Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/2pVmC8n3-Zu4FmCh4GbQ4WSNZuY.roa
File: 2pVmC8n3-Zu4FmCh4GbQ4WSNZuY.roa (raw, json)
Hash identifier: LPxAZ/XUytm5WTxQIeX8KWUMUksWrL8O9h0PgrHwg1Q=
Subject key identifier: DA:95:66:0B:C9:F7:F9:9B:B8:16:60:A1:E0:66:D0:E1:64:8D:66:E6
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 01856E542A6B90352455EE53561C039D0766
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/2pVmC8n3-Zu4FmCh4GbQ4WSNZuY.roa
Signing time: Sun 01 Jan 2023 17:14:47 +0000
ROA not before: Sun 01 Jan 2023 17:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48737
IP address blocks: 93.188.132.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.215.0/24 maxlen: 24
163.171.216.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Mar 2023 11:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:2a:6b:90:35:24:55:ee:53:56:1c:03:9d:07:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jan 1 17:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da95660bc9f7f99bb81660a1e066d0e1648d66e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2e:b3:ed:bb:53:08:5e:7b:59:71:2b:e6:8d:
18:77:0e:a0:c4:a0:c8:1d:64:07:d7:4f:7c:7a:44:
63:4c:bb:d4:3f:47:47:09:c1:78:be:2d:63:94:ac:
34:99:ac:94:9b:89:b9:9c:df:7d:fb:26:f6:a5:b4:
cd:56:cb:9c:e3:42:23:96:31:f8:48:1d:f3:26:24:
46:a8:c5:75:14:7a:ef:32:ce:a8:66:54:18:08:bf:
75:63:47:00:d2:55:e9:b7:23:1e:cb:f1:71:e3:98:
53:b3:7d:7d:53:44:08:8d:6e:4f:b6:8d:3d:4f:5f:
b2:65:58:25:92:0e:a9:88:3a:48:d2:36:2d:24:6c:
70:bc:e5:46:eb:9d:2a:18:52:87:89:f3:13:52:71:
8c:9b:f2:7c:c2:11:90:d7:e4:5d:67:69:05:04:4e:
2d:3a:a2:8d:5e:f8:55:5b:24:ea:10:11:10:7b:15:
7f:78:de:f0:25:b7:63:a0:f6:29:36:e2:66:c6:5d:
ea:8c:95:82:4e:c6:43:d0:d3:c3:63:ba:de:95:3d:
41:a1:05:7d:31:53:c6:34:37:b8:4a:dc:4c:fc:35:
7c:4a:e4:f9:22:33:3e:7b:27:f3:35:35:4f:2c:b7:
83:ed:95:8e:38:24:f0:9d:79:09:9c:24:48:23:8d:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:95:66:0B:C9:F7:F9:9B:B8:16:60:A1:E0:66:D0:E1:64:8D:66:E6
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/2pVmC8n3-Zu4FmCh4GbQ4WSNZuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.132.0/24
93.188.135.0/24
163.171.215.0-163.171.216.255
163.171.231.0/24
163.171.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e2:ef:f1:65:fe:4c:6f:13:3c:b9:a0:6b:7f:19:4a:93:26:
9d:20:28:1b:fe:e5:fb:de:07:13:f1:4f:b9:85:64:dd:0a:b0:
81:be:c1:37:ed:4a:81:86:6d:00:b3:c3:05:9c:58:46:7a:2e:
61:5f:9b:0c:c0:f3:1a:5a:b2:08:ad:7b:95:06:d8:4a:2c:e9:
98:d2:10:ca:f6:2e:8b:52:69:e4:a8:8d:5b:4c:75:d8:5d:55:
53:0f:e0:72:bf:58:d3:b1:a3:ac:fe:9d:e0:ba:9a:f6:f3:57:
b6:18:21:ac:31:dd:fc:0f:2a:9a:4f:92:11:c8:b5:44:4f:8b:
31:1d:a7:d9:bc:06:8b:48:84:36:0b:40:92:ad:9b:74:7c:0d:
e4:da:84:08:e4:1d:09:c3:6c:02:62:8d:a7:a4:25:08:36:1d:
86:ac:be:f2:8c:61:11:53:89:d4:85:c7:12:ae:d5:d9:b5:94:
34:73:5e:76:50:22:64:20:98:57:9b:01:55:09:a0:ce:1b:58:
29:0c:f9:78:70:bb:2c:1d:93:b1:48:7e:ea:c2:89:c4:e2:4d:
6b:5a:e6:76:11:7b:29:13:fe:f3:15:89:ae:dd:5c:39:05:58:
4c:89:28:d3:60:3e:5c:39:eb:c6:48:e6:5a:da:90:50:be:2f:
00:65:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-fra.rpki-client.org