Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/vsmaMzj3nT6t6psY8CVIhUOAwac.roa
File: vsmaMzj3nT6t6psY8CVIhUOAwac.roa (raw, json)
Hash identifier: Q+28/r1vQysiavKGvAuf0zDnzE/UU5a2ri4To6Y8NR0=
Subject key identifier: BE:C9:9A:33:38:F7:9D:3E:AD:EA:9B:18:F0:25:48:85:43:80:C1:A7
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 018CC9BBA29A238342B4E9C79B3CA039614B
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/vsmaMzj3nT6t6psY8CVIhUOAwac.roa
Signing time: Tue 02 Jan 2024 10:32:46 +0000
ROA not before: Tue 02 Jan 2024 10:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9063
IP address blocks: 195.66.0.0/21 maxlen: 21
213.185.65.0/24 maxlen: 24
213.185.68.0/22 maxlen: 22
213.185.66.0/23 maxlen: 23
213.185.72.0/22 maxlen: 22
213.185.76.0/23 maxlen: 23
185.5.28.0/22 maxlen: 22
2a02:7940::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 14 May 2024 05:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a2:9a:23:83:42:b4:e9:c7:9b:3c:a0:39:61:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Jan 2 10:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bec99a3338f79d3eadea9b18f02548854380c1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:26:3f:59:53:4d:70:a9:fa:e3:42:9b:49:
bd:6a:0b:b4:4a:6d:de:91:2d:f3:0d:d3:db:6e:ac:
b0:97:fe:7f:ee:b7:00:45:b2:e2:50:87:34:41:62:
0a:67:94:44:bb:fc:20:ee:de:4c:64:ec:b9:11:c0:
07:ae:08:b1:04:51:35:b6:3b:02:52:8a:f3:29:d1:
00:5d:19:51:8d:a2:52:e6:1d:25:f4:a8:5b:33:79:
01:92:91:b1:43:9f:08:e6:36:53:29:41:ad:a1:07:
36:bf:52:42:cd:5f:ab:2d:51:1d:13:96:3c:a6:eb:
d7:79:12:c2:e4:9b:4d:07:41:92:2c:d6:35:62:0f:
41:5e:dd:49:6e:66:af:be:20:52:5b:30:8f:ba:1e:
f1:47:1c:e0:09:f4:c3:96:31:2f:e8:31:90:7a:92:
b7:da:62:6e:66:30:52:4e:6f:bd:0d:a2:8b:fa:49:
42:cd:48:dc:ae:27:3d:d8:7f:6b:bc:31:f9:ae:7c:
3c:91:3d:78:10:fe:5c:c2:ca:49:78:a8:79:7f:b7:
42:22:fd:30:5c:6d:ab:cb:d3:7a:2e:79:37:79:72:
59:69:da:ff:8a:e8:14:61:82:6a:e7:e0:a2:97:3c:
72:ef:2c:86:c6:da:a9:e2:f0:23:61:f0:58:c9:63:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C9:9A:33:38:F7:9D:3E:AD:EA:9B:18:F0:25:48:85:43:80:C1:A7
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/vsmaMzj3nT6t6psY8CVIhUOAwac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.28.0/22
195.66.0.0/21
213.185.65.0-213.185.77.255
IPv6:
2a02:7940::/32
Signature Algorithm: sha256WithRSAEncryption
6d:bf:47:60:cb:04:d6:5a:83:0b:0c:6b:1e:a2:dc:2c:b8:50:
89:4d:3f:08:57:b4:be:45:8c:8f:98:a4:26:83:14:dd:22:93:
1c:bc:5e:72:35:49:1d:e2:88:0f:34:e3:d9:00:bb:eb:35:52:
f6:c4:e1:70:a3:54:e0:0a:bc:09:1e:4c:94:8d:d3:8e:dc:da:
3b:a3:e8:5f:a2:be:86:c7:a3:f8:9a:b2:3e:9f:44:a7:43:5f:
c6:45:9a:c1:0b:a1:4e:9f:86:30:68:a0:7c:10:8c:fd:15:13:
1c:34:35:6e:eb:86:3b:35:4e:b9:9b:d2:31:c9:e5:e0:25:9f:
b5:a8:70:81:f1:62:9e:79:f0:d4:d8:1f:13:77:b8:20:d9:51:
bc:65:9e:f6:1f:a6:5e:a1:f3:53:b2:42:6f:e4:eb:05:31:56:
b8:41:07:88:9a:d9:99:c7:b4:0f:42:2c:63:95:2c:6b:59:57:
04:d0:b3:96:54:1f:8f:64:f1:ca:fd:9a:b6:8f:ec:cf:71:f1:
60:de:7c:c6:6f:9e:ef:39:08:55:2a:85:c2:bb:7c:bd:7f:e5:
20:24:f7:93:61:bb:00:4b:01:47:f4:01:2d:7e:c3:98:e8:e4:
63:89:87:cc:63:49:9f:10:f9:0f:4b:a9:f6:92:c2:52:78:c0:
5f:5c:22:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:45 2024 by rpki-client on console-ams.rpki-client.org