Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3fx_NVS9a2pFJ1FUSMwGJTHRnG0.roa
File: 3fx_NVS9a2pFJ1FUSMwGJTHRnG0.roa (raw, json)
Hash identifier: KqAlBvzPrdXHDz5194o8u1nUJwXQhq2RwMplWfUNDQ4=
Subject key identifier: DD:FC:7F:35:54:BD:6B:6A:45:27:51:54:48:CC:06:25:31:D1:9C:6D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0186E623210B043CD65E90DD4280948A68A2
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3fx_NVS9a2pFJ1FUSMwGJTHRnG0.roa
Signing time: Wed 15 Mar 2023 16:38:27 +0000
ROA not before: Wed 15 Mar 2023 16:38:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212097
IP address blocks: 178.19.39.0/24 maxlen: 24
185.28.49.0/24 maxlen: 24
185.227.102.0/24 maxlen: 24
178.19.36.0/22 maxlen: 22
178.19.36.0/24 maxlen: 24
178.19.37.0/24 maxlen: 24
178.19.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:23:21:0b:04:3c:d6:5e:90:dd:42:80:94:8a:68:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 15 16:38:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddfc7f3554bd6b6a4527515448cc062531d19c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:a8:4f:bc:54:d2:b0:4c:4e:8e:f6:2b:d1:
27:37:7a:88:b0:e3:2d:55:a6:8d:5f:5a:24:25:3d:
0e:21:09:1f:c1:57:b5:d5:35:5c:e4:e5:da:33:c2:
01:85:89:ee:f6:1a:ee:2e:ee:df:b2:f9:da:58:e1:
a9:5c:3d:fe:30:42:57:bd:70:0d:02:8e:71:d0:49:
54:aa:05:21:a1:c6:57:e5:cc:b4:61:22:4a:84:1b:
e4:8b:38:90:a2:99:ad:89:17:88:97:b6:c5:01:64:
f7:ea:0d:4a:6a:12:1d:ab:ae:89:50:03:57:53:5d:
8f:14:3a:78:9e:32:82:b5:aa:bf:8d:01:5c:56:16:
b6:08:03:91:a7:98:b4:29:c2:60:77:d1:d6:46:d8:
e6:50:91:b7:c2:16:0f:0c:76:25:43:f7:44:2f:eb:
a6:7c:ce:39:a1:c6:79:13:8f:5f:42:2d:ae:6a:33:
48:8b:8c:14:3f:e6:19:9b:6f:e0:6f:9e:a0:13:39:
55:ae:17:a5:56:99:74:fb:8e:25:71:a0:e3:a8:c4:
b5:6d:07:e6:19:fc:0a:43:89:71:1f:56:04:13:26:
08:68:53:e6:6a:ed:eb:77:a3:53:e1:63:6d:21:24:
ef:f0:f1:16:8d:c9:b1:5c:8e:d7:b0:06:8f:38:73:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FC:7F:35:54:BD:6B:6A:45:27:51:54:48:CC:06:25:31:D1:9C:6D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3fx_NVS9a2pFJ1FUSMwGJTHRnG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.36.0/22
185.28.49.0/24
185.227.102.0/24
Signature Algorithm: sha256WithRSAEncryption
46:aa:6f:21:36:2c:c4:25:3c:74:51:a6:0f:45:83:64:10:47:
49:8b:3e:d7:d9:02:01:83:41:e3:b3:d9:d3:84:96:9c:5d:54:
9a:04:51:9c:aa:31:17:6a:2b:34:75:6d:a6:e4:6b:5d:8b:d1:
33:52:f2:d1:9c:d5:fc:fe:67:5c:f7:6c:00:3e:9a:ee:fe:54:
17:cf:c3:40:fa:46:22:4e:b8:8d:d0:3e:30:ef:cc:58:96:81:
52:5d:36:87:d8:74:50:63:5d:b8:11:c3:75:bd:b8:11:e5:e0:
7d:76:af:15:fd:f4:2f:80:a2:7c:ea:51:65:5a:0e:30:13:f8:
68:ff:9c:17:f9:21:36:90:2b:f3:bc:14:a2:86:57:29:bc:1a:
b1:fb:16:7d:d3:e5:62:e7:18:53:97:46:b9:44:bc:3a:ce:a7:
dc:c7:09:bd:33:b1:2e:ff:cd:2f:26:81:d2:43:7b:b6:3c:4d:
c6:9d:a8:61:73:25:a7:05:dc:68:d5:06:4e:46:18:34:c4:ce:
99:c9:6d:80:27:3c:1b:ef:2d:77:bb:44:4a:9c:00:37:b3:d3:
9e:de:76:ce:60:41:1c:c4:5b:7b:e5:2f:8e:d9:73:80:7c:9b:
ad:a4:d8:9f:83:0a:12:09:e1:09:01:2e:a6:da:7a:77:0e:25:
6e:ca:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org