Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Vri7YPAX13WguT10dBO0rCBpFc4.roa
File: Vri7YPAX13WguT10dBO0rCBpFc4.roa (raw, json)
Hash identifier: AQWTZkt4oJkN/+vVfLdMJ/n3Z32WOMD3ABYczuldrcg=
Subject key identifier: 56:B8:BB:60:F0:17:D7:75:A0:B9:3D:74:74:13:B4:AC:20:69:15:CE
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E5B9D153D07AC1F7B946A03ECB910189E
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Vri7YPAX13WguT10dBO0rCBpFc4.roa
Signing time: Wed 20 Mar 2024 11:26:45 +0000
ROA not before: Wed 20 Mar 2024 11:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.26.112.0/20 maxlen: 20
93.191.168.0/21 maxlen: 21
93.191.173.0/24 maxlen: 24
94.127.72.0/21 maxlen: 21
95.100.147.0/24 maxlen: 24
194.35.38.0/23 maxlen: 23
2a02:2370:fe::/47 maxlen: 48
2a0b:35c0::/29 maxlen: 31
Validation: Failed, certificate revoked on Tue 11 Jun 2024 13:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:9d:15:3d:07:ac:1f:7b:94:6a:03:ec:b9:10:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 20 11:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56b8bb60f017d775a0b93d747413b4ac206915ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:11:8d:37:3f:b2:4e:de:22:61:8f:3f:88:
38:d7:7c:e2:fd:bd:ba:21:9a:7d:1e:25:b8:ce:d9:
c4:5c:95:c3:71:55:25:ee:46:9b:a3:0f:96:f4:42:
91:5b:19:0e:b9:34:da:fd:3a:91:4c:d7:6c:35:e8:
0d:55:06:c9:4f:ea:49:26:4f:0f:a9:45:ec:cc:86:
a2:a4:83:fe:f9:7f:57:22:fb:1d:0f:db:76:c9:22:
29:64:c5:60:c2:4f:ba:77:8a:62:ee:9b:d4:75:52:
af:5f:d2:3b:3e:51:3a:f8:99:f7:48:10:36:a1:fb:
59:d1:17:ab:14:60:ea:a1:2f:f7:93:22:01:e2:ae:
f9:24:92:27:69:45:c7:2c:04:68:56:d2:42:75:0e:
3c:2e:71:59:01:8d:b1:bd:92:94:ef:c5:64:78:c1:
db:99:3d:54:12:af:d8:60:57:fe:16:b5:c2:33:60:
0d:69:ba:b7:7c:1a:75:0b:6a:dc:c1:e4:3a:f5:db:
99:9e:a3:67:c2:8c:c2:15:cc:fd:97:90:f0:7c:66:
6f:59:ed:5b:45:15:a2:dc:b1:6d:ba:e7:cc:f9:fd:
51:0d:c8:c0:d4:c7:03:14:53:b0:dd:71:56:1b:88:
6e:c4:1e:e6:d6:c0:b6:91:c5:d1:59:4e:05:6d:61:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B8:BB:60:F0:17:D7:75:A0:B9:3D:74:74:13:B4:AC:20:69:15:CE
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Vri7YPAX13WguT10dBO0rCBpFc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.112.0/20
93.191.168.0/21
94.127.72.0/21
95.100.147.0/24
194.35.38.0/23
IPv6:
2a02:2370:fe::/47
2a0b:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:5d:48:ef:54:11:51:b3:93:6a:c8:7d:eb:5f:c6:23:a7:78:
36:e4:b3:0b:7f:e5:80:c1:cb:5d:b5:61:5c:92:f2:bb:c0:97:
d8:a8:26:57:b7:94:c7:5e:3d:84:d3:2a:8e:fc:b6:cc:ad:9d:
42:ab:a1:e4:bb:d5:f4:0f:d4:c3:66:a4:f7:65:0c:fa:da:05:
9b:7d:a1:15:f0:50:f1:4a:b0:0c:b1:5e:de:98:98:ba:eb:61:
87:b5:72:5b:f6:b5:7f:f6:cf:2c:35:63:1c:1c:07:73:00:0e:
e2:a8:47:76:e6:81:69:3e:8c:52:24:3d:9b:c1:7a:44:2d:5c:
7d:a6:d9:8d:80:2e:d5:a0:ce:1d:d9:86:57:5e:a1:be:96:fd:
e5:74:d5:f6:6b:50:46:89:d5:b7:f5:f1:d1:60:78:ea:af:79:
40:1c:84:e9:a0:cd:a1:fe:42:1f:d3:c1:73:10:03:34:ce:76:
04:f3:fe:ea:e1:e3:2c:51:8a:4d:18:f2:f5:4e:8c:b5:d0:70:
5a:34:c5:7b:af:75:a1:52:e6:f5:5e:c5:9c:2f:f4:9d:51:59:
ba:74:be:bd:75:d3:67:bb:4f:5e:62:d3:24:9d:65:16:d7:6f:
ff:19:60:74:25:69:ed:ab:0c:57:ea:a0:d9:c1:d9:96:b5:57:
23:36:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 20:23:06 2024 by rpki-client on console-ams.rpki-client.org