Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/f1VefoleX_Gx5ZaY63lgGXjQ6lY.roa
File: f1VefoleX_Gx5ZaY63lgGXjQ6lY.roa (raw, json)
Hash identifier: 771ies6gwoVKLsx//EPEsPImYaHCcTEV6XYjQJEjdVQ=
Subject key identifier: 7F:55:5E:7E:89:5E:5F:F1:B1:E5:96:98:EB:79:60:19:78:D0:EA:56
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0ACB1218A6D356A053A2B9358973B7
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/f1VefoleX_Gx5ZaY63lgGXjQ6lY.roa
Signing time: Sun 01 Jan 2023 11:15:01 +0000
ROA not before: Sun 01 Jan 2023 11:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12566
IP address blocks: 62.62.169.0/24 maxlen: 24
87.255.128.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
194.153.88.0/23 maxlen: 23
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:cb:12:18:a6:d3:56:a0:53:a2:b9:35:89:73:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f555e7e895e5ff1b1e59698eb79601978d0ea56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:92:c5:a3:4e:ac:da:92:d5:fd:53:a9:3d:
97:85:1a:43:0b:08:10:d3:0c:a9:bd:1a:79:8e:c2:
d8:76:49:20:c3:81:3e:78:27:76:25:73:45:bc:6f:
be:d7:ee:6b:8d:26:34:ba:c1:82:5d:7f:04:74:e7:
55:9d:e2:ab:49:44:2b:b4:38:96:4a:28:71:1e:6f:
26:1c:71:3d:65:76:b0:7c:3b:00:f8:5f:db:48:d7:
0e:a5:4c:8f:ef:1a:5f:6b:ca:f2:78:e4:68:35:01:
f5:6d:28:85:f3:9c:51:62:1e:02:8e:d5:ee:ff:0f:
58:c2:c5:1d:65:89:a4:1a:91:76:68:d9:8a:b9:90:
ec:22:27:eb:d4:09:43:7a:af:65:02:0e:14:d8:31:
02:a9:04:7b:eb:93:fd:29:6a:86:f5:d1:5c:cf:b7:
af:cd:d6:1b:27:c5:b5:6a:7c:f5:59:dc:4e:e3:43:
c4:28:a0:32:49:ef:4a:88:e2:98:4e:21:d9:2a:8a:
75:f1:7b:3a:ee:c9:fb:f9:4f:f6:2b:e3:f6:1b:db:
a3:c7:6b:2c:0f:b1:9c:e3:f9:ac:20:54:ec:df:68:
fd:ec:3e:7b:83:81:3f:52:b2:26:ae:ac:c8:29:79:
c5:15:8b:cd:ae:7b:e5:2e:07:5b:ad:85:51:30:68:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:5E:7E:89:5E:5F:F1:B1:E5:96:98:EB:79:60:19:78:D0:EA:56
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/f1VefoleX_Gx5ZaY63lgGXjQ6lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.62.169.0/24
87.255.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
212.23.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:5e:b0:9d:5c:b3:3a:aa:c8:70:12:1e:23:ec:7e:34:28:fc:
a7:ef:f6:21:93:b6:08:41:78:ec:c2:e3:c6:e7:d0:65:de:e2:
c1:1b:69:b8:66:8d:ec:54:ea:39:97:69:c9:fe:2e:9b:53:27:
ef:b8:f9:a6:79:3f:43:0a:d0:e4:ea:82:c5:76:76:3e:32:22:
93:ad:92:66:ae:1b:28:09:fd:5f:d5:20:f6:0e:32:99:c1:c2:
4e:5e:bd:d6:17:e2:60:64:49:59:16:61:cb:bd:18:14:63:76:
4b:af:bb:ef:bc:84:c1:9e:a3:c7:d5:16:8e:05:8d:9b:f6:18:
00:36:09:a4:7c:4d:ec:9c:c1:8d:8b:83:6a:ed:1f:41:20:09:
a0:0b:af:a7:f6:83:0b:43:27:fc:d0:37:f1:55:be:7a:fe:18:
8b:0c:56:3a:9f:38:6c:1e:d0:89:57:25:6c:30:f1:a0:68:70:
a5:be:93:fc:ac:61:14:0e:ec:f0:ca:87:2d:5e:84:b8:0c:35:
80:e6:31:6b:96:ec:b5:8f:7e:d1:e4:1d:ce:dd:af:08:c9:78:
70:48:58:4b:09:c5:6a:94:6a:02:1d:09:41:ea:95:ea:ff:8c:
ed:0d:ee:52:69:24:28:c0:6c:91:9a:a0:bb:7c:2f:74:15:51:
22:95:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org