Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/DhIWWSAOiFuK-bA0OJCpuALHwJM.roa
File: DhIWWSAOiFuK-bA0OJCpuALHwJM.roa (raw, json)
Hash identifier: SNdiwtGnm6Ow15159/2c2IMVavE9IMglESFh1pXOZUk=
Subject key identifier: 0E:12:16:59:20:0E:88:5B:8A:F9:B0:34:38:90:A9:B8:02:C7:C0:93
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 01856F94AA202550F834E5CA1C199312B038
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/DhIWWSAOiFuK-bA0OJCpuALHwJM.roa
Signing time: Sun 01 Jan 2023 23:04:51 +0000
ROA not before: Sun 01 Jan 2023 23:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1273
IP address blocks: 195.92.0.0/16 maxlen: 16
195.80.64.0/19 maxlen: 19
194.112.64.0/18 maxlen: 18
194.6.64.0/19 maxlen: 19
194.205.0.0/16 maxlen: 16
62.208.0.0/16 maxlen: 16
194.6.0.0/18 maxlen: 18
213.38.0.0/16 maxlen: 16
217.134.0.0/15 maxlen: 15
217.161.0.0/16 maxlen: 16
195.89.13.0/24 maxlen: 24
195.10.0.0/18 maxlen: 18
212.165.0.0/19 maxlen: 19
193.164.160.0/19 maxlen: 19
194.176.128.0/19 maxlen: 19
195.144.128.0/19 maxlen: 19
212.158.0.0/17 maxlen: 17
195.89.0.0/16 maxlen: 16
185.204.4.0/22 maxlen: 22
213.12.0.0/16 maxlen: 16
195.44.0.0/16 maxlen: 16
217.135.0.0/16 maxlen: 16
195.2.0.0/19 maxlen: 19
62.221.0.0/19 maxlen: 19
194.221.0.0/16 maxlen: 16
62.25.64.0/18 maxlen: 18
195.59.0.0/16 maxlen: 16
195.27.0.0/16 maxlen: 16
194.152.64.0/19 maxlen: 19
194.177.160.0/19 maxlen: 19
213.185.192.0/19 maxlen: 19
212.137.0.0/16 maxlen: 16
2001:5000::/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 18 Oct 2023 09:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:aa:20:25:50:f8:34:e5:ca:1c:19:93:12:b0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Jan 1 23:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e121659200e885b8af9b0343890a9b802c7c093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:72:c3:e4:15:fa:d3:49:5c:d3:a2:0e:0c:
ba:10:97:41:06:5a:c5:64:a7:b8:64:0a:be:af:61:
17:22:a9:f5:e9:1f:3f:f6:3c:81:0d:85:ca:4a:90:
d9:c9:1f:54:55:12:5e:d1:17:83:f7:7a:aa:c9:06:
1c:56:2b:a4:02:b4:2b:a7:4c:74:12:ed:62:4f:85:
f2:a9:d9:07:36:84:9a:ae:17:ad:54:f9:51:81:91:
83:f0:e8:1a:fa:1e:f0:fe:96:91:2f:21:32:c2:7e:
b4:cd:1c:b2:8c:7d:6a:f6:d5:37:c8:c9:19:60:07:
54:b1:43:1b:a1:b7:7c:26:3a:73:9f:ac:67:b9:2b:
ab:23:49:83:26:12:92:50:9a:40:c7:5e:77:1c:69:
00:41:37:24:1e:30:9e:86:52:61:f8:9d:36:8d:ac:
87:ba:38:36:df:ad:43:e4:93:79:28:ac:eb:9d:9e:
14:ee:7e:57:59:2c:fe:9c:fd:dd:f5:59:1e:5f:e7:
30:32:9e:78:9c:de:bc:08:bf:76:b5:82:2c:8e:7a:
50:11:c5:cc:06:79:b1:4f:e3:1e:04:bc:f3:9b:a2:
46:73:18:46:3d:6a:13:2c:95:9b:a0:1b:2f:01:50:
36:63:f0:8d:f7:0c:38:a9:69:6c:e5:95:f9:26:7b:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:12:16:59:20:0E:88:5B:8A:F9:B0:34:38:90:A9:B8:02:C7:C0:93
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/DhIWWSAOiFuK-bA0OJCpuALHwJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.64.0/18
62.208.0.0/16
62.221.0.0/19
185.204.4.0/22
193.164.160.0/19
194.6.0.0-194.6.95.255
194.112.64.0/18
194.152.64.0/19
194.176.128.0/19
194.177.160.0/19
194.205.0.0/16
194.221.0.0/16
195.2.0.0/19
195.10.0.0/18
195.27.0.0/16
195.44.0.0/16
195.59.0.0/16
195.80.64.0/19
195.89.0.0/16
195.92.0.0/16
195.144.128.0/19
212.137.0.0/16
212.158.0.0/17
212.165.0.0/19
213.12.0.0/16
213.38.0.0/16
213.185.192.0/19
217.134.0.0/15
217.161.0.0/16
IPv6:
2001:5000::/21
Signature Algorithm: sha256WithRSAEncryption
91:e3:4b:fe:0a:65:41:a4:e3:80:ac:f5:3a:62:06:33:8d:40:
57:c0:0b:98:90:c5:4f:f2:61:62:e5:9b:1e:3a:a5:76:d9:4f:
60:df:f9:0c:fd:b0:fe:34:48:b2:59:92:c6:6f:be:fe:10:17:
86:0a:f1:21:63:ad:b9:b7:c0:d9:0e:a2:0a:02:2f:49:db:66:
77:3e:08:e7:fe:df:14:c0:74:11:10:29:68:fc:6c:4b:41:38:
61:d8:38:b9:f1:8b:35:5e:20:56:90:dd:46:bb:cd:53:bb:14:
4e:7e:d9:45:eb:10:69:1e:76:5c:f1:ec:25:ba:9f:a4:22:99:
84:3b:ec:39:cb:3c:81:75:e3:a9:1f:72:ed:41:58:1b:ee:82:
9a:62:76:25:12:d4:2f:f8:a0:e4:99:15:e9:31:72:47:4a:bd:
2b:8e:e0:d8:c6:c3:0e:af:6a:19:7d:0e:aa:5b:3a:84:1c:1c:
6c:d3:49:97:19:65:27:91:bb:03:78:29:03:5c:0d:59:87:23:
39:70:11:d7:f0:df:2e:6b:ba:aa:6a:e4:0d:d5:bb:0a:b6:81:
a7:e5:3e:66:32:c1:1c:60:75:c2:f8:1d:7a:73:4a:4d:6e:2c:
2b:0e:e3:e6:cd:83:d8:84:ca:a2:85:c0:04:e6:d2:0f:59:a5:
a6:70:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:22 2024 by rpki-client on console-ams.rpki-client.org