Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fvNDwk9k1p3ePqJDWHO5sPQQQvg.roa
File: fvNDwk9k1p3ePqJDWHO5sPQQQvg.roa (raw, json)
Hash identifier: NDYzUVyccY237FGcwPKAxlwdNipZ2yXxAuHs+PtAfWs=
Subject key identifier: 7E:F3:43:C2:4F:64:D6:9D:DE:3E:A2:43:58:73:B9:B0:F4:10:42:F8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018E09E75C85D5D032092917F532356A8CE8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fvNDwk9k1p3ePqJDWHO5sPQQQvg.roa
Signing time: Mon 04 Mar 2024 14:39:01 +0000
ROA not before: Mon 04 Mar 2024 14:39:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.5.0/24 maxlen: 24
192.71.40.0/24 maxlen: 24
192.71.97.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
192.165.65.0/24 maxlen: 24
192.165.86.0/24 maxlen: 24
192.176.161.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.0.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.3.0/24 maxlen: 24
193.183.68.0/23 maxlen: 23
193.183.79.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.93.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
194.14.129.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.248.0/21 maxlen: 21
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 23
194.132.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 08:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:e7:5c:85:d5:d0:32:09:29:17:f5:32:35:6a:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 4 14:39:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ef343c24f64d69dde3ea2435873b9b0f41042f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:56:24:c9:a6:14:01:94:37:6b:d3:41:d8:
85:84:a5:4a:59:a5:1f:e3:cf:78:b6:cd:ba:98:e2:
a0:ed:0b:d4:23:ad:8a:d4:1a:b8:15:83:b0:70:d6:
00:73:f3:b5:32:09:17:87:b2:bc:47:82:f7:2a:66:
35:ab:0c:8e:8c:39:66:12:e1:4a:3c:ea:91:c0:9c:
4f:0c:57:63:3e:f2:68:a7:2e:cd:62:1a:81:44:43:
12:e8:2c:3c:87:69:16:5b:0b:5d:95:5c:13:b5:c0:
f2:06:b5:63:eb:88:7d:c1:d9:da:3f:55:83:c8:c8:
e0:44:d1:14:36:f2:bb:ae:54:60:d8:e3:81:f3:88:
f1:a5:b5:7d:5e:99:9f:df:16:10:61:e1:eb:a6:5e:
f3:2a:98:64:51:bd:6b:a3:74:19:22:6c:c8:47:72:
ff:5c:da:71:58:5f:e0:42:04:3b:30:e5:c1:0a:48:
0b:7c:f7:b9:31:b1:8e:26:28:d3:da:ee:ba:83:c1:
7c:6a:1e:ae:70:8c:e1:0c:b2:57:1f:9a:71:5d:2f:
9c:12:74:0d:90:e4:f4:a5:f0:15:6f:ff:19:44:e6:
d8:1a:38:3d:bd:09:a8:9c:7f:28:b2:ad:a8:b1:14:
de:b0:db:f9:33:93:a3:87:2d:1c:f0:8e:31:b0:38:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:43:C2:4F:64:D6:9D:DE:3E:A2:43:58:73:B9:B0:F4:10:42:F8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fvNDwk9k1p3ePqJDWHO5sPQQQvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.5.0/24
192.71.40.0/24
192.71.97.0/24
192.71.158.0/24
192.121.101.0/24
192.121.172.0/24
192.121.192.0/24
192.165.65.0/24
192.165.86.0/24
192.176.161.0/24
193.180.61.0/24
193.181.0.0/24
193.181.187.0/24
193.183.3.0/24
193.183.68.0/23
193.183.79.0/24
193.183.92.0/23
193.183.104.0/24
193.183.118.0/24
193.234.68.0/23
193.234.220.0/23
193.234.237.0/24
194.14.129.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.248.0/21
194.103.50.0/24
194.132.108.0/23
194.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8e:71:fc:9e:7a:ac:a3:61:c8:b4:2f:ee:7e:8f:3d:b1:cf:
81:08:c6:1a:41:25:60:f2:05:02:53:a7:84:7f:31:46:46:20:
16:88:78:6a:a6:dc:38:09:13:83:63:e0:71:6d:47:c1:5a:11:
91:83:ff:cf:f8:e7:bf:cd:14:f0:4d:d8:ec:b8:c8:67:6d:f6:
d3:99:74:01:9a:22:82:ed:6c:63:fa:59:c0:76:a5:5d:b8:b2:
ef:62:99:b4:b6:b7:32:4b:45:5f:9a:5a:dd:19:34:9c:d5:c0:
0d:b9:a4:fc:71:cc:59:78:4f:73:f3:65:98:7a:50:84:3c:29:
66:5a:17:d1:27:48:2d:94:d0:ed:19:b9:5b:a2:c4:bb:ed:1b:
ee:a9:3f:98:bb:85:ef:47:1e:c7:30:c3:58:0d:a6:65:47:1d:
8b:32:c1:cb:5d:02:b5:91:df:a7:ab:e5:9e:bd:25:87:03:76:
ef:78:ae:f2:c5:72:c6:93:87:0e:9d:95:a8:33:56:1f:04:75:
bf:76:a2:9b:fb:d3:99:bc:20:c0:b9:b5:49:3a:1d:8f:69:9f:
9a:26:ce:9f:91:76:53:e9:47:39:a8:3f:97:ff:41:10:36:46:
4e:1f:3b:6e:91:0f:23:92:a1:a1:ee:78:35:39:04:1c:53:aa:
89:81:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 11:50:13 2024 by rpki-client on console-fra.rpki-client.org