Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/40ngl0e-20byyic0pTrfirl2Zjc.roa
File: 40ngl0e-20byyic0pTrfirl2Zjc.roa (raw, json)
Hash identifier: Wy1Qope/RU0WgZyUfC9vsKvrImzLHhNli29sx20PitM=
Subject key identifier: E3:49:E0:97:47:BE:DB:46:F2:CA:27:34:A5:3A:DF:8A:B9:76:66:37
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 018A5F9EE98B821FBDDCA7A3830D80716F59
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/40ngl0e-20byyic0pTrfirl2Zjc.roa
Signing time: Mon 04 Sep 2023 09:56:04 +0000
ROA not before: Mon 04 Sep 2023 09:56:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8697
IP address blocks: 86.108.0.0/17 maxlen: 24
46.185.128.0/17 maxlen: 24
79.173.192.0/18 maxlen: 24
185.98.220.0/22 maxlen: 24
92.253.0.0/17 maxlen: 24
217.23.32.0/20 maxlen: 24
194.165.128.0/19 maxlen: 24
149.200.128.0/17 maxlen: 24
213.186.160.0/19 maxlen: 24
94.249.0.0/17 maxlen: 24
37.202.64.0/18 maxlen: 24
2a01:9700::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Sep 2023 12:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:9e:e9:8b:82:1f:bd:dc:a7:a3:83:0d:80:71:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Sep 4 09:56:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e349e09747bedb46f2ca2734a53adf8ab9766637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:f1:2f:6f:84:dd:b3:76:4b:25:c2:5c:28:
20:11:48:dd:29:0b:8c:38:ba:5e:8f:e8:21:74:76:
3b:a6:b7:80:03:86:51:3f:6e:85:f2:f1:86:7b:28:
4c:c5:11:5d:57:e6:be:05:3f:7e:12:7a:59:df:3b:
5c:5d:fd:d3:62:87:fa:6f:c2:34:92:e2:20:c5:a7:
c3:70:28:13:7c:f6:14:00:c8:6c:42:d1:5f:a7:44:
ca:d8:18:9d:f8:90:aa:ef:4f:ef:18:20:3f:72:fb:
50:2d:b5:d0:59:9a:64:54:d3:72:05:e3:41:58:18:
b6:bc:d3:0a:27:c6:d8:17:fc:a2:c0:ca:c6:93:11:
e6:c7:8d:f9:12:1b:71:ad:e1:45:f7:a6:f2:28:45:
c4:91:da:e1:d7:f1:06:a9:38:33:31:13:8f:52:37:
1a:54:bf:d3:e0:ad:d0:f9:e3:99:7c:7d:f6:07:8c:
f5:3c:65:b4:fb:7a:f4:e3:a7:a7:1c:6a:47:c5:ff:
d9:ee:27:0c:1b:20:c2:dc:51:4e:70:32:d4:78:0e:
55:48:ed:76:bc:04:92:5d:06:43:ad:0a:1d:09:7e:
3c:d1:2d:32:ef:fc:69:10:dc:81:3d:da:9f:34:b6:
82:d6:63:dc:07:84:96:ee:0c:65:af:b3:09:96:d2:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:49:E0:97:47:BE:DB:46:F2:CA:27:34:A5:3A:DF:8A:B9:76:66:37
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/40ngl0e-20byyic0pTrfirl2Zjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.64.0/18
46.185.128.0/17
79.173.192.0/18
86.108.0.0/17
92.253.0.0/17
94.249.0.0/17
149.200.128.0/17
185.98.220.0/22
194.165.128.0/19
213.186.160.0/19
217.23.32.0/20
IPv6:
2a01:9700::/32
Signature Algorithm: sha256WithRSAEncryption
68:df:20:5f:39:39:0f:09:d9:47:4a:50:5a:2f:73:39:a6:31:
e5:28:89:e5:15:e1:35:4a:d4:aa:85:1c:44:ff:69:a8:f8:92:
e0:0f:35:75:f3:5c:f8:d9:bb:8e:ab:37:20:1e:b1:72:5e:a7:
a6:13:36:d0:1e:26:82:d6:5a:a8:f6:c2:b7:09:43:76:b4:74:
26:93:0a:3e:dc:a9:7a:15:05:30:bc:d1:86:a2:2f:a3:17:e4:
9d:48:10:a2:9d:38:87:c3:2c:ca:c6:2c:5c:4c:d9:bd:1b:d1:
c7:11:af:af:43:5e:aa:61:d0:f1:eb:91:aa:62:1c:a0:77:3c:
bb:d9:a0:1b:05:c8:cc:07:d3:10:33:e7:ae:0b:2d:3b:f3:6e:
07:50:be:1f:b0:5e:e3:be:e2:b6:71:bf:d7:93:15:f8:fb:33:
41:7d:6a:f7:03:c5:cb:73:3c:03:8e:53:ce:6e:33:46:86:39:
bc:b3:bb:45:9e:cd:52:d1:99:cf:d5:cf:b3:ea:62:15:a3:9e:
68:7c:24:de:6a:5b:b6:5e:82:fb:15:cd:0e:6b:fb:06:70:db:
80:3c:ca:c7:0d:23:cd:aa:d0:d4:79:01:87:ee:c5:d7:4f:ea:
11:4a:06:b4:b1:f5:45:d2:8f:dd:28:85:71:50:85:96:e9:c9:
42:43:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:08 2024 by rpki-client on console-fra.rpki-client.org