Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/dvYe1eMmdBAD5oe8_NDzZkB1HGw.roa
File: dvYe1eMmdBAD5oe8_NDzZkB1HGw.roa (raw, json)
Hash identifier: a9g8Pr/CYtxHJmmVvlyVBtkJgoE7XuEUEfEOgU8s2nQ=
Subject key identifier: 76:F6:1E:D5:E3:26:74:10:03:E6:87:BC:FC:D0:F3:66:40:75:1C:6C
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 018CC500F2ECDB227C8243C221C71F1B09A0
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/dvYe1eMmdBAD5oe8_NDzZkB1HGw.roa
Signing time: Mon 01 Jan 2024 12:30:22 +0000
ROA not before: Mon 01 Jan 2024 12:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 85.192.56.0/24 maxlen: 24
85.192.63.0/24 maxlen: 24
79.137.248.0/24 maxlen: 24
89.208.103.0/24 maxlen: 24
89.208.104.0/22 maxlen: 22
79.137.194.0/23 maxlen: 23
79.137.196.0/22 maxlen: 22
79.137.202.0/23 maxlen: 23
79.137.204.0/23 maxlen: 23
79.137.206.0/24 maxlen: 24
79.137.207.0/24 maxlen: 24
85.192.40.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 22 Aug 2024 13:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f2:ec:db:22:7c:82:43:c2:21:c7:1f:1b:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Jan 1 12:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76f61ed5e326741003e687bcfcd0f36640751c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:fd:b2:99:20:ff:ab:9e:e0:ff:39:5c:d0:
80:96:8e:85:d7:e3:e9:2c:76:3a:d2:f3:24:43:eb:
9f:78:9c:16:96:71:ef:76:07:80:9c:74:47:ea:d3:
42:44:01:38:43:98:38:37:c4:27:ba:6f:9e:34:1f:
22:fc:a9:c4:ed:92:eb:69:e2:73:26:80:63:cd:c3:
34:30:3c:e5:5f:da:5e:22:6b:dc:86:59:36:10:43:
bd:74:06:9a:25:9e:cf:b0:2d:2b:05:a9:90:36:28:
a3:10:86:60:11:3a:c0:1e:fb:17:b7:e8:58:e4:8d:
33:13:c8:90:77:cc:32:0f:91:83:c7:e5:d9:c2:1b:
2f:93:01:49:11:e8:bd:fe:65:e1:94:05:ff:ba:76:
ff:f1:de:6e:82:9a:55:8d:76:5b:38:1c:e6:6d:50:
c0:b5:07:02:20:0a:bf:99:eb:83:bc:53:0d:07:b1:
70:df:bd:e3:79:f0:5b:96:82:d9:10:4d:5c:b6:6b:
44:7b:bf:a2:03:98:68:b1:d1:eb:15:24:fa:be:43:
c4:44:03:6e:a2:9b:bc:14:e7:62:bc:9e:59:e2:a2:
d5:37:b5:b1:80:b2:ee:18:93:1d:3a:e1:b1:63:97:
c1:57:b9:c6:a2:fa:b7:a9:24:e7:a7:2d:3d:96:55:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F6:1E:D5:E3:26:74:10:03:E6:87:BC:FC:D0:F3:66:40:75:1C:6C
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/dvYe1eMmdBAD5oe8_NDzZkB1HGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.194.0-79.137.199.255
79.137.202.0-79.137.207.255
79.137.248.0/24
85.192.40.0/23
85.192.56.0/24
85.192.63.0/24
89.208.103.0-89.208.107.255
Signature Algorithm: sha256WithRSAEncryption
69:00:f2:f6:ec:fd:f3:63:68:53:c7:43:9f:47:09:89:34:0f:
99:c7:c5:6a:e0:92:2b:f7:df:db:7e:0e:8c:73:9b:c4:84:7c:
8a:7d:17:3e:e5:54:5a:38:5a:cd:32:28:8c:98:cb:a2:1b:bd:
ac:9d:49:b2:57:c4:d5:06:70:9d:6d:66:8b:8a:af:ba:d6:79:
de:b1:22:7c:7b:d1:6a:bd:1d:86:84:14:d8:0a:34:98:0b:7c:
fe:41:b5:48:09:55:b0:10:07:73:2f:5f:7e:b4:77:0c:d9:96:
b2:a4:8e:45:a7:8c:2e:d4:f2:83:4a:06:e8:49:8e:e9:2c:ca:
82:d8:d7:c0:28:6f:b5:43:4b:55:b0:df:a1:74:cd:11:c3:07:
73:23:ca:16:53:a6:b1:3b:bb:7f:da:51:c5:41:89:b8:86:4f:
76:55:66:74:61:3e:ba:78:02:81:cd:ed:ed:13:16:79:68:09:
8b:fc:16:b4:e8:96:cf:1f:58:51:dc:8a:b9:04:7b:67:8f:e8:
b6:bf:70:e1:35:7f:e0:27:3e:1e:00:3c:71:16:bd:3b:c6:37:
cf:de:b7:52:df:77:d5:0f:a7:f5:31:7c:48:57:ee:22:5b:3f:
b8:de:b4:7c:73:1a:8a:3b:e2:f8:34:e0:c9:8d:71:5a:95:04:
4c:01:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 17:02:49 2024 by rpki-client on console-fra.rpki-client.org