Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z5CHffsDw2i7Hf2WlXKqFxo22zs.roa
File: z5CHffsDw2i7Hf2WlXKqFxo22zs.roa (raw, json)
Hash identifier: 93xQF6uuFUy9WPPG54X2EOPqNqMgnKuUpx3GFboVBtU=
Subject key identifier: CF:90:87:7D:FB:03:C3:68:BB:1D:FD:96:95:72:AA:17:1A:36:DB:3B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0187706919BCBD418B4B403DB49CA82AE5AD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z5CHffsDw2i7Hf2WlXKqFxo22zs.roa
Signing time: Tue 11 Apr 2023 13:02:28 +0000
ROA not before: Tue 11 Apr 2023 13:02:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 82.153.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:69:19:bc:bd:41:8b:4b:40:3d:b4:9c:a8:2a:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 11 13:02:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf90877dfb03c368bb1dfd969572aa171a36db3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:bb:cc:ec:2e:2e:69:f3:f7:e6:e7:db:a0:
e7:ea:ce:34:ab:ff:23:ec:50:b6:3a:f4:d8:02:1d:
77:6e:8b:fa:32:ed:86:80:b2:c9:fa:75:1d:b1:2f:
06:2b:e4:4c:c8:f3:ae:9b:9b:98:96:5d:71:7b:59:
12:88:05:8f:f5:02:3a:f7:9c:4e:ac:8d:37:76:b6:
b3:8b:9e:11:d8:20:fd:f3:75:17:22:14:d3:11:9c:
b8:2c:7b:3a:a2:da:32:08:77:51:50:a7:16:8e:cc:
94:56:7d:8c:e3:07:6c:10:3a:55:44:0c:9c:f3:fe:
b9:5e:fc:fe:f7:ac:5d:62:d1:55:b1:57:b5:43:c6:
d1:60:fb:c4:6f:62:0f:00:5e:32:ac:b2:c8:9c:13:
8d:8a:87:14:07:19:19:19:a0:8a:88:e5:63:5b:e9:
18:59:1f:cc:e8:34:76:e5:fd:a0:7d:21:39:11:f2:
84:f3:49:90:e2:f5:aa:72:72:26:ff:71:26:d0:68:
b9:52:e3:d1:9c:57:e7:fe:b7:d6:7c:c7:2a:6b:56:
6a:c8:29:88:d0:d8:fe:37:09:2b:75:cb:1f:21:f6:
34:fe:6e:10:f0:d7:57:e2:58:70:d7:05:67:13:67:
5d:ee:da:02:db:c0:34:bc:92:3d:f4:83:c5:a6:95:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:90:87:7D:FB:03:C3:68:BB:1D:FD:96:95:72:AA:17:1A:36:DB:3B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z5CHffsDw2i7Hf2WlXKqFxo22zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:13:f8:82:20:24:d9:34:df:51:65:45:2b:e2:26:20:9c:f8:
43:b3:ef:f4:a2:60:de:0e:41:56:eb:a1:17:59:da:11:79:e5:
20:fb:07:fb:13:b5:cb:10:0c:8f:28:49:c7:9f:b3:6c:2d:a7:
4c:fe:58:24:62:c1:86:a7:ae:a3:11:9a:40:50:04:cf:c6:81:
b2:2a:b5:32:98:1a:41:a9:7a:9d:fb:77:a2:16:7a:33:f3:9c:
dc:34:c6:29:26:7e:bd:92:06:47:3d:c9:7b:db:2f:ea:49:36:
85:ff:0b:28:f2:03:14:c6:36:ac:eb:de:46:12:dc:8f:23:cc:
39:9b:c0:b4:ba:3a:7d:64:b5:cb:e5:72:31:1a:55:77:3f:10:
80:4d:fe:4f:fe:6a:a1:1b:a9:92:1c:6e:c8:e7:7e:24:d9:b3:
00:65:10:40:bc:77:71:ee:d8:88:f7:ce:0f:d1:bb:eb:00:a4:
83:50:bf:f0:20:50:55:4d:e3:0a:69:18:24:73:03:c9:09:54:
dc:09:e4:0c:82:e3:07:10:4d:cb:47:7c:64:0c:42:fa:67:64:
02:4f:61:bb:f1:da:c1:01:ae:11:96:f5:dc:ba:b1:ee:db:66:
3c:3b:46:f1:36:a8:81:2f:91:17:68:36:8c:08:2e:72:a1:67:
3d:ae:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org