Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/Va9LoJgsdvCvhrNI-CDihNVA_ds.roa
File: Va9LoJgsdvCvhrNI-CDihNVA_ds.roa (raw, json)
Hash identifier: yY4yTtow9n+QY9eCzPmahp4d0C/goYpE/E7tA7CsrjY=
Subject key identifier: 55:AF:4B:A0:98:2C:76:F0:AF:86:B3:48:F8:20:E2:84:D5:40:FD:DB
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 0191A4208FAA63BE9CFB1F27D37CD93F171F
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/Va9LoJgsdvCvhrNI-CDihNVA_ds.roa
Signing time: Fri 30 Aug 2024 16:31:22 +0000
ROA not before: Fri 30 Aug 2024 16:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12876
IP address blocks: 62.4.0.0/19 maxlen: 19
62.210.0.0/16 maxlen: 16
195.154.0.0/16 maxlen: 16
212.47.224.0/19 maxlen: 19
212.83.128.0/19 maxlen: 19
212.83.160.0/19 maxlen: 19
212.129.0.0/18 maxlen: 18
2001:bc8::/32 maxlen: 38
2001:bc8:1201::/48 maxlen: 48
2001:bc8:1400::/38 maxlen: 38
2001:bc8:1800::/38 maxlen: 38
2001:bc8:1c00::/38 maxlen: 38
Validation: Failed, certificate revoked on Tue 03 Sep 2024 18:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a4:20:8f:aa:63:be:9c:fb:1f:27:d3:7c:d9:3f:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Aug 30 16:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55af4ba0982c76f0af86b348f820e284d540fddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:a6:ee:d6:b9:bd:2a:47:ec:6a:a8:60:a8:
61:8b:23:a1:7b:f3:c4:e2:2e:bd:65:60:0f:7f:28:
aa:f5:f5:95:25:3e:e0:39:15:5e:19:06:10:f2:99:
ea:f7:ca:2a:8a:4e:56:24:33:38:70:5b:25:3c:de:
88:ea:c0:cb:7c:6b:fa:59:76:94:b9:0e:b5:c5:24:
7f:d0:2a:b1:6b:d3:28:10:52:cb:d9:97:24:b4:09:
3b:35:6f:8c:61:a2:dd:35:0c:3d:0d:c4:d4:32:e5:
23:b5:fc:b4:f9:b9:88:f0:30:08:df:3c:ee:20:c6:
a0:d8:e2:25:ed:ac:12:a6:9f:98:b0:e4:df:0e:d7:
fb:77:c6:8f:3e:b5:f9:fa:3d:15:11:e7:59:6d:42:
f5:4f:19:f8:40:db:ce:3d:37:9c:26:48:f9:20:53:
45:b5:87:9e:9f:29:30:56:f1:0a:01:36:3f:f3:6c:
4c:06:cb:f3:e1:d3:62:e7:c4:2d:28:86:a7:e8:13:
48:96:82:2a:77:d6:a7:6c:4e:5e:9b:31:ce:eb:67:
ab:6a:3a:0c:ca:8e:64:cd:b8:e2:4a:a9:3b:32:42:
b7:f5:f5:75:e8:0c:ae:71:00:52:60:5a:3a:7e:8b:
7e:cc:b2:7d:d6:18:b2:a9:47:54:79:41:41:b4:ee:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:4B:A0:98:2C:76:F0:AF:86:B3:48:F8:20:E2:84:D5:40:FD:DB
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/Va9LoJgsdvCvhrNI-CDihNVA_ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.0.0/19
62.210.0.0/16
195.154.0.0/16
212.47.224.0/19
212.83.128.0/18
212.129.0.0/18
IPv6:
2001:bc8::/32
Signature Algorithm: sha256WithRSAEncryption
4e:8d:90:42:2f:21:db:8b:23:16:63:2e:93:46:2d:e5:bf:8b:
26:ce:39:d3:ed:fc:fd:05:b5:b9:c6:55:19:fb:da:84:be:95:
4a:fd:c6:5a:c2:ee:62:57:c5:cf:fa:10:6b:ae:c3:40:a2:3a:
d7:fb:fc:6e:50:de:61:95:eb:79:19:cc:1a:75:c8:92:ff:a5:
63:04:54:9c:71:34:5a:1d:e3:50:e6:b0:28:c3:0f:d8:da:94:
3b:51:3a:05:c1:15:8f:ca:58:34:b7:38:d2:f0:ad:73:16:30:
fe:4a:ae:aa:bc:7a:cf:a8:42:28:e0:6d:af:c4:74:20:35:f3:
40:86:21:17:a5:96:4c:73:ab:9e:4d:02:95:91:31:53:21:7f:
11:81:b1:49:02:70:1a:e1:7c:24:5e:cc:db:54:37:96:1a:1b:
42:29:f9:85:f0:48:7f:3f:d6:2f:b8:b8:09:be:85:ec:50:43:
c7:c1:21:d1:1d:82:bb:bf:7b:82:75:ac:c8:a0:9c:15:d4:31:
2f:d3:73:59:6c:f6:1a:ca:ad:ff:c4:4b:9e:a5:2c:c5:fa:2f:
1d:2a:b0:45:8f:f7:30:6f:3c:91:f9:14:dd:cb:bc:77:84:91:
05:e0:2d:e5:7b:a1:8a:25:ba:d7:a5:67:07:a3:1e:d7:af:28:
52:6b:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 22:00:53 2024 by rpki-client on console-ams.rpki-client.org