Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/dD0tgei6ljuYQcmmiBClz2eENpQ.roa
File: dD0tgei6ljuYQcmmiBClz2eENpQ.roa (raw, json)
Hash identifier: ucLH+as2Fhhf6CE6fqNrI+KGLqs+RRdnbyBPvEL0sbU=
Subject key identifier: 74:3D:2D:81:E8:BA:96:3B:98:41:C9:A6:88:10:A5:CF:67:84:36:94
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0188BC6A9BB626020370E990C623AF447B36
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/dD0tgei6ljuYQcmmiBClz2eENpQ.roa
Signing time: Thu 15 Jun 2023 00:18:03 +0000
ROA not before: Thu 15 Jun 2023 00:18:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25400
IP address blocks: 84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
84.214.0.0/20 maxlen: 20
46.212.88.0/21 maxlen: 21
84.214.16.0/20 maxlen: 20
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
80.239.0.0/17 maxlen: 17
46.212.48.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
188.126.197.0/24 maxlen: 24
84.213.128.0/20 maxlen: 20
188.126.200.0/21 maxlen: 21
84.213.144.0/20 maxlen: 20
84.214.114.0/24 maxlen: 24
2a02:228::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 19 Sep 2023 10:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bc:6a:9b:b6:26:02:03:70:e9:90:c6:23:af:44:7b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jun 15 00:18:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=743d2d81e8ba963b9841c9a68810a5cf67843694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f0:e4:06:9f:c0:77:d1:8c:3a:7e:49:87:8f:
f9:2d:5e:a6:f3:b6:8d:06:b2:64:92:83:34:97:47:
0f:e5:a7:55:85:98:ad:f6:67:22:37:a4:fe:e8:57:
eb:a4:bc:73:ae:6b:ee:6d:af:0e:22:38:e7:04:a2:
48:35:cb:cb:5e:3f:5c:67:04:57:9a:de:cf:84:c1:
20:bf:77:eb:d4:51:76:86:89:e4:fc:d8:da:ae:9d:
3e:e6:ee:8f:d0:68:d8:86:d2:7b:ca:de:2b:d5:37:
1d:87:62:c3:ab:b3:2b:59:f8:0a:3e:5c:f3:a4:30:
0c:cb:7b:4f:b5:f1:99:08:8c:34:b5:38:03:3e:fa:
bc:9d:e3:a6:35:9d:98:7d:c3:75:b1:2b:34:65:38:
62:a2:e3:20:61:a3:7e:c2:67:f6:f9:28:94:a0:33:
4e:3d:db:e6:b3:e9:3e:f6:28:d5:a0:0b:00:5c:56:
28:d7:cb:34:84:1b:2c:0c:63:d7:5b:7a:dd:0a:ac:
9b:34:52:0c:b7:e5:a9:4f:65:54:b0:c0:79:cb:ba:
bc:36:26:79:f9:c5:97:e0:fa:89:f8:d4:12:a7:75:
ab:02:34:85:a1:3a:e2:dd:17:71:6a:7f:b7:85:59:
56:14:fc:54:a3:03:0b:4f:ea:66:cd:b9:20:8a:28:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3D:2D:81:E8:BA:96:3B:98:41:C9:A6:88:10:A5:CF:67:84:36:94
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/dD0tgei6ljuYQcmmiBClz2eENpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/19
46.212.48.0-46.212.95.255
80.239.0.0/17
84.210.128.0/20
84.213.128.0/19
84.214.0.0/19
84.214.114.0/24
84.214.192.0/23
188.126.197.0/24
188.126.200.0/21
IPv6:
2a02:228::/29
Signature Algorithm: sha256WithRSAEncryption
a7:5d:85:c0:76:f5:a9:83:21:1c:0b:16:5a:ac:96:e3:f5:5b:
df:1f:5e:6f:a5:b1:a2:96:fe:3f:a5:73:46:97:c3:8f:eb:2b:
91:94:1c:8c:32:ac:57:59:12:23:b1:48:e6:d4:bd:a9:1d:68:
e9:4d:29:da:f5:9f:12:b8:1c:81:bb:91:90:ef:5f:a5:1b:ab:
32:f5:55:1e:09:6f:bc:a0:5c:3b:1f:22:ee:3a:67:b6:3c:79:
61:b9:59:c0:ba:0f:fc:2d:18:ff:f2:ca:d7:49:16:d4:22:6f:
49:02:51:6f:22:12:58:46:29:4a:8f:c9:5a:81:bd:70:4b:71:
73:2e:c1:70:ad:e1:14:2b:71:6e:41:bb:4b:f7:16:10:0b:4b:
bb:10:ac:9c:f9:de:4c:79:3c:21:27:82:01:82:99:77:81:c1:
68:a4:73:0f:8b:a6:2f:41:89:e3:c0:4d:60:ca:6b:35:bb:97:
1d:ba:a6:cc:ff:ea:8c:eb:aa:9f:be:08:67:c9:37:57:36:58:
5f:76:e3:e0:c2:a4:bd:77:81:7a:60:1c:1e:3d:aa:82:38:33:
01:58:c5:3c:c9:20:2f:2e:e3:aa:35:57:d8:e6:df:35:65:9d:
02:34:3f:51:13:eb:f3:8a:43:d3:de:74:be:7c:4d:1e:32:4d:
8f:38:c4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org