Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/F8kVx1H2LSb0v7QjuWKHv1RfHWQ.roa
File: F8kVx1H2LSb0v7QjuWKHv1RfHWQ.roa (raw, json)
Hash identifier: r3kRRUdFgwnZcDAXVjBi9q2EXAtrTGzmjizD/eUGe1I=
Subject key identifier: 17:C9:15:C7:51:F6:2D:26:F4:BF:B4:23:B9:62:87:BF:54:5F:1D:64
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 0188F6C9A2757768ED912168937DA704113E
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/F8kVx1H2LSb0v7QjuWKHv1RfHWQ.roa
Signing time: Mon 26 Jun 2023 08:19:49 +0000
ROA not before: Mon 26 Jun 2023 08:19:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60294
IP address blocks: 94.31.96.0/20 maxlen: 20
185.113.120.0/22 maxlen: 22
185.22.140.0/22 maxlen: 22
185.158.40.0/22 maxlen: 22
46.245.216.0/21 maxlen: 21
94.31.64.0/18 maxlen: 18
94.31.80.0/20 maxlen: 20
185.7.196.0/22 maxlen: 22
2a00:61e0::/32 maxlen: 32
2a03:fc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 27 Oct 2023 06:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:c9:a2:75:77:68:ed:91:21:68:93:7d:a7:04:11:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Jun 26 08:19:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17c915c751f62d26f4bfb423b96287bf545f1d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:f8:a1:fc:89:af:e9:c2:41:09:d7:0c:1a:
53:20:e6:97:1b:29:42:f8:1b:45:ba:a6:f4:6b:61:
d9:21:f5:b1:2c:5b:c5:81:b5:de:85:8a:b8:23:1c:
5f:c9:e5:48:f2:37:f0:11:29:64:08:1a:fe:90:0a:
92:1a:2a:6f:60:22:bb:d8:80:a0:e3:e4:cd:3b:a7:
07:76:08:b3:ec:c2:b4:be:42:02:c7:5e:85:13:03:
11:45:95:95:62:12:dc:48:fb:2b:2a:2b:64:75:74:
9c:60:49:34:58:3e:e7:bc:bc:9d:e4:ea:e8:bd:ce:
b6:84:d2:b3:2a:18:59:27:72:21:15:85:25:cd:a4:
cb:45:9a:14:b8:5e:b2:b8:0b:de:bc:a4:2b:26:bf:
ce:06:80:9e:83:01:23:98:a5:0f:65:d5:fa:a3:ae:
5f:41:ab:a7:7a:49:0f:b1:4d:b6:53:d2:60:b5:9d:
23:3e:3a:a9:0b:98:1d:19:3c:88:ec:31:ac:9b:3c:
70:bb:f3:73:e8:51:bf:bd:ea:4f:36:f1:ab:ae:09:
e0:52:ff:61:43:d3:d6:e7:5a:38:94:36:40:c1:44:
27:18:93:da:7c:a6:9d:af:42:87:81:ac:1f:a5:af:
0b:60:9d:0c:9f:a1:11:64:76:ee:9b:1b:74:9c:19:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:15:C7:51:F6:2D:26:F4:BF:B4:23:B9:62:87:BF:54:5F:1D:64
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/F8kVx1H2LSb0v7QjuWKHv1RfHWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.216.0/21
94.31.64.0/18
185.7.196.0/22
185.22.140.0/22
185.113.120.0/22
185.158.40.0/22
IPv6:
2a00:61e0::/32
2a03:fc0::/32
Signature Algorithm: sha256WithRSAEncryption
01:5c:d9:04:fd:c8:17:86:8c:4d:ed:10:c3:b3:cc:b5:00:d6:
26:83:9f:65:42:10:f8:72:cd:00:2f:d3:0b:71:80:bc:c6:ec:
06:e2:d9:d6:b2:2c:e5:96:49:c8:3d:5a:e6:ea:02:c2:8a:56:
d8:3e:d9:00:95:14:0a:dd:fd:db:35:ab:88:50:f5:dc:e5:ee:
c2:4a:a1:4b:0b:80:2d:31:93:68:2c:cb:64:b4:5c:6f:bf:1f:
7f:69:22:23:4e:a3:e8:6c:b2:56:56:ff:50:09:fa:3e:53:72:
a7:fb:3d:b5:3c:9e:65:8f:05:c6:ec:81:49:f9:f9:55:c0:fe:
09:f3:29:41:fd:88:38:d4:b7:ea:f5:a0:91:ca:e2:2a:fa:b1:
04:e4:49:8a:93:a8:aa:f9:dd:67:8e:be:74:00:2f:fd:43:06:
13:a8:3b:de:68:03:2d:21:43:e3:41:c9:63:c1:94:8a:be:d0:
45:b6:51:71:97:1f:bb:3c:0c:e9:c1:25:1a:1c:9e:b0:88:51:
be:88:38:4f:6e:2c:64:f8:a7:21:22:a9:86:bd:1a:a8:3a:c0:
57:2a:b4:a2:b5:ab:9f:f2:47:5b:97:61:54:7e:de:13:93:8e:
7e:cf:86:7a:3f:f2:85:6c:65:71:d5:8a:73:16:82:42:36:35:
f4:9c:16:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:59 2024 by rpki-client on console-fra.rpki-client.org