Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Vo-LvPfTj3dqwz2fFFrGReWd1cs.roa
File: Vo-LvPfTj3dqwz2fFFrGReWd1cs.roa (raw, json)
Hash identifier: y2hK3PyW5ABclS3WdPu4fGzWeCGgOxojAkoGcT7gqIU=
Subject key identifier: 56:8F:8B:BC:F7:D3:8F:77:6A:C3:3D:9F:14:5A:C6:45:E5:9D:D5:CB
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0192C01F6AB598DE361C63B1CFA42A1DD571
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Vo-LvPfTj3dqwz2fFFrGReWd1cs.roa
Signing time: Thu 24 Oct 2024 20:02:17 +0000
ROA not before: Thu 24 Oct 2024 20:02:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 31.40.196.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
84.54.0.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
85.235.72.0/22 maxlen: 22
139.28.48.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
176.53.156.0/22 maxlen: 22
176.96.128.0/22 maxlen: 22
193.32.204.0/22 maxlen: 22
194.93.48.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 28 Oct 2024 20:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c0:1f:6a:b5:98:de:36:1c:63:b1:cf:a4:2a:1d:d5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 24 20:02:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=568f8bbcf7d38f776ac33d9f145ac645e59dd5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:40:fc:d9:d9:04:f1:6f:d5:18:97:c9:8d:
bd:ba:b9:ed:9a:25:f5:e5:28:a1:e9:99:c6:9d:c9:
b2:b9:7c:af:4f:20:92:74:ad:8f:0b:d4:42:e3:d2:
40:67:26:37:5b:be:52:86:b4:19:ab:53:05:d4:c6:
2e:d4:23:2b:f1:83:f3:18:fb:29:96:17:7d:8f:c1:
42:20:f9:60:24:8c:34:aa:11:28:f5:5d:83:cd:dc:
e2:49:65:92:9a:d9:76:28:f5:ff:35:f9:93:04:c3:
d7:1f:e5:f0:ed:c1:ed:b0:e3:0e:9e:d7:cc:7a:c6:
78:f7:1a:18:0a:62:ed:6e:d7:3e:84:f6:f2:25:f3:
e4:56:87:29:b1:3a:45:4a:13:31:33:89:34:a8:a1:
1a:7d:9e:98:f7:97:7d:0f:02:28:88:28:dc:2f:2b:
83:64:69:51:d0:70:e0:0a:9a:47:72:54:38:89:e7:
ed:14:72:74:61:8d:7f:79:55:fc:85:68:67:79:bc:
2f:62:c7:7f:76:2f:a8:3a:07:62:72:14:c3:6e:f1:
64:3e:5f:46:46:a0:ef:8b:ec:b9:96:88:d5:64:7a:
2a:09:b5:50:4b:23:56:64:54:6e:a3:d9:12:22:dc:
cf:c9:fa:48:46:03:b0:7e:b0:75:7c:e8:72:7f:d8:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:8B:BC:F7:D3:8F:77:6A:C3:3D:9F:14:5A:C6:45:E5:9D:D5:CB
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Vo-LvPfTj3dqwz2fFFrGReWd1cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
83.171.244.0/22
84.54.0.0/22
85.8.144.0/22
85.235.72.0/22
139.28.48.0/22
139.28.212.0/22
176.53.156.0/22
176.96.128.0/22
193.32.204.0/22
194.93.48.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
25:6c:f1:9f:c2:94:f1:1a:e0:79:54:49:1a:4c:48:85:17:b1:
5b:90:19:13:87:bf:ee:45:2b:b6:2f:78:d7:89:3b:99:65:28:
51:d5:b9:2b:ba:b5:df:a6:a1:04:41:70:3c:31:c2:89:e2:0d:
ef:95:9c:e7:ca:57:7e:bd:10:39:d3:cb:a6:55:aa:aa:74:df:
9b:4d:60:43:4f:79:e8:d1:49:74:c4:25:48:c0:e0:be:81:02:
96:1e:37:c2:6a:32:ba:7b:65:df:e4:83:6f:84:84:58:56:80:
05:a8:62:91:6e:0e:17:0a:c2:40:6f:82:57:5e:52:0b:21:48:
c6:6e:e7:be:24:e8:38:45:c3:5e:d8:7b:ba:93:8f:5f:8f:30:
b3:c1:83:58:31:e5:8a:ad:89:49:6f:90:0a:2c:2e:de:3b:bf:
94:4f:7e:76:d9:77:20:b7:f2:0d:0a:16:1f:c1:47:78:9c:02:
9f:0a:16:96:06:66:33:8e:8b:49:ed:0c:c9:a5:51:ec:a4:ed:
29:4d:8c:7b:36:d5:84:25:f5:83:c5:a6:25:17:31:9f:29:86:
71:95:bc:35:51:ea:bb:7b:b8:01:bf:df:e1:95:3c:35:3d:01:
dc:28:1e:5f:4b:84:a3:da:db:fb:b4:87:a8:26:cd:d7:88:a7:
e1:09:a5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 23:40:08 2024 by rpki-client on console-fra.rpki-client.org