Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/r8_pujqpGe0Fuh9vE6q-5Xv2YLU.roa
File: r8_pujqpGe0Fuh9vE6q-5Xv2YLU.roa (raw, json)
Hash identifier: bR9wjMN34dToK2dkK7TSaQLvyw5ruDl2B707FzTZ0zs=
Subject key identifier: AF:CF:E9:BA:3A:A9:19:ED:05:BA:1F:6F:13:AA:BE:E5:7B:F6:60:B5
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 018C44176C402C729FFC2656C3F05C7A2A78
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/r8_pujqpGe0Fuh9vE6q-5Xv2YLU.roa
Signing time: Thu 07 Dec 2023 11:43:54 +0000
ROA not before: Thu 07 Dec 2023 11:43:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51569
IP address blocks: 83.139.202.0/23 maxlen: 24
83.139.212.0/24 maxlen: 24
83.139.213.0/24 maxlen: 24
83.139.217.0/24 maxlen: 24
83.139.218.0/24 maxlen: 24
83.139.219.0/24 maxlen: 24
83.139.214.0/24 maxlen: 24
83.139.215.0/24 maxlen: 24
83.139.216.0/24 maxlen: 24
83.139.224.0/20 maxlen: 24
83.139.220.0/23 maxlen: 23
83.139.220.0/24 maxlen: 24
83.139.221.0/24 maxlen: 24
83.139.244.0/24 maxlen: 24
83.139.245.0/24 maxlen: 24
83.139.242.0/24 maxlen: 24
83.139.243.0/24 maxlen: 24
85.31.160.0/21 maxlen: 24
45.132.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 11:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:17:6c:40:2c:72:9f:fc:26:56:c3:f0:5c:7a:2a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Dec 7 11:43:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afcfe9ba3aa919ed05ba1f6f13aabee57bf660b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:90:46:cd:27:6b:a8:01:36:cf:73:e3:4c:
88:77:ff:c7:e0:2c:f1:fa:d1:d2:1b:5e:14:35:d5:
10:e3:a9:f3:24:94:7e:1d:02:4e:42:af:3c:09:46:
3c:cc:77:5b:ee:a2:ae:1f:bf:e3:90:54:1a:86:59:
3e:1e:3d:8d:8a:13:de:52:3a:8b:63:53:ac:42:6b:
41:51:68:ee:d0:38:5e:c1:1a:55:9e:a2:50:9f:70:
c1:ab:d1:06:0d:92:8a:25:79:84:b4:ef:81:80:47:
47:48:8a:05:88:c0:e6:d7:58:4d:bc:2f:9c:c7:13:
ed:ff:5b:c2:30:b1:1a:12:2a:e4:c7:f3:b7:1f:3d:
08:73:0f:c7:ad:5d:96:ad:99:f7:a8:ef:27:01:76:
de:20:83:f0:cf:b0:86:4f:f1:56:85:21:74:68:1b:
a2:4c:79:cd:e1:f4:93:90:aa:ec:43:e3:78:1e:26:
d0:44:94:4c:13:8f:0b:6a:dd:ab:ed:dc:b4:1b:9c:
aa:8b:09:1c:a9:27:c3:2d:35:95:94:23:64:04:da:
cb:ae:54:78:01:19:64:28:4f:12:34:cf:87:b6:d0:
2b:b9:f9:f0:16:ca:fb:39:31:9b:16:28:4e:23:2b:
e5:ec:bf:59:1b:71:8a:57:58:ef:be:f9:f0:b5:1e:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:E9:BA:3A:A9:19:ED:05:BA:1F:6F:13:AA:BE:E5:7B:F6:60:B5
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/r8_pujqpGe0Fuh9vE6q-5Xv2YLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.208.0/22
83.139.202.0/23
83.139.212.0-83.139.221.255
83.139.224.0/20
83.139.242.0-83.139.245.255
85.31.160.0/21
Signature Algorithm: sha256WithRSAEncryption
34:22:93:8d:ee:fb:e2:42:bb:71:4d:ea:86:dc:61:7d:00:07:
a7:8a:8c:38:a9:85:cf:44:48:02:80:c5:3f:57:98:dc:87:4b:
f8:6d:9a:a6:85:0a:99:7b:4e:61:c7:0b:26:bc:1c:f2:ba:7a:
52:b8:b4:05:36:5f:81:fd:f2:28:17:10:75:89:65:3e:39:21:
b3:65:d3:3c:4b:da:91:9c:c8:65:c7:6c:cc:ae:d8:21:e0:d2:
fa:9c:5e:48:c4:b0:79:30:45:eb:cd:39:5b:1d:c9:b4:ae:2c:
a1:09:4d:74:f7:18:6a:b1:b9:de:3c:5f:37:1a:0e:e7:a4:73:
ca:c6:50:94:16:24:45:40:69:98:cf:01:83:1e:23:4b:e0:03:
52:b8:31:4e:bf:48:f4:b0:dd:3c:af:ae:f7:6f:8e:70:c4:e2:
e8:6a:6a:ca:c5:91:46:63:06:cd:72:3c:20:70:d6:22:21:09:
38:66:7c:2a:d9:7c:83:a4:81:07:3d:25:fc:21:0d:12:9a:bb:
af:b9:f4:2d:0d:72:07:ff:a8:b5:d0:2d:86:8c:e4:13:8e:2c:
d8:5f:cf:b0:3d:30:72:db:f1:ef:61:fb:71:da:29:b1:e7:f7:
cb:a0:80:8b:7e:de:ca:70:11:9a:ae:ae:c2:54:42:6b:a3:b0:
36:be:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:29 2024 by rpki-client on console-fra.rpki-client.org