Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/0-jdb1fjB7WvGDCcIljapscsyKM.roa
File: 0-jdb1fjB7WvGDCcIljapscsyKM.roa (raw, json)
Hash identifier: WtNHO07tBldWktj/g/idbImtp2nYsXKnF6dhZSKBveA=
Subject key identifier: D3:E8:DD:6F:57:E3:07:B5:AF:18:30:9C:22:58:DA:A6:C7:2C:C8:A3
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0ACBCAF953BB1C573BD1DDE2433E44
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/0-jdb1fjB7WvGDCcIljapscsyKM.roa
Signing time: Sun 01 Jan 2023 11:15:02 +0000
ROA not before: Sun 01 Jan 2023 11:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12626
IP address blocks: 213.203.64.0/18 maxlen: 18
212.30.96.0/19 maxlen: 19
62.62.128.0/17 maxlen: 17
81.185.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 31 Mar 2023 06:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:cb:ca:f9:53:bb:1c:57:3b:d1:dd:e2:43:3e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3e8dd6f57e307b5af18309c2258daa6c72cc8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:34:75:a2:cd:db:45:54:75:19:81:33:14:
0e:fa:15:66:df:fc:36:0e:82:1b:a9:33:de:96:5c:
9c:90:7e:bf:7d:61:58:8e:c6:59:e1:cb:c4:05:c5:
00:7b:26:e2:87:91:3d:38:fb:f5:b8:d1:f2:27:a9:
5c:09:b8:ca:36:80:ae:5d:5d:cd:5b:7c:b9:69:1f:
d7:d9:ac:f8:bc:2e:83:25:1b:3a:96:bb:22:df:29:
35:1c:a4:bf:1c:0f:ba:6f:59:31:65:10:e7:3c:88:
e2:9d:f2:62:7b:58:68:af:22:07:31:9e:b7:7b:a0:
bd:27:78:ed:c9:66:d5:6d:ad:7c:c6:26:8b:05:5e:
cf:65:d4:98:ff:69:b3:23:6a:db:49:99:2b:8a:da:
5e:f0:bb:b9:4a:5b:96:2a:74:c6:ec:8a:01:0b:d6:
96:23:87:b5:5c:49:8c:a6:1e:d7:f7:39:aa:9b:07:
85:97:20:4d:cd:23:f2:b1:8f:75:26:b8:e7:1a:e3:
f7:26:6f:3e:d4:af:35:1f:70:31:3b:c0:ef:f7:ab:
d6:12:7d:28:a3:19:4d:aa:cb:d1:51:d7:f0:08:30:
5c:27:ea:cb:16:1c:36:63:15:3a:d8:e9:b2:98:e1:
54:cc:f2:73:20:4c:bc:c8:1f:ee:49:a0:60:c3:ad:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:DD:6F:57:E3:07:B5:AF:18:30:9C:22:58:DA:A6:C7:2C:C8:A3
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/0-jdb1fjB7WvGDCcIljapscsyKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.62.128.0/17
81.185.0.0/16
212.30.96.0/19
213.203.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:90:42:00:e7:ac:33:14:83:be:81:4b:cd:86:ca:7c:ec:6b:
aa:57:f8:dd:20:88:65:60:b0:49:bf:cb:09:a5:1b:1e:67:79:
9f:96:ab:cb:27:a2:48:6b:05:8f:dd:09:10:4a:48:33:18:be:
00:18:49:51:b2:45:1c:23:e2:37:98:e0:27:d0:ec:46:61:38:
e9:9c:b2:28:81:05:56:df:be:a1:ea:68:65:6f:b1:bd:e2:33:
dd:86:d2:9e:9b:59:92:df:d6:61:99:44:ab:c5:ee:72:48:73:
e3:ee:e7:78:77:26:14:b6:0d:11:cc:e1:82:c7:7f:21:75:6d:
35:63:7b:59:a2:74:e1:13:29:fc:95:0e:4e:2f:92:50:02:fb:
26:74:f6:8c:f2:4d:18:3d:2e:c8:35:ae:28:99:4f:e8:8a:eb:
ec:af:0b:e9:d1:38:0c:db:8e:d4:6f:bb:87:f1:b9:b3:51:ff:
ca:bd:ea:13:ad:2a:01:ed:29:d3:9f:92:72:d8:0d:54:31:5e:
9f:04:55:c7:3b:c0:44:96:72:20:41:15:cb:ce:a1:5c:63:2c:
3b:11:15:bf:71:e3:3e:d8:5a:85:c4:c1:72:e0:bb:32:f2:ed:
84:59:1f:cc:f3:0a:95:02:8d:ef:ca:8f:ba:57:a9:93:47:e7:
df:45:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org