Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/tPO6qzj5PRGSnYxmv6kQW0UdHAI.roa
File: tPO6qzj5PRGSnYxmv6kQW0UdHAI.roa (raw, json)
Hash identifier: DBU1PiaaxVNdP0KZ6faC8vWYZq/3YaRDGpi3jXfOEmI=
Subject key identifier: B4:F3:BA:AB:38:F9:3D:11:92:9D:8C:66:BF:A9:10:5B:45:1D:1C:02
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 018A8358D79EC79834BBA2409FC5EE80FD06
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/tPO6qzj5PRGSnYxmv6kQW0UdHAI.roa
Signing time: Mon 11 Sep 2023 08:25:52 +0000
ROA not before: Mon 11 Sep 2023 08:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8376
IP address blocks: 86.108.0.0/17 maxlen: 24
46.185.128.0/17 maxlen: 24
79.173.192.0/18 maxlen: 24
185.98.220.0/22 maxlen: 24
92.253.0.0/17 maxlen: 24
217.23.32.0/20 maxlen: 24
149.200.128.0/17 maxlen: 24
37.202.64.0/18 maxlen: 24
194.165.128.0/19 maxlen: 24
213.186.160.0/19 maxlen: 24
94.249.0.0/17 maxlen: 24
2a01:9700::/29 maxlen: 48
2a01:9700::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:58:d7:9e:c7:98:34:bb:a2:40:9f:c5:ee:80:fd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Sep 11 08:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4f3baab38f93d11929d8c66bfa9105b451d1c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:88:c7:7b:d0:e7:8e:88:49:1f:fc:8b:b5:
de:a2:db:be:bd:ad:a1:7d:c1:f9:51:64:6a:83:61:
0c:d7:38:2b:db:6e:f0:a7:05:9f:1a:31:5e:b6:b5:
4f:b5:90:49:7b:23:56:ab:b4:5f:b6:66:12:5d:21:
0f:45:5a:fa:e9:62:2f:b2:cc:90:6f:49:ad:ea:91:
21:e7:2b:2c:9d:66:54:0f:5f:98:29:d9:75:47:0c:
22:79:cf:d2:63:35:c4:ec:f0:5b:65:b2:c6:6b:72:
d3:e9:71:f6:23:a0:16:b4:f5:f3:97:42:53:ba:35:
86:c7:76:a4:0f:8e:25:7a:80:d2:5a:a7:3b:b0:e6:
5d:c7:48:cc:e6:0d:1c:c2:97:2b:4d:94:cd:d8:20:
dd:64:e1:a9:11:76:8c:2a:40:54:ed:f1:df:0d:f6:
8b:23:96:02:22:5d:62:dc:fb:01:2a:03:44:63:76:
8d:c8:4c:5c:33:13:b5:26:b8:07:91:96:fe:fe:ac:
05:b0:86:28:20:6a:ad:32:0c:6a:7f:e4:dd:95:26:
0b:ae:1b:6c:14:c3:f8:ff:06:95:9b:41:39:43:99:
66:d8:9a:96:75:92:e9:3a:09:0f:cd:63:00:02:10:
c1:ae:99:98:79:34:42:c1:93:45:45:a4:4b:b4:86:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:BA:AB:38:F9:3D:11:92:9D:8C:66:BF:A9:10:5B:45:1D:1C:02
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/tPO6qzj5PRGSnYxmv6kQW0UdHAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.64.0/18
46.185.128.0/17
79.173.192.0/18
86.108.0.0/17
92.253.0.0/17
94.249.0.0/17
149.200.128.0/17
185.98.220.0/22
194.165.128.0/19
213.186.160.0/19
217.23.32.0/20
IPv6:
2a01:9700::/29
Signature Algorithm: sha256WithRSAEncryption
35:23:93:42:da:05:e6:af:68:a2:89:71:85:87:9a:ef:6f:07:
dc:7c:11:35:77:d7:91:6f:0c:c8:ec:47:2b:55:fd:a1:8a:b9:
e9:4e:61:8a:35:c4:63:48:26:02:d9:2d:28:5e:5e:6d:25:50:
e2:f1:36:b2:c3:af:8d:7f:5a:7f:e8:c9:25:5b:5a:48:12:8e:
e9:ff:ee:cb:a6:47:da:ad:f6:92:ef:73:a2:b5:f1:cf:41:50:
9d:15:c0:d3:b7:98:f0:9a:96:72:cc:e5:37:11:5b:54:7e:d6:
8e:f5:83:57:49:c5:8d:6f:ba:b7:7f:ec:84:c0:46:4b:b6:99:
dd:bf:05:75:ee:67:28:d8:54:d6:cb:03:6d:25:fd:28:c1:6a:
57:97:17:7e:54:c8:14:0b:59:ef:4f:bd:3f:14:52:9f:eb:16:
d5:e6:aa:76:7b:1e:35:69:56:ae:3c:4f:9a:b9:2d:b0:c9:03:
bd:ed:76:c0:7b:19:fd:25:6e:86:a8:32:4c:04:9e:cb:6d:b6:
55:4e:83:cb:08:62:de:9b:87:fd:56:f3:fd:36:0d:4f:6d:8a:
b3:7f:da:41:cf:ac:76:d8:1e:7f:fc:a1:0b:df:a0:79:22:34:
75:60:a8:60:1f:f6:73:b9:f0:af:c2:73:86:93:5e:6e:86:2a:
86:93:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:08 2024 by rpki-client on console-fra.rpki-client.org