Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RxCRoUA1W4usfMVHoXZs2h1vgYE.roa
File: RxCRoUA1W4usfMVHoXZs2h1vgYE.roa (raw, json)
Hash identifier: 1TCCY6rcYP5vEdZZS55L1jrcsnz7iPX9XTLH7bviBxw=
Subject key identifier: 47:10:91:A1:40:35:5B:8B:AC:7C:C5:47:A1:76:6C:DA:1D:6F:81:81
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0190E16E108F138C351DA3489621A6C7E358
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RxCRoUA1W4usfMVHoXZs2h1vgYE.roa
Signing time: Tue 23 Jul 2024 21:10:05 +0000
ROA not before: Tue 23 Jul 2024 21:10:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:e40::/44 maxlen: 44
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7008::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec1::/32 maxlen: 48
2a12:bec1:2::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec3:b00b::/48 maxlen: 48
2a12:bec4:100::/44 maxlen: 44
2a12:bec4:1120::/44 maxlen: 44
2a12:bec4:1430::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 04 Aug 2024 08:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:6e:10:8f:13:8c:35:1d:a3:48:96:21:a6:c7:e3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 23 21:10:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=471091a140355b8bac7cc547a1766cda1d6f8181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:86:c5:92:b9:e5:8a:fd:87:51:cb:5f:70:
1f:76:b3:87:a3:4a:9a:b8:6d:64:c0:41:4d:94:9a:
a7:5c:fc:df:f1:4a:30:af:bc:27:19:7f:21:60:d1:
db:44:51:2a:0f:b5:e0:97:ad:1f:22:d0:cd:c5:5c:
55:f9:9c:fe:d8:b2:28:17:73:18:39:8d:99:0b:13:
76:a3:c4:f5:cc:be:9a:3d:5d:1f:07:24:e7:01:3c:
79:fa:87:42:35:61:3a:48:e8:9f:ea:c5:2f:a7:91:
68:ea:86:39:38:c2:69:7e:6c:43:cd:9c:41:2a:52:
ec:28:02:2b:d8:be:6a:00:68:3d:c0:c3:83:56:70:
a1:2c:87:63:ae:e9:8a:6a:6f:9c:fb:c5:7d:05:a2:
1d:72:9a:b5:2d:53:cb:cd:bc:f6:98:b9:7e:b4:c3:
95:d7:f7:28:23:f6:52:20:30:c5:4a:ea:ca:42:cc:
64:f0:41:3b:02:cd:eb:35:9a:c1:2f:a8:1d:61:3a:
d4:92:42:8e:1a:76:38:31:d0:7b:df:b6:f4:dd:20:
9a:9e:97:62:e0:b9:5a:9c:fb:f0:b1:0e:16:4a:4e:
1f:e0:a2:12:d9:c2:93:7f:29:1e:d5:46:1d:37:df:
21:d6:8f:5e:0c:b9:13:02:3e:76:51:14:c1:43:fe:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:91:A1:40:35:5B:8B:AC:7C:C5:47:A1:76:6C:DA:1D:6F:81:81
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RxCRoUA1W4usfMVHoXZs2h1vgYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
185.248.134.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::-2a12:bec0:7008:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1::-2a12:bec2:ffff:ffff:ffff:ffff:ffff:ffff
2a12:bec3:b00b::/48
2a12:bec4:100::/44
2a12:bec4:1120::/44
2a12:bec4:1430::/44
Signature Algorithm: sha256WithRSAEncryption
b6:b4:5a:54:f0:b8:21:97:ec:88:c4:97:38:3c:55:5f:81:8a:
4a:90:3d:f7:83:df:fb:31:19:a2:b4:69:ec:ad:c2:af:ac:fd:
f0:e5:71:46:e1:9e:8e:d4:f4:c3:7c:d9:12:f8:0b:27:d5:e6:
a8:2a:cc:51:89:21:65:c4:9d:1c:83:e0:f9:7e:ea:76:c4:fc:
fc:8b:08:78:df:16:0c:5e:72:2d:72:a0:9d:48:62:e6:9b:22:
60:39:2d:c6:23:ab:ac:f2:44:a6:0a:ad:5e:dd:ae:48:a4:c8:
f5:5b:4b:f9:7d:a9:d0:3f:cd:09:be:2d:bf:03:88:a4:c8:c2:
82:0b:11:aa:1c:8e:3a:86:5c:69:94:bb:9c:35:0f:cc:d6:93:
18:0e:f0:0c:ba:9d:bc:16:fb:68:0a:43:0c:a6:36:88:76:4d:
72:64:26:77:bf:18:14:c8:74:e9:07:b9:23:7b:5c:8c:32:cf:
ac:72:6f:9c:6c:66:cc:dd:09:4f:e3:54:8e:46:e1:5c:af:a0:
e1:09:26:7a:30:35:49:60:7c:24:01:17:49:95:06:2a:cb:aa:
67:63:d6:c6:92:3d:b8:75:fc:cb:0a:98:c4:4a:0f:b9:07:62:
0e:62:47:89:a7:50:56:02:b7:eb:ff:f4:51:77:d2:6d:0b:02:
17:d2:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 10:15:02 2024 by rpki-client on console-ams.rpki-client.org