Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/VZvHwoa4RwD386J206qT0xttwF4.roa
File: VZvHwoa4RwD386J206qT0xttwF4.roa (raw, json)
Hash identifier: 6BnWTeoI1oroV/YpjNLZUOIaCpxhDcQhNuWBTjcc0eA=
Subject key identifier: 55:9B:C7:C2:86:B8:47:00:F7:F3:A2:76:D3:AA:93:D3:1B:6D:C0:5E
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019194794B790655ADC93FABEC5EF08939E8
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/VZvHwoa4RwD386J206qT0xttwF4.roa
Signing time: Tue 27 Aug 2024 15:34:22 +0000
ROA not before: Tue 27 Aug 2024 15:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62651
IP address blocks: 176.67.82.0/24 maxlen: 24
176.67.85.0/24 maxlen: 24
176.67.86.0/24 maxlen: 24
176.67.87.0/24 maxlen: 24
185.91.120.0/23 maxlen: 23
2a05:e9c0:1000::/40 maxlen: 40
2a05:e9c0:1400::/40 maxlen: 40
2a05:e9c0:1800::/40 maxlen: 40
2a05:e9c0:3800::/40 maxlen: 40
2a05:e9c0:4400::/40 maxlen: 40
2a05:e9c0:5000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 30 Sep 2024 16:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:79:4b:79:06:55:ad:c9:3f:ab:ec:5e:f0:89:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Aug 27 15:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=559bc7c286b84700f7f3a276d3aa93d31b6dc05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:c0:74:69:20:f6:4e:fa:a1:db:84:aa:e1:
68:ee:f9:c6:1d:70:ac:eb:f2:13:dd:3a:be:69:36:
95:cb:6f:79:b9:77:46:fc:e8:07:26:01:06:b5:5b:
5e:16:0e:e7:77:02:ff:b3:21:72:2d:1e:be:c5:10:
95:0b:26:f7:d4:08:10:c4:4a:53:a8:61:57:a9:e1:
8f:b3:a1:3e:5f:ed:c6:d7:fd:34:bd:02:42:29:e3:
c7:b6:ad:f2:b8:6a:43:f1:92:58:c2:dd:3f:d2:21:
b2:c6:8e:f0:32:93:38:a6:98:1a:0c:6d:80:d6:92:
83:d8:62:c0:ee:32:1f:4e:a6:12:15:3e:d4:b9:6d:
60:d9:8e:be:c6:d7:2e:60:09:c5:66:4e:a9:a2:1c:
2c:b9:6b:85:95:c1:51:09:f1:48:80:44:50:7a:7d:
51:d7:46:d9:e9:61:fd:7c:b1:bb:d0:5f:15:38:14:
4e:dc:8d:bb:90:18:db:7e:0e:03:1a:42:6e:8f:73:
dc:d7:c7:aa:36:35:2d:ba:4d:e7:80:a5:b8:6a:b7:
48:69:a6:7f:59:b5:21:b7:1d:2f:9f:17:33:5c:0c:
d2:ac:cc:86:8a:8f:5b:5d:7d:2e:51:e9:d1:f3:85:
a7:f2:8a:4f:b8:ac:b3:b5:27:b6:a0:d8:9a:65:ce:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9B:C7:C2:86:B8:47:00:F7:F3:A2:76:D3:AA:93:D3:1B:6D:C0:5E
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/VZvHwoa4RwD386J206qT0xttwF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.82.0/24
176.67.85.0-176.67.87.255
185.91.120.0/23
IPv6:
2a05:e9c0:1000::/40
2a05:e9c0:1400::/40
2a05:e9c0:1800::/40
2a05:e9c0:3800::/40
2a05:e9c0:4400::/40
2a05:e9c0:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c1:90:d5:9d:28:29:76:f6:ea:0a:83:9f:d1:b8:4e:7e:57:23:
fa:05:a9:62:2f:62:f3:80:57:01:67:d2:93:b2:47:d0:c6:d2:
e3:c8:97:b9:44:04:38:e4:83:1f:9c:7b:b0:b1:1c:89:0f:5b:
c6:c0:0e:d2:9e:39:b5:bd:d8:bf:65:c0:31:54:67:54:68:d3:
1d:2e:06:b2:9b:52:2b:c8:a2:bf:63:43:fe:2e:ea:66:36:b1:
eb:b5:35:f6:8f:0e:a7:09:c1:4c:80:9d:6f:f9:06:f1:25:87:
b4:c5:cf:be:d9:20:1f:fa:a8:b7:5c:f0:4f:6c:8e:e1:7c:b0:
94:db:3e:f7:de:c2:df:e6:e1:08:6b:2b:18:4d:b8:b4:23:14:
cc:1b:e4:dc:9f:b9:58:56:01:ce:f5:f4:c2:32:c4:c5:5a:b3:
d9:41:b1:88:03:d9:a8:f1:16:c0:c5:1f:3a:fe:e8:39:f0:5f:
0f:d6:fa:7f:df:42:96:ab:98:13:74:42:44:b3:80:9a:2a:bd:
ea:7d:41:43:65:b5:7b:f4:cf:fe:80:51:8d:76:1d:61:e4:61:
58:c7:d0:ad:73:d9:15:f2:39:e2:fb:a8:1a:9f:d6:f3:42:31:
09:6e:57:97:09:73:65:7f:75:2c:2f:58:f2:5f:9f:51:3c:b9:
0c:1d:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 19:44:48 2024 by rpki-client on console-fra.rpki-client.org