Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vKKzxbfq-M6Xa9ixga46fOBg6u0.roa
File: vKKzxbfq-M6Xa9ixga46fOBg6u0.roa (raw, json)
Hash identifier: FA0frjDX1wzgvC33UqCLWDzJkohV7KV24U73VUJMqdk=
Subject key identifier: BC:A2:B3:C5:B7:EA:F8:CE:97:6B:D8:B1:81:AE:3A:7C:E0:60:EA:ED
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190DBEE8133B75D3FAB373C7BEA3E55C573
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vKKzxbfq-M6Xa9ixga46fOBg6u0.roa
Signing time: Mon 22 Jul 2024 19:32:39 +0000
ROA not before: Mon 22 Jul 2024 19:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 80.240.88.0/21 maxlen: 24
81.168.122.0/24 maxlen: 24
82.152.12.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
82.163.24.0/21 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.108.0/23 maxlen: 24
89.213.110.0/24 maxlen: 24
89.213.122.0/24 maxlen: 24
89.213.126.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.194.0/23 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.240.0/23 maxlen: 24
89.213.250.0/24 maxlen: 24
109.176.230.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 12:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:db:ee:81:33:b7:5d:3f:ab:37:3c:7b:ea:3e:55:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 22 19:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bca2b3c5b7eaf8ce976bd8b181ae3a7ce060eaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:7c:f2:a2:0d:72:ce:c3:45:91:d2:d2:86:
cb:0c:75:7b:7a:65:d1:83:9a:0e:1b:9f:6d:26:8a:
7d:eb:bf:f4:cd:52:65:02:9a:be:42:d9:4f:c2:5e:
78:a8:91:95:c1:f1:11:b2:ff:76:14:2f:10:42:f9:
a5:be:4b:c3:b1:4b:28:20:6a:83:fa:bf:14:99:b8:
ba:d8:f1:cb:39:f1:a0:26:64:53:15:0e:87:8e:6d:
fe:83:35:29:75:04:46:13:ac:93:cd:f1:2a:f4:78:
f8:ed:5a:b4:58:a5:06:69:71:fc:58:34:8b:fe:d1:
1f:37:94:cd:8b:7f:5b:fc:55:ff:27:bf:69:ae:94:
5e:c9:fb:c3:57:a4:7b:52:69:e3:bb:e4:f6:e6:bb:
5b:41:43:29:46:74:89:76:35:02:48:3d:5b:1e:67:
58:e7:74:31:29:26:09:1b:c2:19:1b:67:d1:f1:96:
05:fd:42:5b:20:97:46:9e:20:3b:4e:f5:9c:87:af:
d3:40:10:94:1c:e6:44:8a:29:c1:bf:b7:68:96:c7:
0a:5b:6a:b9:6b:27:bd:fb:7f:d5:e4:f6:fb:26:59:
9d:5e:86:68:e8:d6:a5:fd:16:c9:dc:bc:54:5d:0a:
f1:ed:77:c1:f0:8e:3b:59:bd:5b:68:b6:26:d3:15:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A2:B3:C5:B7:EA:F8:CE:97:6B:D8:B1:81:AE:3A:7C:E0:60:EA:ED
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vKKzxbfq-M6Xa9ixga46fOBg6u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
81.168.122.0/24
82.152.12.0/24
82.152.131.0/24
82.152.174.0/23
82.153.208.0/22
82.163.19.0/24
82.163.24.0/21
89.213.58.0/24
89.213.60.0/23
89.213.108.0-89.213.110.255
89.213.122.0/24
89.213.126.0/24
89.213.143.0/24
89.213.147.0/24
89.213.181.0/24
89.213.194.0/23
89.213.198.0-89.213.205.255
89.213.240.0/23
89.213.250.0/24
109.176.230.0/24
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:82:d4:89:d5:29:72:6e:65:47:c3:93:36:4a:0a:98:4a:54:
b2:3f:a1:6f:b5:87:f9:9d:ea:e7:7f:a6:fd:a8:1e:07:68:09:
1e:1b:fd:cb:ce:6f:70:44:45:53:b1:a6:42:53:b6:37:da:10:
ee:8b:8e:b2:13:b5:c4:3e:77:33:71:11:5b:49:2e:d7:8f:c4:
6e:4a:62:58:6a:14:ba:37:a5:d7:fe:53:86:ec:41:38:e6:a6:
9a:32:a3:c5:b9:8d:b8:68:67:c8:b5:52:a6:a5:b5:e2:5a:2e:
86:3a:af:6d:f3:29:85:25:4d:cf:6a:db:04:3f:49:23:24:80:
bd:2f:d3:57:02:54:18:9a:0e:0f:c3:11:f0:ac:9b:aa:71:41:
09:8d:b4:99:8c:1b:04:0f:7e:7f:7d:6f:7b:a6:b5:f4:3b:80:
c0:3b:ac:46:2a:cf:48:94:16:13:78:ee:4a:25:94:7a:35:57:
90:ce:9e:9a:cd:f1:9f:fd:14:89:ef:53:f0:ae:01:bb:47:83:
ef:54:b1:1c:23:b5:6c:dc:4c:6e:06:da:50:a8:5d:3c:23:5a:
0c:17:46:ac:97:fe:1f:1b:28:b8:f2:27:9e:77:71:d8:32:30:
8c:01:ab:a7:ff:77:45:c9:ab:6b:7f:e0:58:31:55:58:9d:a0:
92:17:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org