Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/v-TX1pd0yl2RLVmjG_U8U6hY6hY.roa
File: v-TX1pd0yl2RLVmjG_U8U6hY6hY.roa (raw, json)
Hash identifier: QpwMatDYFH36k8iB89D4OKeW3xZ8RbhpvTFEVezuiMw=
Subject key identifier: BF:E4:D7:D6:97:74:CA:5D:91:2D:59:A3:1B:F5:3C:53:A8:58:EA:16
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01856ED4CE5A2C0E97100F58279C3807D1D4
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/v-TX1pd0yl2RLVmjG_U8U6hY6hY.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 147.136.64.0/19 maxlen: 24
185.226.204.0/22 maxlen: 24
92.50.0.0/18 maxlen: 24
170.246.64.0/22 maxlen: 24
168.199.128.0/17 maxlen: 24
185.101.244.0/22 maxlen: 24
185.101.252.0/22 maxlen: 24
185.102.4.0/22 maxlen: 24
185.170.68.0/22 maxlen: 24
192.95.80.0/20 maxlen: 24
185.171.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 11:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ce:5a:2c:0e:97:10:0f:58:27:9c:38:07:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfe4d7d69774ca5d912d59a31bf53c53a858ea16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:0b:94:cc:d6:6d:d1:cd:40:0a:d7:b2:7f:
51:a5:2f:8c:9b:0f:b0:2d:66:77:5f:89:ad:f7:e3:
29:72:f3:08:f8:9c:d4:1f:0e:95:5d:ee:73:e1:05:
21:d3:06:60:ad:2e:b9:4a:56:f9:cf:b0:2c:f3:70:
c6:84:16:57:0a:6b:3c:5c:93:8c:c8:90:9f:e3:5e:
16:f1:29:a3:31:44:96:f0:b7:8f:d2:b3:19:23:ed:
d2:eb:7a:f0:2d:1c:ab:24:a0:91:2b:5e:bb:00:58:
59:4b:9b:f7:67:c3:cb:cc:58:0d:2c:43:53:fb:73:
d6:64:74:fe:7f:d8:8d:3a:ee:c5:66:7e:f2:b6:9e:
6d:55:33:18:6d:f9:7b:43:12:54:0e:5d:b9:85:1f:
81:1e:16:e0:53:b9:a2:81:64:e1:ee:1e:26:d1:16:
86:fc:37:df:e7:21:2b:58:c9:87:75:43:48:2e:4d:
bf:7c:09:bc:fa:cb:de:80:20:b0:ee:12:75:60:80:
4d:d7:a0:f9:06:ff:e2:51:51:83:11:cb:32:33:43:
de:c1:a5:19:b3:04:14:f2:33:73:c7:cb:9b:95:46:
01:a2:69:56:e2:36:7c:03:ca:91:b1:1c:a9:cc:f2:
25:33:e2:cc:8c:40:62:92:ec:1e:10:7c:db:5e:a7:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:D7:D6:97:74:CA:5D:91:2D:59:A3:1B:F5:3C:53:A8:58:EA:16
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/v-TX1pd0yl2RLVmjG_U8U6hY6hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/18
147.136.64.0/19
168.199.128.0/17
170.246.64.0/22
185.101.244.0/22
185.101.252.0/22
185.102.4.0/22
185.170.68.0/22
185.171.252.0/22
185.226.204.0/22
192.95.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:eb:1f:a7:13:fe:f2:48:07:f2:0f:8f:4e:0b:1d:d6:b9:46:
70:0e:b7:cf:57:39:25:d6:7c:13:61:aa:e6:d4:05:87:00:97:
aa:cd:03:6e:5a:f0:4a:9d:c2:ba:83:92:85:5d:5e:e6:6a:68:
13:23:b6:5b:43:3a:06:3a:f9:20:af:7c:75:36:d6:40:92:fd:
21:6d:c3:f6:fc:ac:b9:be:fa:bf:1e:06:8e:25:8a:07:2b:54:
fb:f0:df:ba:f5:6e:89:8e:ef:fa:d6:ae:e3:96:4e:0d:07:44:
bb:eb:61:92:c1:42:7c:bb:6d:55:56:e2:ac:31:9b:21:30:32:
a3:b7:80:a1:80:1d:c7:6c:e9:59:2b:17:c6:77:c4:d2:29:8c:
9a:2b:83:d0:b0:c0:35:83:a6:73:9a:d5:cd:c2:17:c1:dd:29:
46:ef:e6:20:d3:b9:b3:19:7e:63:e1:94:c7:e7:1b:db:bb:8e:
7e:ce:c9:89:5e:ba:4f:fb:2b:8a:4b:4d:5f:e1:98:d3:2a:ba:
63:ab:d7:3e:64:9f:ad:60:cd:6b:5d:df:dc:bb:41:c7:28:f2:
05:99:7c:a7:ba:dc:9c:67:1a:80:4e:18:31:db:a0:19:f8:68:
44:18:74:93:aa:e7:9f:6f:0f:69:ad:2a:c7:6f:83:02:83:72:
3a:d7:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:50 2024 by rpki-client on console-fra.rpki-client.org