Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zGjSQaoHPDPfEp6IJgcLVWBbmHk.roa
File: zGjSQaoHPDPfEp6IJgcLVWBbmHk.roa (raw, json)
Hash identifier: IF6D8AqKl9MwWFulz2lFc63PJoKsDXgoIH5km06rFYI=
Subject key identifier: CC:68:D2:41:AA:07:3C:33:DF:12:9E:88:26:07:0B:55:60:5B:98:79
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D63E3E6044D58B848C0A9AD1643850434
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zGjSQaoHPDPfEp6IJgcLVWBbmHk.roa
Signing time: Thu 01 Feb 2024 08:58:16 +0000
ROA not before: Thu 01 Feb 2024 08:58:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 11:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:e3:e6:04:4d:58:b8:48:c0:a9:ad:16:43:85:04:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 1 08:58:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc68d241aa073c33df129e8826070b55605b9879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:6f:07:f4:e2:f9:24:69:ba:d3:69:b9:d1:
ad:ae:38:38:82:09:04:ce:a4:8f:ca:c3:49:69:42:
d9:3a:07:8e:a6:26:85:4e:03:d8:ce:e6:48:7b:5e:
0b:63:62:7d:62:ff:c1:92:24:18:d6:cf:30:e2:ed:
0a:85:ac:31:0a:12:22:d2:6e:4d:4b:03:5a:fe:b2:
2d:d1:1b:76:ef:88:2f:64:06:92:55:6e:58:76:41:
10:7f:96:e6:31:33:79:48:0e:29:b8:bd:db:21:92:
60:1f:7e:0a:4e:a2:6d:16:06:f4:0a:90:f7:5f:42:
7d:e6:d8:89:12:06:69:09:dd:70:c7:1c:2a:dc:23:
a8:12:5d:23:aa:aa:11:64:4f:35:a8:66:a5:9e:10:
64:55:8b:1f:77:4b:ef:32:89:df:46:43:e1:0d:06:
5e:0a:8d:e4:9e:8c:49:8d:1d:4e:2b:c3:4e:69:ad:
7b:24:03:79:fb:70:b5:eb:67:13:db:69:60:3f:2f:
34:29:70:c1:46:fc:5f:95:bc:af:ca:12:a7:5d:a6:
49:83:55:7f:85:55:aa:b2:8c:98:e2:c6:5b:d4:ac:
27:d1:fd:f6:0e:ae:39:cc:79:5b:1b:ef:65:56:f9:
80:e3:1e:7d:84:d6:c3:c9:09:bb:c2:7f:3a:14:92:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:68:D2:41:AA:07:3C:33:DF:12:9E:88:26:07:0B:55:60:5B:98:79
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zGjSQaoHPDPfEp6IJgcLVWBbmHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
92:34:3d:b8:8c:8d:55:e0:b4:6a:c2:5e:02:c6:db:4d:21:e3:
c4:80:76:4a:17:42:aa:1c:50:d6:13:e1:60:ea:f6:43:88:89:
95:06:c1:79:f7:5c:59:b1:d4:02:58:ba:46:a6:d4:fb:60:c3:
5f:1d:e1:a7:57:66:b7:9c:bc:84:92:d9:f3:de:b1:64:7c:1f:
9c:17:56:5c:04:51:81:0e:79:91:16:05:5c:82:10:cc:1c:4a:
88:0c:94:ea:18:8a:05:01:ab:1a:9f:91:cb:1e:8f:c1:49:75:
23:d8:07:9c:32:80:7d:fd:c9:ab:bf:15:f4:c6:77:d6:74:4d:
e4:94:d9:cf:80:23:2f:2b:62:5b:4a:31:5e:f5:57:e0:85:78:
7a:a5:53:71:49:7c:ea:22:71:6f:cf:73:81:d5:15:ee:31:a1:
d4:8c:67:58:01:4b:9e:09:e5:0b:63:4b:cf:55:e3:6c:f5:22:
30:92:5d:a3:7a:aa:cb:2f:5b:b8:8a:07:eb:39:08:fb:d6:5a:
84:b0:d4:b1:fd:35:f3:80:54:07:d0:1d:79:f0:b5:e3:c7:d2:
e6:39:49:76:82:df:f7:56:a3:0c:f0:54:b9:d4:f3:dd:91:b3:
ef:26:77:a8:39:43:94:50:fe:fb:1a:ae:d1:3b:0c:4a:72:46:
d7:af:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org