:89:cf:86:63:f7:f3:
8a:25:da:60:f5:86:5f:de:82:64:9b:ea:49:82:fb:
48:a0:2b:cc:6c:f5:0b:88:ab:9d:ed:0d:24:bb:04:
51:1d:b3:fa:91:3b:67:5e:44:85:74:07:18:cf:08:
bf:68:0d:5e:f5:ac:81:5d:30:5d:16:eb:6b:8c:58:
94:12:4e:a2:af:9c:a6:db:b0:da:40:3f:c6:12:d8:
5b:58:0a:f3:e4:e3:24:f8:22:92:0e:6c:98:57:81:
49:b3:5e:4f:a8:21:05:3b:99:ba:30:08:e5:2b:68:
7b:25:3d:52:55:30:08:aa:cb:6d:68:63:50:4c:c2:
97:91:7c:e5:6d:e2:8c:bb:e6:91:32:fd:75:c8:b1:
c2:dc:d7:6b:f2:ef:82:25:d1:04:6a:35:dc:87:55:
42:e1:b4:69:93:11:b8:5e:c1:8e:7f:95:58:82:72:
34:1c:b0:73:46:26:02:4e:9c:a6:07:bc:dd:16:ce:
48:c1:da:7b:74:c0:26:0f:3e:b0:86:0f:03:66:05:
47:ea:9b:47:42:65:d5:e9:27:98:f5:af:0f:11:27:
dd:c8:6f:88:ac:ac:d3:04:75:11:a8:29:0f:27:cc:
8c:5c:1d:11:1a:27:41:af:a4:e4:2e:a2:71:37:77:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:ED:B4:D2:CF:7A:B5:2C:68:30:2D:5E:84:F7:F7:04:66:BC:3F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tyjttNLPerUsaDAtXoT39wRmvD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
89.213.97.0-89.213.98.255
89.213.148.0-89.213.159.255
89.213.172.0/22
109.176.16.0/21
185.49.126.0/23
194.105.80.0/20
213.130.130.0/24
213.130.149.0/24
213.210.59.0/24
213.218.210.0/23
213.218.213.0/24
213.218.231.0/24
213.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2b:3a:10:cb:04:bb:1b:3c:3d:3c:af:57:46:12:eb:dc:b2:
dd:f9:1f:b5:b7:44:c9:64:e7:45:69:30:d8:4a:be:80:f2:1d:
a3:80:b1:4e:30:7c:cd:46:bb:15:e3:64:a2:b6:ef:b3:6f:a7:
14:64:64:95:7b:6b:c6:37:65:71:92:8a:c2:40:69:26:b5:85:
3a:9e:5b:83:47:54:28:95:f8:32:89:99:56:6c:ac:73:74:b9:
4c:94:91:19:d3:bb:c3:54:f9:a2:cc:1c:53:97:a5:97:50:56:
b9:bd:3d:b5:07:42:57:ca:f6:99:d5:e3:9f:84:9c:57:59:69:
75:6d:ba:8e:e4:c5:f0:30:bf:e7:53:68:cd:36:4e:ed:70:b3:
a8:61:88:76:75:07:df:12:df:da:58:bf:84:16:10:a2:33:ef:
d2:e1:55:40:85:54:37:ba:e5:04:58:45:5c:ca:6a:ab:d7:5a:
a8:eb:62:b7:42:4c:f8:cb:80:56:38:0e:08:61:57:a6:f7:84:
d8:0a:55:46:b5:4d:cf:ed:45:31:d0:28:4c:c5:40:4b:c8:90:
56:d5:f5:89:8d:c1:02:46:cc:bb:1e:3c:9d:ce:07:5e:b1:69:
b3:c0:de:85:9d:5a:59:ba:c4:57:4b:b9:ff:c3:ec:96:80:75:
51:38:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org