Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/pDVY8IEt8Fq8C0Bs3tdeFY3XEvY.roa
File: pDVY8IEt8Fq8C0Bs3tdeFY3XEvY.roa (raw, json)
Hash identifier: 3ahaAPhqqDljkNNxkdEE0pfcS9ryTGoPuzDPQguta4s=
Subject key identifier: A4:35:58:F0:81:2D:F0:5A:BC:0B:40:6C:DE:D7:5E:15:8D:D7:12:F6
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 0186EA6F9B804F78E4A7DEC321A712383793
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/pDVY8IEt8Fq8C0Bs3tdeFY3XEvY.roa
Signing time: Thu 16 Mar 2023 12:40:28 +0000
ROA not before: Thu 16 Mar 2023 12:40:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6810
IP address blocks: 85.130.192.0/18 maxlen: 24
81.218.102.0/24 maxlen: 24
85.130.128.0/18 maxlen: 24
62.219.92.0/24 maxlen: 24
31.168.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 16 Mar 2023 12:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:6f:9b:80:4f:78:e4:a7:de:c3:21:a7:12:38:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Mar 16 12:40:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a43558f0812df05abc0b406cded75e158dd712f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:8d:76:9b:4d:47:23:72:75:33:0f:66:2a:
a8:cb:81:7e:2b:a1:7d:97:a6:ac:63:31:b6:d6:75:
47:88:31:c6:e1:ad:1f:95:a4:59:62:3b:7f:a8:05:
ee:cc:5e:db:a5:69:d2:a1:73:37:40:6c:77:4b:51:
30:97:be:c8:ef:c2:70:50:38:02:44:f9:60:c5:9b:
61:3b:77:c2:73:92:57:fc:97:90:02:ef:3d:12:f6:
98:d4:98:a5:16:98:b8:f5:6c:d2:89:99:e6:f1:b0:
5e:77:ef:c3:67:28:ea:f2:42:8d:49:82:58:3d:69:
4d:e3:96:dc:9a:2c:bd:33:46:6e:5a:ab:c4:15:bb:
4e:ef:a7:79:55:4c:81:2d:cd:df:b3:2e:ec:c9:2f:
e4:40:3a:67:0e:93:a5:17:70:88:24:d5:27:59:73:
4e:09:51:3c:65:39:60:e3:b0:c2:d8:c4:52:69:15:
a7:d7:74:6f:8c:d4:a1:4a:d9:fe:20:89:7c:26:65:
25:8c:da:b0:28:40:ad:f2:af:71:c6:c1:f6:97:59:
e8:bb:9f:cf:61:29:18:39:96:22:7c:cb:b3:a3:12:
db:52:f1:be:73:b5:bf:0e:60:c9:00:4d:54:3f:c5:
be:0d:d6:89:9b:71:05:d6:4a:27:e5:c0:c6:97:77:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:35:58:F0:81:2D:F0:5A:BC:0B:40:6C:DE:D7:5E:15:8D:D7:12:F6
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/pDVY8IEt8Fq8C0Bs3tdeFY3XEvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.168.36.0/23
62.219.92.0/24
81.218.102.0/24
85.130.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0e:c6:b4:ef:5a:47:4a:ef:ec:b4:ee:70:47:9e:4b:6c:da:36:
c0:ab:31:c8:12:15:b1:1a:6b:ba:b4:17:cc:61:03:fe:33:06:
58:f7:76:af:4e:88:db:aa:ba:8d:9d:66:2d:87:bc:80:8e:f8:
41:cf:f7:21:b8:c8:fa:62:09:0d:03:9f:a4:35:23:8f:6f:2b:
37:58:6f:a6:8a:0c:cb:00:6e:de:6f:20:49:a5:70:19:2f:e4:
b2:39:e5:72:e7:de:51:62:f8:55:cc:27:76:a3:a3:e5:e8:ab:
e2:1e:a8:6e:13:c5:94:ef:18:f3:02:21:ed:0e:af:ff:f1:9e:
73:5c:8c:f3:de:c6:68:c5:2a:c5:f4:a8:5c:30:d9:fe:a5:99:
b7:13:a6:34:cd:14:b1:d7:9e:d5:b0:c3:ec:74:ab:6e:62:1c:
45:a5:66:0c:56:1f:ef:02:9e:7c:a9:d3:4a:8d:b0:ab:b9:f7:
6e:d2:73:5b:e2:3e:c4:b7:76:4f:ba:82:4c:cb:44:71:14:d4:
38:50:a2:35:47:5c:f6:ca:11:d9:6b:b9:53:cd:59:7a:4d:6b:
b9:b3:b7:ce:4e:c0:5b:34:6a:1c:17:45:c7:70:17:f1:be:ed:
e5:82:7f:ce:bb:67:96:c3:0c:5a:b2:88:69:b1:19:84:7a:33:
d3:56:dc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:17 2024 by rpki-client on console-ams.rpki-client.org