Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1-HLrLMSkKTVW7AqOadPR3uqMDQg.roa
File: 1-HLrLMSkKTVW7AqOadPR3uqMDQg.roa (raw, json)
Hash identifier: 3trBt1jh0FnBXvO8AGpu+LadHDPzYOZVRsELONmxmXk=
Subject key identifier: F8:72:EB:2C:C4:A4:29:35:56:EC:0A:8E:69:D3:D1:DE:EA:8C:0D:08
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018B00AD5E4B3D5E3439DCF16EFCEAF489C9
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1-HLrLMSkKTVW7AqOadPR3uqMDQg.roa
Signing time: Thu 05 Oct 2023 16:30:43 +0000
ROA not before: Thu 05 Oct 2023 16:30:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49902
IP address blocks: 213.223.138.0/24 maxlen: 24
213.223.46.0/23 maxlen: 24
213.223.45.0/24 maxlen: 24
78.120.128.0/21 maxlen: 21
195.115.116.0/22 maxlen: 22
86.77.160.0/21 maxlen: 21
77.143.0.0/16 maxlen: 16
77.143.17.0/24 maxlen: 24
195.98.112.0/20 maxlen: 20
213.222.64.0/18 maxlen: 18
84.97.80.0/21 maxlen: 21
79.83.224.0/21 maxlen: 21
109.9.208.0/20 maxlen: 20
77.137.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 05 Oct 2023 16:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:ad:5e:4b:3d:5e:34:39:dc:f1:6e:fc:ea:f4:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Oct 5 16:30:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f872eb2cc4a4293556ec0a8e69d3d1deea8c0d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:36:d9:da:04:a1:e0:8d:16:cc:29:36:76:
0b:38:ed:19:96:d9:3c:96:85:77:49:c0:85:68:1d:
ca:32:0f:a0:08:bb:72:5f:11:35:7a:68:32:9c:58:
b1:20:58:35:b9:3b:3c:d7:b6:3f:16:a1:87:63:45:
9f:8c:a4:1e:0f:5f:1e:ff:30:23:b9:5e:ec:c2:c9:
4a:8d:f2:27:5e:fc:2f:8e:fa:5d:c2:9e:25:c6:c8:
e0:ba:e2:98:99:18:c5:4b:d2:3c:25:bc:fb:96:77:
d5:df:6a:fd:1c:2a:af:f7:ce:47:f1:09:4f:68:97:
c2:10:3e:73:ad:ba:19:e2:61:59:78:9e:ac:03:e2:
ec:42:94:3c:8b:fb:5b:ce:72:85:db:0b:ba:f2:f1:
b0:63:4f:14:da:e9:d0:a5:a8:f1:6c:98:4a:dd:13:
6b:46:7f:57:f1:cb:7c:b2:60:5c:39:0a:49:f5:f9:
7b:e4:c7:3b:61:03:ab:49:82:00:8b:0d:cd:c2:77:
d3:81:a4:98:cb:45:b0:91:92:90:39:0e:71:ed:78:
ce:d2:41:d0:8a:dd:9c:b7:2a:9b:85:07:ea:45:e1:
b8:b4:11:5f:7d:08:be:28:2c:c5:e8:d4:48:42:b5:
6e:9c:62:76:02:69:7c:13:b1:be:f0:c1:1c:d8:7b:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:EB:2C:C4:A4:29:35:56:EC:0A:8E:69:D3:D1:DE:EA:8C:0D:08
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1-HLrLMSkKTVW7AqOadPR3uqMDQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.224.0/19
77.143.0.0/16
78.120.128.0/21
79.83.224.0/21
84.97.80.0/21
86.77.160.0/21
109.9.208.0/20
195.98.112.0/20
195.115.116.0/22
213.222.64.0/18
213.223.45.0-213.223.47.255
213.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c4:97:73:85:52:c4:0b:23:e3:b9:57:b9:2b:25:77:40:37:
26:b5:ad:a4:71:a2:a9:eb:08:05:dc:02:28:4f:3e:5e:37:c2:
f1:4c:d3:e7:12:fa:44:e2:17:f8:79:33:fb:33:92:97:e3:14:
7c:a3:d0:d5:01:0f:7a:02:c3:d3:ef:50:6e:97:85:37:35:1f:
1c:cd:ef:ef:0a:33:c1:81:82:14:d6:f3:26:87:48:3e:c5:cc:
61:35:8d:8d:d0:e5:95:59:5b:cc:05:41:db:3a:23:a9:0f:8a:
97:c9:a6:88:e1:fb:11:df:2c:bb:3d:b6:3f:05:60:26:4f:e5:
95:3f:88:e9:0e:da:d2:54:0a:32:6c:8b:da:6c:af:07:e4:1c:
6e:58:c6:fe:4d:61:bc:e5:18:21:65:e4:e0:a1:22:cd:b2:f2:
17:df:41:c7:a4:54:21:db:42:7e:31:fa:82:04:e1:9c:c2:81:
43:cc:e9:29:5d:e9:c2:0c:46:78:e2:ad:68:a3:3b:9e:29:b5:
0e:b2:b9:97:4d:a3:0a:23:c0:ec:cd:cb:31:08:82:96:5c:d5:
f1:c8:93:d2:d2:85:1e:41:91:eb:1f:d8:eb:84:8a:57:c3:b2:
db:b1:82:2a:59:25:46:d4:40:1d:53:23:34:65:79:c4:e6:4a:
61:a9:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org