Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/t__etzPhMcP1taSu050wW64VvZA.roa
File: t__etzPhMcP1taSu050wW64VvZA.roa (raw, json)
Hash identifier: WLjgNOXIAJZSIq/U9MWxbdKCUeXZZ48pbQutSI9J8f4=
Subject key identifier: B7:FF:DE:B7:33:E1:31:C3:F5:B5:A4:AE:D3:9D:30:5B:AE:15:BD:90
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018AD7BEE76F93A70F8A6ECA170FC476E631
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/t__etzPhMcP1taSu050wW64VvZA.roa
Signing time: Wed 27 Sep 2023 17:45:27 +0000
ROA not before: Wed 27 Sep 2023 17:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211183
IP address blocks: 79.133.183.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Nov 2023 20:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:be:e7:6f:93:a7:0f:8a:6e:ca:17:0f:c4:76:e6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Sep 27 17:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ffdeb733e131c3f5b5a4aed39d305bae15bd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:5d:73:87:8b:33:02:a9:51:7b:8c:40:81:
71:03:b1:14:88:5d:c2:5a:6a:63:d8:3e:bc:41:01:
a6:12:e6:b3:84:19:de:fc:8c:bb:7d:3d:1d:fe:19:
1a:a1:e2:81:17:bd:1c:32:37:76:56:a6:e8:c9:6a:
35:61:4b:49:ae:41:ed:a5:6c:16:99:1c:50:1e:18:
96:4f:c3:8e:91:ca:75:a1:fa:10:92:73:17:05:34:
ed:26:8e:46:38:a1:f3:31:cd:b1:ba:cd:49:bb:67:
9c:cb:5a:67:17:3b:2f:0a:8f:3e:65:64:66:1c:e2:
a3:9c:93:90:59:6a:50:c4:59:e2:48:9e:5b:a7:f9:
08:15:11:9f:37:2b:7a:30:67:b7:4a:74:c6:f9:e2:
70:d1:1e:4a:d9:46:8f:bc:ec:ef:37:2b:86:3e:72:
ef:81:ab:75:7d:69:9a:d5:e9:15:7b:8a:45:d4:e7:
b6:11:14:da:2e:96:ce:02:91:c9:18:51:ef:3b:d2:
86:1e:93:6d:12:30:e3:f4:2a:5e:20:70:8f:6e:b1:
91:00:0c:b6:bd:56:1c:b1:6e:8e:00:77:7f:4d:b3:
30:42:78:9a:ee:70:9f:c2:ee:cd:7b:b0:6c:19:05:
6b:5d:ac:45:7e:44:15:30:70:42:7e:ec:8d:7e:e3:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FF:DE:B7:33:E1:31:C3:F5:B5:A4:AE:D3:9D:30:5B:AE:15:BD:90
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/t__etzPhMcP1taSu050wW64VvZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.241.0/24
79.133.181.0-79.133.183.255
91.200.84.0/24
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/24
193.187.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2f:7b:68:4b:9f:ee:27:91:81:30:35:62:c0:8e:27:d3:96:
eb:66:57:36:98:8e:14:2a:76:3c:aa:cc:d9:47:ca:c4:99:9f:
e7:96:10:4d:db:f3:ca:da:df:03:e3:99:91:c5:be:11:a5:d5:
ff:0c:1a:a9:29:f0:cf:a0:b2:36:d9:cd:73:bb:02:92:33:9b:
2a:11:4d:1c:95:9e:2c:f6:72:68:40:00:78:e5:8a:46:d9:ea:
85:74:26:23:e4:94:c2:0b:6c:5c:95:4b:7c:74:7d:5a:df:2e:
7c:c6:31:b5:2f:8d:f0:59:69:2f:6c:7d:59:b6:0c:e5:5d:46:
01:02:67:1f:ef:b9:46:40:cf:2b:6d:64:1b:b0:05:63:2e:0e:
32:9d:0d:83:67:ea:4c:45:d7:81:89:2c:51:69:c2:f5:74:2b:
00:b5:de:5b:5a:df:5f:c3:f6:81:e6:06:89:ea:25:c1:66:28:
f8:b0:7b:9d:a5:19:2f:4a:1d:1a:eb:a2:83:b2:2d:95:bb:32:
51:60:3e:8d:54:11:6e:50:d8:69:7d:cc:e0:ca:cf:5d:37:04:
f4:81:05:34:4d:45:14:e2:64:c1:c0:8a:24:16:80:f8:30:5c:
b7:c9:1a:e8:4f:bd:51:51:7c:e1:c2:4b:ed:99:24:25:65:c5:
b6:4d:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org