Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/_3kFzXEVk40TH3QP8VT_GBeKlXw.roa
File: _3kFzXEVk40TH3QP8VT_GBeKlXw.roa (raw, json)
Hash identifier: 4vULM/qlPrg8tD7SruJkodTctLlj1weVOAMuwWtblU8=
Subject key identifier: FF:79:05:CD:71:15:93:8D:13:1F:74:0F:F1:54:FF:18:17:8A:95:7C
Certificate issuer: /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial: 01892589BB487CB51A03AB8EA4B0D1EE1415
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/_3kFzXEVk40TH3QP8VT_GBeKlXw.roa
Signing time: Wed 05 Jul 2023 10:12:10 +0000
ROA not before: Wed 05 Jul 2023 10:12:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31027
IP address blocks: 37.25.64.0/23 maxlen: 23
37.25.68.0/22 maxlen: 22
37.25.66.0/23 maxlen: 23
185.29.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:89:bb:48:7c:b5:1a:03:ab:8e:a4:b0:d1:ee:14:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Validity
Not Before: Jul 5 10:12:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff7905cd7115938d131f740ff154ff18178a957c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:5d:9a:de:81:a3:af:c7:05:0c:94:a2:fc:
8b:9d:07:fe:75:79:3a:d7:71:2a:af:ce:3d:e4:b6:
bc:9e:83:c4:44:42:33:c2:a3:a9:ea:32:d2:d8:0b:
ae:1c:7d:73:aa:80:2b:24:7e:a6:0b:50:ad:43:9a:
41:14:69:b4:13:ea:1d:fa:b3:bd:7c:b6:df:32:9a:
df:76:35:2f:f7:d8:9a:68:af:ed:9e:3d:40:d6:b9:
f5:a8:0a:3a:7b:54:67:f7:62:45:e0:88:6b:84:0f:
b5:34:14:e9:e6:17:0d:e8:24:66:1d:8b:c0:8e:e2:
dc:86:04:ee:a6:48:a8:9c:be:42:ae:1c:ba:b4:0a:
64:00:30:00:e2:50:bb:44:06:97:1b:a0:15:c3:cc:
10:0a:06:08:d1:31:8c:e4:0c:ce:62:a1:88:72:2d:
66:14:d6:64:a6:6b:19:8d:a4:da:90:18:19:be:06:
35:7a:9f:24:b0:1c:bc:64:1c:11:f7:18:1b:68:26:
0f:29:09:78:15:94:13:97:30:b8:72:c8:46:df:01:
23:13:d7:3e:c0:34:e3:d6:d7:6f:43:84:41:73:c0:
9a:fd:ea:56:19:9f:47:8c:49:43:45:2a:dd:01:78:
b5:27:68:d7:08:93:08:b6:1a:21:03:cc:af:b6:1b:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:79:05:CD:71:15:93:8D:13:1F:74:0F:F1:54:FF:18:17:8A:95:7C
X509v3 Authority Key Identifier:
keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/_3kFzXEVk40TH3QP8VT_GBeKlXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.64.0/21
185.29.168.0/22
Signature Algorithm: sha256WithRSAEncryption
45:81:a6:ac:9a:16:57:d6:7f:10:3c:9a:63:39:9c:0c:d1:9e:
69:c2:41:33:cc:d4:29:0c:bb:8a:b3:10:9e:c2:fc:b5:85:da:
60:e1:73:13:69:ad:ce:e9:bf:d5:40:f6:33:58:05:d8:fb:28:
b9:e2:71:c1:f6:ef:53:2d:0c:cc:e4:d2:fa:e9:a6:3f:7e:f3:
f7:03:62:2c:a3:e9:4b:32:8f:bf:c0:fc:80:bd:d3:10:91:1d:
57:51:f3:e6:e5:05:c4:30:77:38:38:e8:78:7b:6d:c5:e5:b0:
d7:a9:d4:af:12:fc:27:0e:bf:1d:c8:c2:cb:ca:30:83:0f:a9:
4e:59:7c:21:45:a5:05:9c:cf:40:66:05:ee:e7:1a:ec:eb:52:
33:c8:cc:f2:34:f9:73:86:1d:fa:dd:49:20:3e:54:18:fd:ee:
83:43:7a:13:b4:3e:65:42:4a:6a:01:b7:bd:15:4a:b8:00:ad:
33:48:92:a3:68:c5:6a:b0:4d:6a:85:b7:5e:ac:15:ec:6e:30:
9f:c4:91:44:e5:fa:ce:e4:44:e5:41:d4:57:2f:28:e6:b5:c1:
8f:bb:99:b4:93:f5:6e:af:e5:d6:46:65:14:7e:48:0a:ab:6b:
e6:4f:53:55:29:b3:34:0b:4e:e5:18:b8:d6:9e:9a:6d:f4:cc:
6f:99:ca:20
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYklibtIfLUaA6uOpLDR7hQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWZkNDdkODM2ZmNhNmY3NDFjYWEzODIzOTM3ZjRiYjFm
MWIyOTQwHhcNMjMwNzA1MTAxMjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjc5MDVjZDcxMTU5MzhkMTMxZjc0MGZmMTU0ZmYxODE3OGE5NTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit9dmt6Bo6/HBQyUovyLnQf+dXk6
13Eqr8495La8noPEREIzwqOp6jLS2AuuHH1zqoArJH6mC1CtQ5pBFGm0E+od+rO9
fLbfMprfdjUv99iaaK/tnj1A1rn1qAo6e1Rn92JF4IhrhA+1NBTp5hcN6CRmHYvA
juLchgTupkionL5Crhy6tApkADAA4lC7RAaXG6AVw8wQCgYI0TGM5AzOYqGIci1m
FNZkpmsZjaTakBgZvgY1ep8ksBy8ZBwR9xgbaCYPKQl4FZQTlzC4cshG3wEjE9c+
wDTj1tdvQ4RBc8Ca/epWGZ9HjElDRSrdAXi1J2jXCJMIthohA8yvths7OwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP95Bc1xFZONEx90D/FU/xgXipV8MB8GA1UdIwQY
MBaAFPJf1H2Db8pvdByqOCOTf0ux8bKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMt
YmI3YTQzZTU3ZjM4LzEvXzNrRnpYRVZrNDBUSDNRUDhWVF9HQmVLbFh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMtYmI3YTQzZTU3ZjM4
LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDJRlAAwQC
uR2oMA0GCSqGSIb3DQEBCwUAA4IBAQBFgaasmhZX1n8QPJpjOZwM0Z5pwkEzzNQp
DLuKsxCewvy1hdpg4XMTaa3O6b/VQPYzWAXY+yi54nHB9u9TLQzM5NL66aY/fvP3
A2Iso+lLMo+/wPyAvdMQkR1XUfPm5QXEMHc4OOh4e23F5bDXqdSvEvwnDr8dyMLL
yjCDD6lOWXwhRaUFnM9AZgXu5xrs61IzyMzyNPlzhh363UkgPlQY/e6DQ3oTtD5l
QkpqAbe9FUq4AK0zSJKjaMVqsE1qhbderBXsbjCfxJFE5frO5ETlQdRXLyjmtcGP
u5m0k/Vur+XWRmUUfkgKq2vmT1NVKbM0C07lGLjWnppt9Mxvmcog
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:24 2024 by rpki-client on console-fra.rpki-client.org