Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/fLVrmBvLrGHYP2Xkr30bhWLYR-U.roa
File: fLVrmBvLrGHYP2Xkr30bhWLYR-U.roa (raw, json)
Hash identifier: 55rG+1XAwgxSBfOLHglbK9r2g5hLE1nYl14iM3IY8E8=
Subject key identifier: 7C:B5:6B:98:1B:CB:AC:61:D8:3F:65:E4:AF:7D:1B:85:62:D8:47:E5
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 01856E8B513750D93D39F3382E7D22117A21
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/fLVrmBvLrGHYP2Xkr30bhWLYR-U.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43352
IP address blocks: 195.155.155.0/24 maxlen: 24
37.9.200.0/21 maxlen: 24
195.155.128.0/19 maxlen: 24
195.155.135.0/24 maxlen: 24
185.4.208.0/22 maxlen: 24
185.4.211.0/24 maxlen: 24
2a02:cb04:4::/48 maxlen: 48
2a02:cb00::/29 maxlen: 48
2a02:cb04:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:51:37:50:d9:3d:39:f3:38:2e:7d:22:11:7a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cb56b981bcbac61d83f65e4af7d1b8562d847e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:06:e4:e4:d1:ab:dd:0d:02:fc:7b:f1:83:
db:51:a8:44:4b:4e:da:d9:e6:3b:ec:9d:9d:13:6d:
fa:47:ce:58:d7:1d:14:cc:f2:24:9d:72:9b:c9:90:
43:79:31:29:a2:84:5f:b6:ad:ac:c3:56:dc:7e:d3:
51:49:84:de:18:17:63:0f:a6:6f:c3:b1:f8:9b:63:
28:a7:3d:f8:df:bc:e5:c4:52:89:c2:07:30:7d:7f:
ed:e7:2f:79:86:38:4b:63:9b:bd:13:36:27:c2:b3:
9b:24:b6:ad:bc:df:81:7c:87:fb:6f:5e:9b:d3:7e:
a4:77:42:a9:e9:d1:d7:e7:bb:38:d6:1d:f5:10:15:
2d:23:24:0f:fb:e0:b1:53:8b:9e:46:09:ac:34:76:
40:d1:b8:15:46:9c:0a:75:ae:8f:c0:55:29:c6:14:
f7:c1:19:b7:0a:85:77:97:84:1e:6c:12:e3:90:99:
57:af:76:af:e5:e4:c4:c8:a8:2f:3d:59:03:af:04:
42:86:23:49:69:f9:34:92:77:e1:78:86:05:8a:fe:
cd:b1:77:bf:03:9c:b8:56:5f:d1:7c:43:60:11:89:
5f:da:0f:c7:dd:82:9e:09:53:52:a3:bd:60:18:d0:
63:f6:7a:0e:4a:44:90:16:68:40:14:8a:8f:ea:bc:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B5:6B:98:1B:CB:AC:61:D8:3F:65:E4:AF:7D:1B:85:62:D8:47:E5
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/fLVrmBvLrGHYP2Xkr30bhWLYR-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.200.0/21
185.4.208.0/22
195.155.128.0/19
IPv6:
2a02:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:31:41:7c:33:88:c5:6f:ba:4d:87:1e:50:79:1b:14:e1:12:
7b:c6:1c:33:fa:06:99:1e:c2:63:d3:2a:5a:e7:2d:06:18:4d:
a5:5b:95:c0:91:63:f5:16:15:fb:11:0f:c4:1d:8b:04:97:8a:
ac:3d:a3:28:98:ab:ec:f3:a2:00:e6:df:4b:77:ce:80:d6:70:
1e:11:0b:20:c6:73:a3:e3:97:da:80:88:5e:30:b3:47:de:a4:
f3:4e:f6:93:ab:63:61:56:96:5b:50:99:3e:66:8d:9e:7b:f3:
49:0e:a3:0a:6e:03:45:14:6d:8b:e5:49:17:7c:02:e6:c1:06:
ff:c1:87:1d:31:99:1a:8a:f1:73:f6:e0:0b:f8:7f:c3:06:43:
ad:c5:31:7c:e6:cd:e1:9f:f2:f4:ac:e1:4a:d3:cc:ce:6c:8a:
39:a4:0b:ca:f5:56:d8:a6:1d:8e:0b:f0:6e:d3:54:8d:bf:c0:
32:41:6d:4c:ba:33:d3:1f:21:88:c2:5f:2f:59:b1:cc:f7:db:
91:e1:34:49:51:08:29:fc:f9:40:54:c2:85:4a:92:c4:89:6a:
c0:fc:e1:87:a0:4d:4f:e3:d8:12:ac:64:b9:bc:4b:d1:06:1c:
5b:10:7b:62:79:8c:e0:d9:8d:a0:3e:76:59:69:98:f5:76:e1:
6f:63:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:05 2024 by rpki-client on console-ams.rpki-client.org