Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/fCvHDn-IKhY8kLaR_UbKQz-JgS8.roa
File: fCvHDn-IKhY8kLaR_UbKQz-JgS8.roa (raw, json)
Hash identifier: y86G8hcsC1pOBBMXxAIrlklEqHqjvAJbbtImb/zHlL0=
Subject key identifier: 7C:2B:C7:0E:7F:88:2A:16:3C:90:B6:91:FD:46:CA:43:3F:89:81:2F
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01856D53F644ABD633674F8BC88CF8BB414D
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/fCvHDn-IKhY8kLaR_UbKQz-JgS8.roa
Signing time: Sun 01 Jan 2023 12:34:56 +0000
ROA not before: Sun 01 Jan 2023 12:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 91.225.15.0/24 maxlen: 24
146.66.209.0/24 maxlen: 24
146.66.208.0/24 maxlen: 24
188.74.245.0/24 maxlen: 24
178.157.124.0/24 maxlen: 24
178.157.126.0/24 maxlen: 24
188.119.166.0/24 maxlen: 24
188.119.165.0/24 maxlen: 24
188.119.181.0/24 maxlen: 24
188.74.190.0/24 maxlen: 24
37.35.39.0/24 maxlen: 24
188.74.209.0/24 maxlen: 24
188.74.208.0/24 maxlen: 24
178.157.94.0/24 maxlen: 24
188.74.152.0/24 maxlen: 24
188.74.181.0/24 maxlen: 24
37.35.37.0/24 maxlen: 24
37.35.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Feb 2023 09:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:f6:44:ab:d6:33:67:4f:8b:c8:8c:f8:bb:41:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 12:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c2bc70e7f882a163c90b691fd46ca433f89812f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:51:98:e0:15:33:c8:a9:03:78:62:5e:e5:66:
6c:d6:17:59:da:2a:d0:d5:37:37:34:a3:dd:48:99:
64:9d:82:6e:b5:4d:c9:5a:dc:00:12:55:af:64:f7:
87:18:05:6f:84:26:9e:0b:42:c9:18:39:5f:81:e1:
80:5d:c9:29:5e:8e:a0:79:fa:50:c2:0d:4d:c5:7e:
93:59:bd:d0:f2:92:52:e9:53:f1:c3:cf:1f:da:df:
94:46:75:01:60:2c:e9:46:69:5e:a3:47:16:67:6d:
02:93:fd:23:a4:08:c6:16:d6:49:d8:40:48:19:37:
ad:56:1c:80:2a:06:11:c0:a1:0b:3a:f2:08:3f:fd:
36:15:16:6d:d5:35:f9:0b:2c:07:02:dd:80:75:d9:
a0:81:ac:e5:06:21:28:35:d7:18:19:bf:54:7f:a0:
ab:c8:05:18:63:28:b8:46:99:d2:2c:f1:f2:06:f6:
2b:43:c7:2e:67:af:b9:99:da:f5:8d:0d:5a:e9:be:
54:cc:72:07:cc:70:3b:3b:1b:62:92:d5:99:73:52:
ca:38:ff:c1:2f:a4:45:d4:84:d4:ab:c8:1a:b7:94:
74:e0:1d:8f:dc:a3:af:f0:74:c2:76:2c:56:d3:69:
a6:58:47:e8:07:bf:43:74:bf:e9:a8:5a:3d:a1:cb:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2B:C7:0E:7F:88:2A:16:3C:90:B6:91:FD:46:CA:43:3F:89:81:2F
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/fCvHDn-IKhY8kLaR_UbKQz-JgS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.36.0/23
37.35.39.0/24
91.225.15.0/24
146.66.208.0/23
178.157.94.0/24
178.157.124.0/24
178.157.126.0/24
188.74.152.0/24
188.74.181.0/24
188.74.190.0/24
188.74.208.0/23
188.74.245.0/24
188.119.165.0-188.119.166.255
188.119.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:32:5e:3b:fe:79:f4:5f:f8:d1:50:96:d0:1c:83:a2:59:9d:
a4:e0:ee:a1:3e:2f:53:ec:13:0c:bc:ad:37:44:35:f0:b5:95:
dd:75:1c:31:e0:de:55:27:32:06:42:ca:bf:df:f0:d7:c9:70:
a8:a1:a2:6a:2d:06:34:3d:88:aa:98:c4:0e:d0:ef:3a:bd:0f:
2f:af:b7:1b:c2:8f:21:79:9e:b7:06:2d:11:5e:1c:f7:8a:7d:
7c:76:9e:5f:95:c1:50:33:99:85:af:b9:0c:ed:f0:03:25:6e:
ea:58:5a:65:0f:71:17:10:e7:8b:da:89:de:93:0a:a5:02:24:
92:77:1a:d8:a8:2e:c5:cf:57:53:b0:05:d0:ca:3c:d6:01:d8:
17:70:04:7d:8a:20:69:8f:c7:c4:df:1e:9b:47:87:55:47:4f:
01:f7:b5:65:ea:53:eb:8e:28:08:1d:b6:d2:25:66:41:75:5b:
0e:85:a6:9b:f2:ab:2d:5f:f6:87:d1:f1:4e:ba:34:43:a0:8b:
51:54:bf:5d:74:6a:3c:14:02:b9:fe:11:88:16:15:b4:d1:f5:
33:7f:75:3a:54:79:c0:30:fe:c6:52:44:d0:fb:5a:f9:0b:08:
a1:22:a8:c9:b8:cc:7b:85:80:06:db:26:2f:8f:88:17:35:a0:
f8:92:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org