Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/E4OFntJ71-Vux-8sKYx-dxGTMrs.roa
File: E4OFntJ71-Vux-8sKYx-dxGTMrs.roa (raw, json)
Hash identifier: MimI05XjJa0cHVgNdXbWPfPiR9154+Sz1tvQeKqyLf4=
Subject key identifier: 13:83:85:9E:D2:7B:D7:E5:6E:C7:EF:2C:29:8C:7E:77:11:93:32:BB
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 018572C397DE5193C936A98E8316D5C0BA53
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/E4OFntJ71-Vux-8sKYx-dxGTMrs.roa
Signing time: Mon 02 Jan 2023 13:54:59 +0000
ROA not before: Mon 02 Jan 2023 13:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 212.142.32.0/19 maxlen: 19
212.83.64.0/22 maxlen: 22
212.83.68.0/22 maxlen: 22
213.46.160.0/19 maxlen: 19
213.46.60.0/22 maxlen: 22
212.142.0.0/18 maxlen: 18
212.142.0.0/19 maxlen: 19
213.46.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:97:de:51:93:c9:36:a9:8e:83:16:d5:c0:ba:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Jan 2 13:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1383859ed27bd7e56ec7ef2c298c7e77119332bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:b2:50:86:48:dd:fe:8b:49:4c:58:9c:bc:
04:3a:73:ed:55:05:ab:64:05:be:07:44:91:cf:64:
26:f5:87:a4:d7:29:8b:89:59:7e:68:df:db:6b:2f:
7e:c0:4b:c3:44:37:a0:8c:b8:6c:c4:06:d0:f8:a6:
bf:a9:39:81:2a:d8:9d:be:80:da:05:5d:9e:1f:72:
93:3f:05:36:9d:7b:e2:d0:ad:79:d3:36:9c:ab:3a:
ea:a6:04:0c:d5:84:ce:e8:5d:b6:29:30:2b:52:35:
e5:88:e9:31:d9:b7:c5:b8:c9:e1:0b:45:8a:89:43:
6f:db:42:0f:39:6a:c8:98:4a:4d:2a:7a:49:94:4f:
58:14:ec:44:24:6e:4a:14:19:bc:0a:23:55:8e:84:
11:e5:99:de:31:70:3c:06:99:70:f9:e1:7b:28:b0:
8e:59:a1:dd:08:b3:42:dd:93:4b:7f:1a:ed:24:8a:
d0:42:cc:de:f3:3f:ef:63:88:37:ba:bd:2c:65:12:
c5:f2:a7:be:ec:5d:7f:b0:45:86:97:d5:ef:7e:8a:
d4:f0:32:f4:f8:fa:da:2a:cd:d9:16:ee:c8:d2:55:
67:23:02:3a:d8:97:fe:33:d9:0d:76:62:be:61:fb:
67:90:5e:9b:72:dc:84:1a:6e:9d:7f:44:28:27:83:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:83:85:9E:D2:7B:D7:E5:6E:C7:EF:2C:29:8C:7E:77:11:93:32:BB
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/E4OFntJ71-Vux-8sKYx-dxGTMrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.83.64.0/21
212.142.0.0/18
213.46.60.0/22
213.46.160.0/19
213.46.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:b7:d4:d1:2b:e4:89:4a:7d:5a:33:8a:f6:fd:ac:ea:63:52:
55:ab:a2:fb:9d:47:9f:08:52:6e:79:cd:c8:71:1c:75:4e:03:
c1:98:15:ca:35:c2:de:b2:c9:83:de:45:9d:d2:77:f4:bc:23:
e7:b9:5b:32:13:60:1e:6a:b0:32:31:fa:15:9b:cf:4d:19:0c:
b9:69:f8:5a:9c:98:ae:d8:60:39:00:ec:fa:0b:27:95:55:3f:
2d:50:7c:08:14:72:a2:6b:aa:e2:30:5b:8b:3a:f1:73:38:ce:
2e:b8:19:d3:26:aa:75:89:f0:cf:80:11:4a:8a:c3:23:3c:3b:
71:6e:2f:83:88:2c:4f:67:d2:bb:64:48:55:31:de:2e:be:f3:
ec:79:14:92:0e:68:3b:83:a8:da:51:85:56:4e:32:82:b5:86:
32:d6:99:e3:10:54:b4:f6:99:cf:14:7a:f9:1a:49:53:b6:f3:
9a:2b:fb:86:8b:56:c0:32:02:af:be:40:de:17:55:ca:a0:ac:
51:f3:95:48:d2:9d:57:ba:49:2f:c6:99:0e:67:ab:39:93:36:
e3:92:0c:aa:0d:5b:15:a4:95:90:2d:82:61:29:99:8d:fc:e7:
8b:34:7e:cd:73:e8:d2:34:c0:68:38:e1:b1:7d:78:1c:1d:dd:
fa:1b:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org