Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/2PCldxVkv9CS635yPCYvmAKetHU.roa
File: 2PCldxVkv9CS635yPCYvmAKetHU.roa (raw, json)
Hash identifier: DlKZbL0jdnZm2YC3C8YYV1KMcQdruBy16lnTdFrOVzs=
Subject key identifier: D8:F0:A5:77:15:64:BF:D0:92:EB:7E:72:3C:26:2F:98:02:9E:B4:75
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 0187658BEFFC4D5E45512155A5EC825E30C6
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/2PCldxVkv9CS635yPCYvmAKetHU.roa
Signing time: Sun 09 Apr 2023 10:24:42 +0000
ROA not before: Sun 09 Apr 2023 10:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25019
IP address blocks: 159.0.224.0/20 maxlen: 20
185.139.8.0/22 maxlen: 22
159.0.240.0/20 maxlen: 20
212.215.128.0/18 maxlen: 18
212.215.128.0/17 maxlen: 17
212.215.136.0/21 maxlen: 21
212.215.144.0/20 maxlen: 20
159.0.64.0/20 maxlen: 20
212.215.224.0/21 maxlen: 21
159.0.80.0/20 maxlen: 20
212.215.240.0/22 maxlen: 22
159.0.96.0/20 maxlen: 20
212.215.244.0/22 maxlen: 22
212.215.248.0/21 maxlen: 21
159.0.0.0/20 maxlen: 20
159.0.0.0/16 maxlen: 16
159.0.16.0/20 maxlen: 20
212.215.160.0/20 maxlen: 20
212.215.176.0/20 maxlen: 20
159.0.32.0/20 maxlen: 20
212.215.192.0/20 maxlen: 20
159.0.48.0/20 maxlen: 20
159.0.192.0/20 maxlen: 20
159.0.208.0/20 maxlen: 20
159.0.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:65:8b:ef:fc:4d:5e:45:51:21:55:a5:ec:82:5e:30:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Apr 9 10:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8f0a5771564bfd092eb7e723c262f98029eb475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:3f:35:8d:69:87:13:dd:37:5b:ce:cb:2d:
51:e3:c4:3c:0e:0b:b6:90:bb:03:8f:05:6a:34:1c:
9f:e0:6b:3f:04:b6:a7:ae:7c:25:fb:41:63:f4:c3:
dd:4e:d2:1c:6f:0c:2b:15:e9:44:3d:64:5f:99:b3:
0a:d6:1c:57:9c:32:d1:7d:cd:98:4a:da:b8:b5:cd:
11:14:30:a2:0b:e9:58:0e:48:c8:fc:ee:f0:d5:fa:
91:ed:62:ed:34:fc:b6:fe:ad:d3:07:66:e3:59:75:
0a:47:e2:90:e0:c4:75:f7:a4:8f:2a:b8:ec:33:22:
4e:38:28:74:7a:a3:66:7b:17:c0:0b:4c:35:cb:cc:
5f:ad:35:10:17:62:65:0e:c1:1a:d7:92:27:0d:36:
1e:3b:11:bb:2e:b3:fe:17:bc:8c:b4:a5:23:c2:dd:
10:9e:3d:fa:e6:cf:3f:5f:f5:86:f0:33:93:a1:dd:
02:7e:3e:1a:5b:76:32:f8:69:23:c5:98:dd:09:46:
75:8d:bd:f0:93:2b:40:3c:37:4d:f0:3a:cc:5a:ef:
99:7d:36:6f:0a:bb:13:94:14:fe:ee:7e:b4:92:f6:
3e:65:d9:f6:30:a0:03:d2:10:82:c0:ad:28:61:a1:
80:4c:d7:c8:74:d3:18:76:62:b0:c6:8e:b9:46:09:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F0:A5:77:15:64:BF:D0:92:EB:7E:72:3C:26:2F:98:02:9E:B4:75
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/2PCldxVkv9CS635yPCYvmAKetHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.0.0.0/16
185.139.8.0/22
212.215.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5d:e2:ce:49:fc:eb:b1:a1:6d:5c:0b:d1:f8:d8:62:1c:84:97:
ff:c1:f7:9b:03:b9:f9:2f:8a:55:23:6b:e2:ff:80:43:6e:ec:
55:68:c9:c1:35:e8:8d:8f:d4:b5:e6:50:25:06:20:e1:43:9d:
5a:bd:2e:eb:29:f4:3d:0a:27:77:f7:e7:2e:74:ca:08:a4:1e:
88:68:90:e8:37:cd:8c:38:27:ba:92:38:a2:50:ab:8e:89:86:
db:38:8e:06:c4:e7:db:11:3b:a2:b0:af:f4:8b:ff:04:02:fc:
ca:81:56:b9:c6:a6:36:a6:ed:19:8c:e0:ba:6e:ea:39:06:79:
35:64:1f:a6:17:48:39:3a:28:a1:36:bb:30:55:8a:b4:73:23:
75:08:a5:47:4a:23:80:27:f9:39:8c:2b:e8:3e:30:29:3f:7b:
88:7b:fc:e3:b2:50:5d:c9:69:8a:a2:f7:a7:30:e6:28:5c:99:
bf:90:be:1f:3b:6c:c9:25:53:db:73:af:07:77:0a:70:f5:9f:
78:f6:c5:0c:c7:a0:6b:65:6f:9e:94:fc:30:4b:b3:6a:9e:5c:
46:42:19:76:ed:4f:25:b7:14:7e:61:df:3e:a4:f9:70:89:96:
c9:24:7b:6c:0a:a3:ea:75:88:b1:43:a9:9d:f7:76:d7:d4:90:
80:84:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:17 2024 by rpki-client on console-fra.rpki-client.org