Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/b7VvAyaIF4_qH7MicTEZvYYvHmM.roa
File: b7VvAyaIF4_qH7MicTEZvYYvHmM.roa (raw, json)
Hash identifier: VC24K0+nyj21pTx5tnTLJjUEwx2YeCuK3CZH3vX1VDU=
Subject key identifier: 6F:B5:6F:03:26:88:17:8F:EA:1F:B3:22:71:31:19:BD:86:2F:1E:63
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 0187BCA01969AB52E0DA8593FBE97BF6631D
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/b7VvAyaIF4_qH7MicTEZvYYvHmM.roa
Signing time: Wed 26 Apr 2023 08:13:41 +0000
ROA not before: Wed 26 Apr 2023 08:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31115
IP address blocks: 213.225.234.0/23 maxlen: 24
62.97.32.0/19 maxlen: 24
194.150.162.0/23 maxlen: 24
94.126.56.0/21 maxlen: 24
195.134.176.0/21 maxlen: 24
91.187.192.0/19 maxlen: 24
185.11.192.0/22 maxlen: 24
130.255.144.0/21 maxlen: 24
5.172.64.0/19 maxlen: 24
31.171.136.0/21 maxlen: 24
178.19.144.0/20 maxlen: 24
2a01:9840::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Apr 2023 08:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:a0:19:69:ab:52:e0:da:85:93:fb:e9:7b:f6:63:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: Apr 26 08:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fb56f032688178fea1fb322713119bd862f1e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:20:79:d8:33:d2:c6:42:00:b5:a3:8c:7f:
72:8e:ec:f9:7e:34:57:b7:42:58:86:d2:01:4f:7a:
8d:3b:15:2a:a8:88:70:12:3b:55:64:72:76:a1:f4:
8d:76:95:f4:e0:36:49:5a:67:e9:a2:f7:e0:4d:cb:
25:4d:f6:df:4a:ef:34:23:24:83:6c:47:8f:30:72:
48:d0:86:51:df:6a:a2:ce:06:c5:f0:8b:a0:35:ef:
15:87:bb:d3:25:64:84:3d:3b:c4:56:c2:63:f8:b2:
b9:52:62:51:fe:a3:5c:39:43:fb:48:16:18:be:28:
de:c6:02:3b:23:f8:fa:ed:aa:8b:11:62:43:83:98:
3d:26:f3:37:bc:47:52:28:37:c4:7c:df:bc:08:42:
f3:e6:78:3b:69:90:5d:04:fd:d3:3a:35:dd:01:9b:
3d:71:f7:6e:50:b9:72:c3:66:53:74:39:c6:f5:41:
0f:e6:80:e2:de:c6:3c:db:0a:1d:cb:43:56:02:a6:
3e:bd:cb:6d:a0:67:dd:53:d3:11:ed:39:5b:af:8a:
b2:bd:46:e6:c1:09:0d:ea:57:8d:bc:20:4a:3e:25:
37:14:8a:a1:d0:cf:8b:2d:2e:c7:a1:e5:87:ee:53:
da:b6:18:d4:9f:c0:1d:7d:8d:0b:c9:6d:fa:1e:d2:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B5:6F:03:26:88:17:8F:EA:1F:B3:22:71:31:19:BD:86:2F:1E:63
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/b7VvAyaIF4_qH7MicTEZvYYvHmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.64.0/19
31.171.136.0/21
62.97.32.0/19
91.187.192.0/19
94.126.56.0/21
130.255.144.0/21
178.19.144.0/20
185.11.192.0/22
194.150.162.0/23
195.134.176.0/21
213.225.234.0/23
IPv6:
2a01:9840::/32
Signature Algorithm: sha256WithRSAEncryption
d5:be:55:bd:75:4d:0a:1b:4f:65:28:8a:4c:e6:71:c1:c5:93:
2c:51:c5:2c:58:7f:8d:18:46:9c:c5:b4:93:f7:86:5f:42:ee:
20:88:a5:a5:ad:41:88:2b:41:2c:49:44:b0:ed:4f:8f:77:7f:
82:43:51:41:61:d4:b8:b4:93:40:8c:79:67:3a:79:d1:23:f5:
f6:d1:1e:b2:82:90:8a:59:dc:97:86:f1:c0:9b:24:2e:c3:62:
49:c1:6c:81:f7:aa:16:6a:4d:bc:89:eb:85:65:8d:06:c1:ac:
4d:e2:c6:85:91:94:cd:2f:f9:8e:db:5f:e0:19:65:c3:93:9d:
f9:01:9c:38:d6:23:a6:21:45:74:85:b0:c5:da:a5:fa:1b:27:
d8:e8:26:7b:d3:40:04:86:97:bc:cc:5a:2e:f9:0d:73:45:25:
63:83:e3:40:7d:63:7a:8c:19:8e:3f:67:70:4f:ba:54:58:72:
6e:52:9a:05:06:7e:5e:1c:ee:c6:9c:cc:0e:cb:ab:96:85:23:
9a:80:07:0e:8b:d4:44:32:bc:a6:93:a2:28:f3:a9:02:aa:74:
33:1c:ba:b8:f6:54:85:d8:b0:a1:d2:a1:74:d6:cf:55:af:c2:
19:b2:83:4b:86:b8:ee:f0:c6:c3:5b:71:99:ed:54:fa:7f:ab:
1c:5b:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:40 2024 by rpki-client on console-fra.rpki-client.org