Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yi7DshbhYBELLQ9mwUzx6UFK0lQ.roa
File: yi7DshbhYBELLQ9mwUzx6UFK0lQ.roa (raw, json)
Hash identifier: Hk3a3QLbUH432/S00PSi3p90eSWY7TUvx9Tgd2YldZE=
Subject key identifier: CA:2E:C3:B2:16:E1:60:11:0B:2D:0F:66:C1:4C:F1:E9:41:4A:D2:54
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC34949B26E510AE24AAAD84355F3A0EC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yi7DshbhYBELLQ9mwUzx6UFK0lQ.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9050
IP address blocks: 82.153.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 08:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:49:b2:6e:51:0a:e2:4a:aa:d8:43:55:f3:a0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca2ec3b216e160110b2d0f66c14cf1e9414ad254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a7:5a:45:44:49:19:7c:81:53:9b:29:7c:8b:
3f:e3:c5:c9:40:23:a8:11:76:d5:0a:a3:b5:1a:b9:
0c:73:8b:05:5a:58:2f:37:84:dd:a6:51:4e:1c:ce:
26:fc:7c:56:64:bd:0f:b0:4e:fd:4e:99:2e:59:62:
f2:18:d9:14:7b:40:79:d7:2e:36:df:c5:31:30:15:
81:56:43:87:22:ed:fc:b7:4a:2a:42:46:42:ba:34:
2d:71:7f:a7:c5:c5:8d:71:c9:4f:3e:e4:22:99:a1:
d3:9a:46:f1:eb:d7:29:62:21:15:3a:b3:fa:15:20:
5f:27:7d:94:f3:3e:36:63:e5:2c:a1:dc:58:7f:6d:
ea:be:d8:83:c5:4f:f1:ad:10:7b:87:d3:4b:a8:ce:
4f:c8:83:68:0d:be:a2:07:fb:16:d1:72:4c:f8:78:
f2:6c:77:76:40:54:cc:e2:59:44:09:d4:3f:23:2b:
5d:72:8d:d3:d7:65:79:04:2b:f2:9f:9c:6a:fc:72:
d4:ce:d1:f1:fb:04:3a:52:8e:1a:c3:39:6f:ed:d6:
18:7d:3c:19:57:f4:16:ca:16:f9:6c:98:36:6f:1e:
31:f1:97:42:91:ad:2d:c2:5d:84:93:af:f6:54:a1:
ce:51:5b:52:11:1e:56:71:cf:e9:6a:64:27:e2:ed:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2E:C3:B2:16:E1:60:11:0B:2D:0F:66:C1:4C:F1:E9:41:4A:D2:54
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yi7DshbhYBELLQ9mwUzx6UFK0lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.138.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ce:7e:01:81:f6:99:11:4a:fb:c9:72:e9:e5:84:92:b3:94:
84:b2:43:3d:79:88:3b:87:13:74:00:56:bf:1b:e6:38:f8:93:
14:51:c3:a2:2a:3c:4d:97:35:ca:2a:54:75:ff:71:95:71:32:
40:31:77:85:d9:4c:db:a7:17:7a:8b:9f:d8:af:2e:e1:2d:09:
78:fe:6b:02:dc:ac:30:9f:58:0e:53:31:b3:f6:f1:1b:75:cb:
07:a5:9f:61:50:8d:28:b8:af:c4:b8:82:c4:62:b3:8a:f4:5b:
2f:98:bb:ca:26:7e:c3:55:23:f9:01:22:dc:5a:a4:c0:90:14:
17:f4:7f:1a:db:f8:96:16:bf:23:04:32:ed:ed:b1:62:92:d8:
7e:85:9a:4f:56:91:32:01:da:ae:ca:5f:24:8c:5f:f7:85:bb:
5c:69:66:37:c6:d2:0a:30:37:21:9a:f1:4e:c1:12:20:48:b6:
0e:df:af:5b:53:fb:91:b0:d5:45:41:51:34:6f:36:a5:72:58:
74:6e:c9:0b:83:f9:79:4f:70:61:b0:52:c1:e9:16:c4:c6:af:
d2:1c:56:33:b6:cd:8e:ac:7f:5a:43:5c:d6:14:e3:5d:ef:f4:
b1:76:88:cd:e4:6a:54:9e:5e:f6:27:93:e2:d2:3d:9b:f6:30:
a8:fb:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org