Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yDq1Pqwm-YZvcXMLR_9e3jWH8Jk.roa
File: yDq1Pqwm-YZvcXMLR_9e3jWH8Jk.roa (raw, json)
Hash identifier: 2Wy3SyfxyAuuvUhGFbaXpI0Pmwv7FUq8uOqcoYxV5y0=
Subject key identifier: C8:3A:B5:3E:AC:26:F9:86:6F:71:73:0B:47:FF:5E:DE:35:87:F0:99
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C82565A68824BA573FF5471B821F0B71B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yDq1Pqwm-YZvcXMLR_9e3jWH8Jk.roa
Signing time: Tue 19 Dec 2023 13:49:06 +0000
ROA not before: Tue 19 Dec 2023 13:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 82.153.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:56:5a:68:82:4b:a5:73:ff:54:71:b8:21:f0:b7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 19 13:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c83ab53eac26f9866f71730b47ff5ede3587f099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:66:13:f8:3e:48:70:fe:72:87:ff:f4:40:
f9:20:dd:bd:24:1a:c4:da:9b:86:04:96:55:7a:4a:
03:8b:16:6a:0d:23:76:b2:83:8c:ad:a6:61:8b:0f:
9b:9a:c6:64:70:f6:9c:ad:01:cd:be:cd:96:0b:9f:
64:33:d4:ec:76:73:2e:10:8c:1f:73:cf:74:4e:ce:
24:cc:77:4f:74:6e:d7:fd:9d:94:85:1c:35:2f:4a:
a8:a0:cf:c1:fa:45:81:b5:21:e9:bb:5d:87:70:83:
4d:e6:b7:08:31:29:85:74:b6:9e:f6:bd:46:60:43:
88:9f:a8:12:de:aa:f0:a3:55:fd:2f:fc:64:31:4c:
69:82:bd:52:a1:2a:28:35:2c:c6:b5:2d:77:10:79:
fc:fa:ea:00:c4:3a:84:de:f5:7d:0e:3b:a2:ac:95:
45:63:a3:07:72:b6:14:4c:2d:fb:3c:2b:c6:9a:ab:
f4:5e:ec:c1:10:cb:96:5b:8f:74:54:88:61:5a:1b:
7b:7b:09:7f:aa:1d:4b:55:02:10:63:97:dd:a2:96:
4f:cf:b4:93:9e:19:2e:a3:d5:27:5e:08:56:08:cf:
9d:97:1a:d7:d6:3e:0a:27:74:b2:8d:a8:78:64:9d:
b6:3c:e3:93:56:c7:f1:5c:57:86:93:4b:34:77:47:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3A:B5:3E:AC:26:F9:86:6F:71:73:0B:47:FF:5E:DE:35:87:F0:99
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yDq1Pqwm-YZvcXMLR_9e3jWH8Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5f:a9:7f:3a:2c:ec:13:8f:4f:cf:0f:bf:9e:c8:bd:58:f0:
a2:e5:10:d7:2c:ca:22:57:87:3a:bf:0b:0a:1b:ce:bd:b7:d8:
92:96:b0:1b:b9:fa:c2:2e:94:b1:99:d2:8b:bd:11:25:08:ea:
c6:87:c5:9e:87:e9:54:32:71:e4:76:cb:ae:c8:1e:e4:bd:ab:
d8:8b:32:20:62:c0:3c:27:6c:ee:f1:22:0d:a2:b5:c1:d4:bc:
c8:78:2c:65:99:e4:b8:cb:fd:c5:44:8a:04:07:b6:da:b5:ab:
8a:88:61:71:9c:61:50:a3:a5:7e:6f:48:cb:d6:c5:0a:7e:a5:
cd:45:2d:02:0a:18:af:97:eb:a8:8f:6a:03:1e:86:08:a3:78:
65:a9:1b:b3:1b:ed:ad:7a:e4:3e:ca:c6:22:4c:14:b8:e9:ed:
ad:ff:d5:b2:2c:8d:ee:09:61:49:48:6f:2e:c4:2a:31:e9:d5:
db:37:92:f5:13:8f:fb:13:71:31:ac:6b:62:7b:2b:40:56:72:
61:ad:c1:56:d1:04:09:5a:91:94:70:53:86:a8:d0:a8:c7:2f:
ed:fc:bc:5d:61:3e:39:0a:e6:c2:9b:15:4b:2c:47:3f:43:9c:
67:a5:2d:76:80:ff:b9:06:dc:c5:33:3a:ad:7b:0d:7e:b2:a6:
bd:b4:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org