Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/5VJV-0cUjN7fR8n2_t396K8mKv8.roa
File: 5VJV-0cUjN7fR8n2_t396K8mKv8.roa (raw, json)
Hash identifier: 1dKI2y2LOFcQkSq5F8/NmNE2LbcVfR8/ADP5IEFOWW0=
Subject key identifier: E5:52:55:FB:47:14:8C:DE:DF:47:C9:F6:FE:DD:FD:E8:AF:26:2A:FF
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 018CCA2B0954FAF8730E426CB556FDB25814
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/5VJV-0cUjN7fR8n2_t396K8mKv8.roa
Signing time: Tue 02 Jan 2024 12:34:27 +0000
ROA not before: Tue 02 Jan 2024 12:34:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12306
IP address blocks: 82.98.127.0/24 maxlen: 24
213.83.0.0/18 maxlen: 32
82.98.64.0/18 maxlen: 32
212.19.32.0/19 maxlen: 32
2a02:2e0::/29 maxlen: 128
2a02:2e0:a::/48 maxlen: 48
2a02:2e0:cd4e::/48 maxlen: 48
2a02:2e0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 10:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:09:54:fa:f8:73:0e:42:6c:b5:56:fd:b2:58:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 2 12:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e55255fb47148cdedf47c9f6feddfde8af262aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:95:51:89:f6:f9:e7:92:c5:bb:c3:8d:99:
ee:26:4d:a5:67:1e:bb:d8:bc:49:4b:09:cf:bb:fb:
c6:c9:05:39:55:7f:f5:68:a7:d2:4d:d8:15:4c:87:
3f:d2:cc:a6:99:9b:7e:f2:d5:d9:4b:c2:d2:62:1f:
76:10:3a:32:e0:36:09:80:57:06:ef:33:84:dc:78:
53:48:58:fc:86:bb:32:cf:57:74:c0:bb:4c:68:66:
1d:f0:2c:bb:ef:12:7f:d1:fb:8f:01:be:6b:7e:78:
fd:52:9b:b6:76:29:9b:6c:a0:87:5f:7d:cf:7a:5d:
8d:7c:c4:94:c1:bb:31:64:65:e8:58:d4:52:26:12:
bb:9d:93:80:4e:73:97:c5:5e:71:a1:d0:4a:30:79:
a9:e2:f9:66:5c:55:9f:2f:90:01:7d:36:31:e6:00:
2e:bf:a4:9d:3b:d8:5b:90:39:35:dc:1e:78:c7:6c:
c0:f5:cf:a2:7a:97:2e:45:30:39:05:86:13:da:ad:
95:cf:74:98:d5:db:c0:0e:6b:64:66:95:b2:38:9f:
cc:34:4d:5e:e0:f7:50:32:32:c4:b7:b0:89:6a:1c:
09:46:e7:68:42:44:ce:0f:b4:c8:12:63:8c:32:28:
c3:da:26:ff:4f:ed:e0:7b:78:93:de:aa:a6:a4:fd:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:52:55:FB:47:14:8C:DE:DF:47:C9:F6:FE:DD:FD:E8:AF:26:2A:FF
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/5VJV-0cUjN7fR8n2_t396K8mKv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.64.0/18
212.19.32.0/19
213.83.0.0/18
IPv6:
2a02:2e0::/29
Signature Algorithm: sha256WithRSAEncryption
95:91:fb:57:1b:47:84:61:77:1c:be:8e:01:62:70:b9:27:c4:
04:af:b0:f9:bb:66:7e:92:69:fa:48:1c:db:a6:ce:ac:47:5a:
53:90:38:13:cb:20:b0:73:9c:38:a1:93:f4:a8:02:44:97:1b:
4d:12:13:63:9a:4c:0c:30:a2:70:89:ae:27:37:64:dd:14:63:
4d:52:b3:7d:9d:87:9d:ed:d6:88:90:e6:83:55:99:cf:de:38:
a1:95:36:f8:c8:7e:cc:db:d9:6a:aa:6d:45:b1:b3:ac:a5:ae:
86:32:8f:98:a3:cd:c0:fb:ec:d9:33:ff:9e:e5:a6:e9:61:09:
59:98:bc:c0:81:22:62:ce:63:5a:57:8d:5e:55:9c:88:1b:18:
ec:47:e7:eb:ad:5a:40:24:db:54:1b:6d:0a:9d:e2:3c:b1:c1:
d1:79:64:4a:06:cf:04:c8:92:c4:6e:37:c4:03:85:75:8c:21:
32:68:56:e2:c3:bc:7c:0c:0b:21:70:a4:cb:af:94:42:7f:dd:
94:11:b9:a8:4b:ab:fc:37:4f:50:ed:83:10:be:7a:f8:87:48:
49:66:1f:d3:12:62:ea:15:55:e5:13:1f:bf:08:6d:f7:90:a9:
20:23:8a:e6:c0:4d:80:2c:7a:7a:32:58:c7:f3:09:e7:65:a6:
b3:f2:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 15:19:13 2024 by rpki-client on console-ams.rpki-client.org