Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/vUrRNdUfHt-QKpUoJyz50AlIsXQ.roa
File: vUrRNdUfHt-QKpUoJyz50AlIsXQ.roa (raw, json)
Hash identifier: EFvz8JdQ4DKDFPSa7KpdsvAcA5he+hE37rmgNYRKSHM=
Subject key identifier: BD:4A:D1:35:D5:1F:1E:DF:90:2A:95:28:27:2C:F9:D0:09:48:B1:74
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 01856FF95B5F6083AAD10FB19DDA03549648
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/vUrRNdUfHt-QKpUoJyz50AlIsXQ.roa
Signing time: Mon 02 Jan 2023 00:54:50 +0000
ROA not before: Mon 02 Jan 2023 00:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51265
IP address blocks: 176.126.39.0/24 maxlen: 24
193.9.252.0/23 maxlen: 24
178.157.4.0/22 maxlen: 22
185.44.52.0/22 maxlen: 22
185.69.244.0/22 maxlen: 22
62.240.128.0/19 maxlen: 24
83.216.32.0/19 maxlen: 21
2a07:1740::/29 maxlen: 29
2a04:9540::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:5b:5f:60:83:aa:d1:0f:b1:9d:da:03:54:96:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Jan 2 00:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd4ad135d51f1edf902a9528272cf9d00948b174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:24:5f:7c:e2:6d:5e:1e:09:34:cd:e9:0e:
39:6c:40:5c:f5:6e:d6:cb:5d:5e:5d:f6:46:fa:87:
fc:bb:1e:48:af:9a:f1:00:4b:d5:93:c9:f5:d3:25:
31:d0:29:f1:9b:de:8e:9c:bc:a6:20:66:61:c2:19:
0e:83:d8:67:cf:3c:ca:82:59:a1:18:78:8a:44:d1:
5f:39:c5:6f:61:a3:cf:6c:fb:75:04:30:41:09:48:
eb:af:b5:8b:bf:07:bc:5c:9d:78:65:cb:bd:18:79:
d1:9b:99:4f:4c:68:62:80:e6:b5:bc:66:87:e6:55:
65:c6:ae:33:29:9a:25:95:3e:ab:d1:98:77:a4:e4:
90:48:14:35:6b:a0:2c:2e:0a:32:d9:1b:1b:78:65:
b1:d0:00:8b:73:1c:87:5c:62:88:6b:5d:9d:74:e0:
6a:a0:24:4b:13:2e:2f:cf:be:9d:93:fd:67:37:7e:
45:db:be:db:ea:e6:a8:71:49:b3:4a:dc:cd:b4:03:
d7:4f:1b:2f:00:12:f6:77:c3:5b:da:94:6d:b4:03:
e5:30:f9:c1:e6:08:d2:0f:27:92:98:8e:2d:a5:7f:
18:70:9a:c2:b5:03:52:3d:e6:89:ed:f5:95:b8:66:
b1:01:b3:6b:56:df:b7:bd:55:da:22:af:a5:42:c7:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4A:D1:35:D5:1F:1E:DF:90:2A:95:28:27:2C:F9:D0:09:48:B1:74
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/vUrRNdUfHt-QKpUoJyz50AlIsXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.128.0/19
83.216.32.0/19
176.126.39.0/24
178.157.4.0/22
185.44.52.0/22
185.69.244.0/22
193.9.252.0/23
IPv6:
2a04:9540::/29
2a07:1740::/29
Signature Algorithm: sha256WithRSAEncryption
43:da:18:b0:27:20:d6:f7:7f:16:42:42:ba:ac:eb:36:9c:be:
70:e2:e5:7b:d5:c1:19:d1:68:65:ad:67:7c:99:25:f9:db:b9:
c2:48:eb:a0:e7:eb:05:aa:fe:74:ac:eb:8c:35:91:5d:53:ba:
91:99:08:d7:dd:fe:bc:a7:d5:bd:48:1a:93:d5:c6:20:7e:df:
59:38:ea:64:fe:d9:36:0d:3f:7d:f5:20:41:6f:88:49:a2:0d:
2d:6c:da:b8:14:73:93:7c:79:6c:43:87:64:99:a3:c3:99:28:
71:e7:99:47:ba:ad:4b:e9:5d:fb:b6:9e:b4:fd:9c:41:10:61:
77:8a:63:f8:67:a9:71:68:df:13:d3:2a:a9:8b:69:e3:c2:c6:
a8:de:bf:32:c1:49:c3:73:2f:1e:02:92:d0:2c:f5:8e:c9:15:
25:89:29:4a:58:3c:d9:1c:22:27:68:a0:bc:6d:1c:79:20:f1:
8b:8b:df:93:8b:99:85:e3:d3:88:71:cc:27:84:14:22:40:6d:
e2:f2:8e:e8:06:60:37:d2:26:dc:37:92:de:c8:b4:ea:12:ae:
33:04:ec:9f:52:3e:b6:67:67:11:ba:c1:89:f5:0c:41:8d:07:
75:79:44:68:2c:3a:82:19:5a:a1:01:0d:d8:39:92:41:ba:53:
91:dd:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:51 2024 by rpki-client on console-fra.rpki-client.org