Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/8FEpDlmLFBYmrbhYM90N1TYm3Nk.roa
File: 8FEpDlmLFBYmrbhYM90N1TYm3Nk.roa (raw, json)
Hash identifier: hDGPhcMipa0X8fag/NDX1HKEsB0QddGnDSXSGf6hnis=
Subject key identifier: F0:51:29:0E:59:8B:14:16:26:AD:B8:58:33:DD:0D:D5:36:26:DC:D9
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 01856DD43C97D2D163DBA97415ABF0DCB89A
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/8FEpDlmLFBYmrbhYM90N1TYm3Nk.roa
Signing time: Sun 01 Jan 2023 14:55:03 +0000
ROA not before: Sun 01 Jan 2023 14:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6855
IP address blocks: 178.41.128.0/17 maxlen: 17
95.103.0.0/18 maxlen: 18
78.98.0.0/15 maxlen: 15
195.146.136.0/24 maxlen: 24
195.91.0.0/17 maxlen: 17
213.81.197.0/24 maxlen: 24
95.102.0.0/15 maxlen: 15
213.160.160.0/19 maxlen: 19
213.81.128.0/17 maxlen: 17
84.47.0.0/17 maxlen: 17
212.5.192.0/19 maxlen: 19
91.127.0.0/16 maxlen: 16
194.154.224.0/19 maxlen: 19
185.19.72.0/22 maxlen: 22
195.146.128.0/19 maxlen: 19
87.197.0.0/16 maxlen: 16
178.40.0.0/15 maxlen: 15
95.103.64.0/18 maxlen: 18
95.102.128.0/17 maxlen: 17
2a00:12a8::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:3c:97:d2:d1:63:db:a9:74:15:ab:f0:dc:b8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Jan 1 14:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f051290e598b141626adb85833dd0dd53626dcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:9e:37:41:27:c9:1c:2f:85:55:d2:c5:8b:
5b:4f:5a:78:a4:57:67:b2:aa:85:b6:e1:af:25:72:
4d:c1:63:7c:49:f4:7a:f2:0e:40:37:b1:9e:2a:ff:
ef:39:e4:eb:11:d8:65:32:e2:57:f3:73:4b:d0:fc:
13:8f:c7:84:32:1e:c4:e3:59:06:55:43:df:29:b8:
05:34:0a:de:d4:35:c9:ca:37:a0:59:41:68:cf:cb:
e4:1e:ef:8b:4b:91:9b:0d:23:79:6c:98:29:52:a4:
49:93:77:37:74:d1:95:d8:3b:93:88:dd:82:79:ff:
8f:1c:e7:71:02:52:d3:09:3b:e4:2f:06:84:d0:25:
8f:36:d5:85:e0:a9:3c:8a:81:9e:30:d1:3d:00:50:
ef:97:6a:3f:eb:c7:b9:88:52:9c:c6:30:a0:2b:35:
91:c5:f3:db:a5:6e:6a:1f:b4:f7:9c:d9:bc:d6:a8:
02:8a:99:73:6c:40:28:17:4f:d9:5c:7c:d1:5d:84:
8e:3e:4c:f4:3f:87:a3:9a:cf:0e:49:68:08:34:c0:
25:92:d7:cb:90:ad:b9:7f:45:78:75:35:93:d5:82:
f2:73:bd:f7:70:44:6c:90:ed:9f:9b:cd:5b:cb:f8:
d1:b0:ee:9b:53:03:c6:c0:13:2e:de:62:d6:8c:55:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:29:0E:59:8B:14:16:26:AD:B8:58:33:DD:0D:D5:36:26:DC:D9
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/8FEpDlmLFBYmrbhYM90N1TYm3Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.98.0.0/15
84.47.0.0/17
87.197.0.0/16
91.127.0.0/16
95.102.0.0/15
178.40.0.0/15
185.19.72.0/22
194.154.224.0/19
195.91.0.0/17
195.146.128.0/19
212.5.192.0/19
213.81.128.0/17
213.160.160.0/19
IPv6:
2a00:12a8::/29
Signature Algorithm: sha256WithRSAEncryption
b1:e2:a5:bf:df:c5:a1:d3:12:10:a0:54:6f:ba:9e:5f:66:f4:
06:bb:d2:15:76:f3:02:66:b3:f1:1d:96:ad:c8:bd:dd:aa:d7:
c3:df:b1:4e:dc:46:31:9d:3b:71:97:c8:3a:49:9f:32:f6:e5:
18:a8:81:9c:3f:03:a8:7a:7d:38:27:eb:af:32:77:20:b6:cb:
40:ef:fe:76:45:ab:6e:cb:87:57:e3:b6:ff:6e:30:8b:12:10:
f5:c9:98:05:c6:04:72:fe:d6:3a:b9:a9:a9:aa:6a:f6:b7:ff:
52:ad:37:7f:a3:fd:ee:a4:79:a8:06:6b:da:05:a0:87:33:20:
ac:fe:88:42:1e:e6:c9:13:87:32:4f:34:f2:0d:2a:d1:57:56:
ac:45:a9:21:c8:7c:bf:00:31:d8:2a:ab:c8:08:a4:bb:5f:d0:
6d:66:89:63:ba:ec:a5:43:c2:c6:5b:20:26:d0:f4:e9:86:2f:
b6:36:b8:8a:39:5d:72:5b:d2:75:b5:13:94:47:07:e7:6a:50:
92:5f:cc:8e:7d:e9:c7:fd:15:34:f6:e1:0c:b9:54:2e:f8:0e:
0d:6d:ec:7d:81:b0:6a:71:b7:8e:f4:ee:0f:b3:a5:a4:8d:2e:
17:4f:79:eb:27:32:c1:b7:b9:04:91:28:fb:4f:53:7b:4e:2d:
29:f3:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:45 2024 by rpki-client on console-fra.rpki-client.org