Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/_2Cae_mJyjkDDRn6zpApdVJ19UM.roa
File: _2Cae_mJyjkDDRn6zpApdVJ19UM.roa (raw, json)
Hash identifier: Ltn+UeZsbxeYWNguRnY4ZrpjIoBl41jC2Ybr880wqW4=
Subject key identifier: FF:60:9A:7B:F9:89:CA:39:03:0D:19:FA:CE:90:29:75:52:75:F5:43
Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial: 01856C1C893554EF3027E4DD022170712FD5
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/_2Cae_mJyjkDDRn6zpApdVJ19UM.roa
Signing time: Sun 01 Jan 2023 06:54:47 +0000
ROA not before: Sun 01 Jan 2023 06:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8426
IP address blocks: 213.221.64.0/18 maxlen: 18
62.80.62.0/24 maxlen: 24
195.170.96.0/19 maxlen: 19
212.66.0.0/19 maxlen: 19
212.82.224.0/19 maxlen: 19
62.24.0.0/19 maxlen: 19
62.80.0.0/18 maxlen: 18
62.176.128.0/19 maxlen: 19
195.38.128.0/19 maxlen: 19
212.6.128.0/17 maxlen: 17
2a00:1798::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:89:35:54:ef:30:27:e4:dd:02:21:70:71:2f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Validity
Not Before: Jan 1 06:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff609a7bf989ca39030d19face9029755275f543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:35:06:a5:01:56:d3:49:32:35:46:06:dd:
99:33:8a:a3:ef:ad:7e:a2:12:a0:b5:58:1b:e5:c9:
87:4e:9b:9b:52:95:36:8d:a1:f3:57:79:3f:6c:56:
a4:a4:9e:70:09:39:f1:71:e4:c1:9e:54:42:29:0e:
70:82:c6:a1:39:88:47:35:c3:62:9b:16:b4:7b:bc:
48:79:dd:8f:23:44:b2:55:7d:77:df:61:69:ca:b9:
30:e4:0f:fa:0a:0a:94:14:28:f3:01:50:5f:b1:31:
8e:95:5f:c5:e7:d0:29:af:ca:70:af:8e:df:ef:0e:
b2:92:c8:bf:1d:6d:f9:e1:72:23:64:ff:24:5e:3b:
ef:06:f5:56:16:bf:6a:94:59:c3:47:9a:a9:ec:c9:
87:0a:01:f3:37:83:d7:50:da:6b:99:19:c2:55:f2:
f4:55:30:bc:75:43:ff:d9:1a:61:10:fd:52:7a:ba:
80:82:d9:12:20:a4:45:ea:49:1d:fb:da:c5:d5:41:
f8:04:9f:31:0e:78:0f:c4:63:4c:1a:be:e5:b8:14:
84:52:f0:51:bb:87:04:f7:23:d2:24:32:b6:97:ba:
2b:03:16:3f:54:92:9e:64:a7:aa:db:de:47:4f:fb:
d3:3f:4f:c0:23:14:0c:e4:ae:da:af:83:4c:43:b5:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:60:9A:7B:F9:89:CA:39:03:0D:19:FA:CE:90:29:75:52:75:F5:43
X509v3 Authority Key Identifier:
keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/_2Cae_mJyjkDDRn6zpApdVJ19UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.24.0.0/19
62.80.0.0/18
62.176.128.0/19
195.38.128.0/19
195.170.96.0/19
212.6.128.0/17
212.66.0.0/19
212.82.224.0/19
213.221.64.0/18
IPv6:
2a00:1798::/32
Signature Algorithm: sha256WithRSAEncryption
10:2d:81:a1:54:df:27:71:e3:fd:6a:54:5d:5e:b3:8c:a4:09:
79:15:cc:4c:d2:78:f8:59:e8:7d:8c:2e:f4:b7:f8:43:cd:af:
d0:0b:1c:1b:02:5f:ba:6c:9b:b0:78:21:ec:05:07:1f:c9:04:
5f:c0:c4:69:41:c4:78:6c:ff:db:64:99:c6:7a:9c:f3:51:07:
88:77:0f:15:b8:c0:66:29:2c:ca:8b:ac:e1:6a:b2:2b:dd:db:
9c:a1:4f:8d:3f:9c:8c:f6:e7:6b:fb:0d:6f:b0:31:57:92:a0:
51:24:ee:93:e9:56:97:e1:3c:f2:4f:de:82:f4:1a:e9:04:88:
df:ab:fc:3b:bc:84:95:ad:5a:3f:31:9a:d3:b8:65:5f:b1:4b:
d2:fa:60:df:5d:4f:e1:8c:03:0a:92:c9:45:cf:ca:a0:ea:cc:
a6:24:26:6b:d6:0a:7e:b5:39:c5:90:24:dd:b5:cf:80:2b:dc:
c3:30:b6:81:87:ce:ad:49:8a:b8:81:e1:fb:6c:8e:60:fc:96:
9d:6a:ee:13:7a:11:81:ad:b5:4a:35:18:85:e8:14:1c:90:80:
e7:2b:c7:75:38:8a:f4:81:43:10:d8:97:58:f0:c4:61:fa:56:
58:12:72:84:33:c5:1b:d4:1d:43:99:85:76:a2:63:e8:db:41:
79:d1:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:33 2024 by rpki-client on console-fra.rpki-client.org