Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/P2vWX3M_Wxhn-Jz32g_SgD_-X7I.roa
File: P2vWX3M_Wxhn-Jz32g_SgD_-X7I.roa (raw, json)
Hash identifier: nrhEDFNqbVLh5XhpU/JLeTgb24oFDyohR5OCoLnBaRk=
Subject key identifier: 3F:6B:D6:5F:73:3F:5B:18:67:F8:9C:F7:DA:0F:D2:80:3F:FE:5F:B2
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 018D5FE0693F5D46D1BB906402F1DA500E34
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/P2vWX3M_Wxhn-Jz32g_SgD_-X7I.roa
Signing time: Wed 31 Jan 2024 14:15:58 +0000
ROA not before: Wed 31 Jan 2024 14:15:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9080
IP address blocks: 79.127.128.0/18 maxlen: 24
85.132.140.0/22 maxlen: 24
212.71.128.0/18 maxlen: 24
213.168.160.0/20 maxlen: 24
2001:ae8::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Feb 2024 15:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:e0:69:3f:5d:46:d1:bb:90:64:02:f1:da:50:0e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Jan 31 14:15:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f6bd65f733f5b1867f89cf7da0fd2803ffe5fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:f8:3b:28:ca:01:15:b2:43:af:48:0e:04:
ed:a0:b2:ed:59:03:98:35:0d:e3:68:97:7e:9f:22:
0f:57:ed:7b:90:fc:d3:20:05:e9:45:04:9d:4d:15:
b1:f7:2c:6c:e8:91:e2:1a:2f:ec:ac:13:9f:66:6b:
38:a3:7f:c6:1f:ec:6e:25:60:e6:09:5e:4d:0f:eb:
5d:40:ad:ef:94:7b:89:0b:4c:bd:ad:41:ee:32:2f:
ec:76:9b:25:f4:fd:0d:dd:60:50:88:a3:bf:73:6c:
56:18:4e:5a:47:79:d9:1f:b2:b7:65:35:1d:bc:3f:
43:81:c1:0e:3b:5a:3a:44:b1:47:73:b3:da:f6:e0:
c0:a8:96:e4:5a:c3:0c:2f:a2:d9:81:5f:18:d3:b3:
1b:12:57:63:74:a1:55:00:35:a6:9d:9c:ef:cb:86:
4a:41:af:28:33:cb:1f:10:79:7e:59:cb:79:18:38:
46:30:2a:16:1e:4f:43:67:56:fb:c6:59:71:73:80:
b2:16:a2:68:39:e0:71:c5:65:f3:42:9a:0d:cd:8d:
db:95:f0:0e:01:dc:56:71:cc:ec:6f:52:e6:cb:6f:
12:29:43:02:65:8a:58:b9:fe:ac:d8:31:9c:b6:f2:
b1:4f:99:f0:e7:b1:94:e4:9d:bd:f6:03:5a:cd:4a:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:D6:5F:73:3F:5B:18:67:F8:9C:F7:DA:0F:D2:80:3F:FE:5F:B2
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/P2vWX3M_Wxhn-Jz32g_SgD_-X7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.128.0/18
85.132.140.0/22
212.71.128.0/18
213.168.160.0/20
IPv6:
2001:ae8::/32
Signature Algorithm: sha256WithRSAEncryption
c2:98:ff:b5:12:a0:d8:f5:37:e9:d1:25:fe:18:df:dd:18:8d:
be:30:7a:6f:ca:46:78:20:59:dd:59:d3:df:e1:6c:c7:94:64:
90:dd:a5:f9:37:5b:9d:85:4e:c0:da:09:33:57:d2:57:75:ab:
1e:88:cd:ad:f2:65:dc:dc:cd:b6:39:82:dd:23:fc:e0:51:f1:
81:9b:13:d8:c3:77:55:7e:e0:5a:9b:67:39:a7:ee:31:6a:05:
c6:59:90:ad:42:67:0d:bf:b8:d2:19:28:08:71:59:e9:75:70:
57:32:3a:b6:5e:ed:50:3c:0a:62:a2:98:32:2d:35:4f:db:45:
9f:97:46:21:d6:ac:ce:2b:92:dd:01:32:c2:83:5b:18:5d:41:
67:81:9d:f1:ca:83:3f:0b:89:c7:d0:80:c9:16:78:67:de:6d:
25:74:a2:30:68:a3:dd:b6:49:25:fd:ae:82:4f:7b:41:1f:46:
5b:fc:02:3f:82:8d:73:09:77:c0:c2:28:dd:b7:e2:0b:a2:40:
77:fd:e1:b6:4d:a4:31:21:73:53:50:79:1b:7a:93:fa:ce:e6:
06:f9:1b:b6:04:e4:e3:d0:14:e2:e5:3b:26:b8:9e:1c:28:1c:
de:21:df:f4:51:75:cc:07:57:ab:ba:e3:8e:0b:45:8d:b9:f9:
7d:5f:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:28 2024 by rpki-client on console-fra.rpki-client.org