Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/_Cwe2pEG7d1qnFxXUVQ9zcpqD4c.roa
File: _Cwe2pEG7d1qnFxXUVQ9zcpqD4c.roa (raw, json)
Hash identifier: 0rz9jsJKHMllvClxQ2V42KRrUZ1Wu+uCpJJ2fT6KfwI=
Subject key identifier: FC:2C:1E:DA:91:06:ED:DD:6A:9C:5C:57:51:54:3D:CD:CA:6A:0F:87
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 01856E01D5D309EC974957C1FE0D63C4CBDB
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/_Cwe2pEG7d1qnFxXUVQ9zcpqD4c.roa
Signing time: Sun 01 Jan 2023 15:44:51 +0000
ROA not before: Sun 01 Jan 2023 15:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8339
IP address blocks: 202.170.80.0/21 maxlen: 24
82.149.96.0/19 maxlen: 24
195.202.128.0/19 maxlen: 24
62.40.128.0/17 maxlen: 24
178.18.160.0/20 maxlen: 24
94.16.32.0/19 maxlen: 24
185.100.96.0/22 maxlen: 24
141.98.176.0/22 maxlen: 24
95.143.224.0/20 maxlen: 24
195.230.160.0/19 maxlen: 24
82.218.0.0/16 maxlen: 24
194.106.224.0/19 maxlen: 24
89.104.0.0/19 maxlen: 24
195.202.160.0/19 maxlen: 24
92.62.16.0/20 maxlen: 24
81.217.0.0/16 maxlen: 24
2a00:1b38::/32 maxlen: 32
2a02:e200::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 19 Jun 2023 13:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:d5:d3:09:ec:97:49:57:c1:fe:0d:63:c4:cb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Jan 1 15:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc2c1eda9106eddd6a9c5c5751543dcdca6a0f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:31:7c:81:8c:c1:10:a3:ef:17:1b:bb:56:
13:c2:9f:02:55:95:c3:a4:3c:13:20:fb:43:96:ff:
4e:9c:66:ca:5a:90:64:3a:54:8d:87:55:4a:74:3b:
4d:95:05:64:45:4c:67:d6:c6:90:3d:50:47:80:0c:
c9:9c:a3:1d:10:35:24:e0:e8:ef:4f:1a:3e:90:9b:
10:c1:1f:6c:5b:9c:dc:3f:0b:f4:c6:53:22:e6:4b:
d9:26:12:8b:9a:ec:3a:88:00:42:e3:90:f5:f3:d7:
37:2c:22:9a:d2:ed:b4:6e:49:ce:9e:83:61:19:bb:
83:c6:e5:63:a0:00:0d:f6:92:4d:35:a5:b9:0b:3b:
9c:b8:ff:52:72:a9:58:1e:b0:ca:4d:e7:1e:20:32:
d2:25:0c:2c:20:b8:ae:95:ac:ab:26:db:67:8a:0c:
5e:fe:ed:be:9c:85:73:49:8e:70:46:35:45:a1:6e:
ea:79:22:8c:81:bd:9d:2e:6b:f9:ca:df:62:3b:76:
e9:3e:ef:43:25:bb:be:c6:a7:dd:5f:53:78:07:52:
aa:ee:69:b7:86:0f:b4:9f:7e:56:ff:ac:cf:ab:a4:
b1:ba:ca:5a:09:0f:96:4c:87:6b:48:e4:e9:db:c1:
16:09:92:cb:64:5e:d2:b2:aa:e7:30:4e:f8:0b:0a:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2C:1E:DA:91:06:ED:DD:6A:9C:5C:57:51:54:3D:CD:CA:6A:0F:87
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/_Cwe2pEG7d1qnFxXUVQ9zcpqD4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.40.128.0/17
81.217.0.0/16
82.149.96.0/19
82.218.0.0/16
89.104.0.0/19
92.62.16.0/20
94.16.32.0/19
95.143.224.0/20
141.98.176.0/22
178.18.160.0/20
185.100.96.0/22
194.106.224.0/19
195.202.128.0/18
195.230.160.0/19
202.170.80.0/21
IPv6:
2a00:1b38::/32
2a02:e200::/30
Signature Algorithm: sha256WithRSAEncryption
b4:2a:f3:26:d9:9f:43:c2:ae:d4:54:0e:25:5d:8f:57:fd:4c:
59:29:de:1c:f7:90:f6:92:96:3a:ee:11:07:53:f3:fa:22:4a:
8a:d9:7a:39:2b:82:90:82:63:72:42:18:29:38:02:66:aa:1a:
15:2e:39:ae:2a:a5:e0:e4:ec:0c:65:e2:ea:bb:4d:49:70:a5:
97:94:00:02:65:67:d9:27:48:8c:5c:e4:27:e7:76:49:90:08:
3c:f1:37:62:da:58:cf:49:4d:da:50:18:40:ff:6b:4f:11:07:
62:ab:b2:65:bb:20:11:e2:05:c7:b2:6d:64:24:ef:74:00:25:
f3:6b:67:20:1b:c7:3d:f6:b4:af:f3:ac:10:35:6c:8c:17:09:
bc:14:a9:f6:b0:8c:55:4c:0c:3f:a2:7b:b5:9d:1a:6f:68:ef:
a8:0f:e1:1d:40:d9:f0:04:1e:d4:dd:89:a4:9a:8b:56:da:cc:
29:08:a0:34:5a:fa:f5:27:e1:34:0c:82:1d:a4:17:52:1b:fe:
8f:8f:d0:ef:fa:f6:5c:3c:25:0a:a2:16:8f:77:d0:28:25:f2:
ee:71:92:d9:77:99:f6:c8:c9:54:8d:65:1f:f7:77:a7:e6:48:
8d:7c:92:76:85:7c:20:81:cf:04:3d:58:fd:f5:d8:4e:d1:03:
02:e5:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org