Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/L7hEmtNbm2V-Z3SeJz255R9ldiw.roa
File: L7hEmtNbm2V-Z3SeJz255R9ldiw.roa (raw, json)
Hash identifier: kxBjRoQZatv9aSjmK4uNFpuWXD2QmZe5IHWj4ZAFzPc=
Subject key identifier: 2F:B8:44:9A:D3:5B:9B:65:7E:67:74:9E:27:3D:B9:E5:1F:65:76:2C
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF9700C5F36929B891F3DF8B7936B70
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/L7hEmtNbm2V-Z3SeJz255R9ldiw.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42086
IP address blocks: 62.204.141.0/24 maxlen: 24
212.91.190.0/24 maxlen: 24
213.169.53.0/24 maxlen: 24
213.169.52.0/24 maxlen: 24
62.204.156.0/23 maxlen: 23
82.103.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:70:0c:5f:36:92:9b:89:1f:3d:f8:b7:93:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fb8449ad35b9b657e67749e273db9e51f65762c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:48:ec:1e:48:63:d9:5d:9c:ef:b6:0c:4c:
30:f0:7e:70:5d:3c:7c:59:9f:9c:7b:6e:90:91:9d:
29:33:1d:ad:84:8d:7c:f8:8d:74:17:38:15:92:9e:
7f:bb:73:03:08:a7:1e:14:f5:d2:6a:14:ab:b0:5d:
66:8e:37:db:01:b8:2f:73:64:5f:1b:01:2a:62:fd:
a8:41:66:ad:fa:50:ee:c4:1d:55:56:91:41:e3:52:
1e:9e:65:0a:1e:75:d6:c5:11:cd:d7:d3:da:73:16:
52:c9:b2:f2:16:a4:0e:db:6e:47:5f:25:94:10:35:
9f:ff:66:c4:71:7a:71:02:0e:c8:09:2c:0a:91:26:
2e:48:a9:ee:3a:53:ed:7e:ff:38:80:c2:e0:66:d7:
78:7c:e6:c0:a8:b0:0f:23:79:04:14:dc:c9:3a:93:
8e:50:1a:2f:96:6a:e7:49:31:99:47:a7:27:91:2a:
26:a9:37:17:d8:55:d0:b6:15:ef:2c:7f:36:84:dc:
ac:57:a6:77:d7:64:a5:1e:09:29:95:38:6a:c5:cb:
ff:bb:a2:87:0a:44:06:5a:9b:e1:2c:43:64:a5:be:
0f:96:7a:24:7a:b9:9c:86:0a:bc:5e:cd:2e:38:24:
10:8b:cc:c0:38:4d:f6:a4:14:f4:0d:ab:67:34:df:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:44:9A:D3:5B:9B:65:7E:67:74:9E:27:3D:B9:E5:1F:65:76:2C
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/L7hEmtNbm2V-Z3SeJz255R9ldiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.141.0/24
62.204.156.0/23
82.103.87.0/24
212.91.190.0/24
213.169.52.0/23
Signature Algorithm: sha256WithRSAEncryption
01:72:81:48:60:b2:3a:f1:35:8a:fb:4e:cf:24:7c:bd:b6:fe:
fc:8e:ca:bb:7b:3c:52:13:76:1e:5b:98:38:aa:78:d1:1b:8d:
b5:27:bf:f8:d3:0a:3e:b7:1e:0f:b8:77:bc:9b:30:e5:d6:8a:
f0:b7:da:b4:3a:e2:9f:bd:3e:ab:5a:54:26:b2:fd:02:b9:d3:
8f:71:d5:07:d9:24:43:4b:1c:d1:6e:6b:d8:e9:5e:07:0b:03:
c9:ed:bc:75:e2:6c:2b:de:81:a4:09:f1:ca:72:b7:ec:ba:7b:
df:70:51:27:e8:ed:9e:77:13:9c:b5:4f:4d:93:63:80:37:ba:
c4:6e:ec:9a:b7:fb:56:b8:75:34:6c:f0:ac:d1:02:47:75:8c:
2b:f2:3b:21:7d:60:8d:d7:5a:b2:51:9f:8f:c4:8c:04:2d:3f:
8a:d3:5c:a2:2a:3c:53:4f:51:51:2a:50:f5:6d:e3:3a:9d:b8:
1d:85:e5:1d:64:86:74:f8:5d:b5:7c:3b:8a:6b:07:a3:d8:ef:
8d:2f:53:45:d9:ad:f6:ef:19:ec:9a:8b:43:18:68:18:05:09:
e0:20:ed:b6:be:61:32:61:06:1a:f7:87:22:61:ad:27:1a:d9:
a2:12:ae:c4:ca:07:bb:da:41:32:2e:98:ff:0a:55:56:54:d4:
58:b7:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org