Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/x2VMf5bL8bcO09L8poIUuI72LBY.roa
File: x2VMf5bL8bcO09L8poIUuI72LBY.roa (raw, json)
Hash identifier: naQC6oFxTIHIQoVTmvwq6oQ6UKL/cjFQlVoQAhqDzcw=
Subject key identifier: C7:65:4C:7F:96:CB:F1:B7:0E:D3:D2:FC:A6:82:14:B8:8E:F6:2C:16
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D53B3C75FF1B36CEE9A650F88017E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/x2VMf5bL8bcO09L8poIUuI72LBY.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34653
IP address blocks: 213.91.198.0/24 maxlen: 24
37.157.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 11:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:53:b3:c7:5f:f1:b3:6c:ee:9a:65:0f:88:01:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7654c7f96cbf1b70ed3d2fca68214b88ef62c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a1:96:71:83:90:66:26:ae:f8:f9:99:c7:2f:
b0:8e:30:5f:e1:1b:a9:f1:e6:14:78:55:89:51:73:
e3:f6:71:50:f9:4c:d3:0f:97:1b:1d:7a:dd:e7:4e:
be:cd:05:c9:da:ac:46:26:cd:50:50:83:e0:33:2a:
b2:6f:e4:67:68:ee:42:df:50:2c:12:37:aa:08:93:
7e:9f:cf:70:8a:bc:56:32:27:f2:e9:0a:2a:49:98:
83:56:54:2e:c8:57:af:13:8c:1e:b2:56:ba:7e:57:
9b:05:3c:e7:5a:b8:27:c8:2c:62:75:15:df:bd:e5:
3d:32:ca:e6:8b:18:63:63:7a:b9:04:5c:8a:51:67:
70:9b:39:e8:6c:90:d1:8e:cc:db:62:bf:72:c9:2e:
82:d5:43:87:7d:e0:74:ab:67:5b:1c:b2:ec:67:2b:
12:af:95:c8:9a:fc:46:24:36:31:91:9a:b0:bd:be:
50:a6:53:37:41:f1:c1:df:c4:94:ec:b5:a5:16:1d:
84:27:4f:c5:cc:46:fc:b8:5f:50:bb:7f:48:ba:02:
85:5c:7b:27:e6:d7:f3:1b:83:e5:97:21:48:a6:10:
4d:b3:df:9e:4c:99:9a:fb:b3:d5:a6:4f:c9:a1:c2:
16:99:cb:ba:d5:a0:03:0d:eb:af:f5:d8:6a:00:42:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:4C:7F:96:CB:F1:B7:0E:D3:D2:FC:A6:82:14:B8:8E:F6:2C:16
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/x2VMf5bL8bcO09L8poIUuI72LBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.160.0/24
213.91.198.0/24
Signature Algorithm: sha256WithRSAEncryption
35:43:b8:80:1b:70:ae:46:a2:62:b7:78:05:5c:14:89:7a:86:
d4:68:af:c6:7b:50:de:19:42:67:91:b3:ed:46:08:f9:27:09:
fd:f2:a6:1f:51:82:76:d3:96:c7:10:cb:50:27:f3:fe:2c:65:
be:57:e4:cb:96:5b:04:a4:5a:56:cc:10:e4:f1:06:c8:7f:4d:
0d:20:9b:d7:b5:2b:4d:90:3c:f9:ae:0e:70:e6:77:ee:81:a7:
96:28:8c:60:59:b3:0f:11:43:74:c9:04:c4:f6:6f:b7:ac:83:
ac:1c:35:43:a6:57:8a:d3:2b:c2:9a:ca:a9:ef:89:31:1b:18:
e8:c0:79:5e:7f:4a:60:6b:6f:b7:08:9b:eb:ed:0f:50:52:fb:
c4:fd:d1:20:c9:10:7f:3d:5b:c7:dc:2f:9b:ad:16:2d:7a:8e:
01:ae:f6:a4:ef:ce:f1:0d:3a:5a:ba:90:ea:38:69:35:32:11:
ed:79:b8:e2:ff:50:35:bd:00:7c:71:7f:04:98:3e:4b:75:d4:
99:68:76:6f:52:60:e9:11:a2:6e:ad:b4:67:ab:86:e8:62:dc:
56:ba:5f:ce:f5:90:fb:80:2a:b7:b8:47:3e:65:f8:3a:ce:84:
72:da:02:6f:2f:16:8c:9d:89:af:c9:e6:1a:06:94:0d:b8:1f:
d6:17:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org