Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/neY--1FVc7REjXUiM-UWX36qOw8.roa
File: neY--1FVc7REjXUiM-UWX36qOw8.roa (raw, json)
Hash identifier: wYSPSN3meYZiBSyw3ZP65KB4xOdfKsemMogySbwa6Bs=
Subject key identifier: 9D:E6:3E:FB:51:55:73:B4:44:8D:75:22:33:E5:16:5F:7E:AA:3B:0F
Certificate issuer: /CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
Certificate serial: 01856ED4A6393FAF7533F363814C3A6925A9
Authority key identifier: 39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/neY--1FVc7REjXUiM-UWX36qOw8.roa
Signing time: Sun 01 Jan 2023 19:35:07 +0000
ROA not before: Sun 01 Jan 2023 19:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15626
IP address blocks: 217.12.219.0/24 maxlen: 24
217.12.216.0/23 maxlen: 23
217.12.220.0/22 maxlen: 22
217.12.223.0/24 maxlen: 24
217.12.221.0/24 maxlen: 24
217.12.192.0/21 maxlen: 21
217.12.199.0/24 maxlen: 24
217.12.204.0/23 maxlen: 23
82.118.16.0/22 maxlen: 22
82.118.17.0/24 maxlen: 24
217.12.212.0/22 maxlen: 22
5.34.182.0/23 maxlen: 24
217.12.210.0/24 maxlen: 24
217.12.210.0/23 maxlen: 23
46.28.64.0/21 maxlen: 24
2a02:27a8::/32 maxlen: 32
2a02:27a8:0:a::/64 maxlen: 64
2a02:27ad::/32 maxlen: 32
2a02:27a8:0:2::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:a6:39:3f:af:75:33:f3:63:81:4c:3a:69:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
Validity
Not Before: Jan 1 19:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9de63efb515573b4448d752233e5165f7eaa3b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:69:58:a9:50:3e:66:6f:1f:39:1b:c2:2b:
23:08:ca:0b:0d:30:8c:f9:91:e6:26:99:99:a0:7b:
33:f9:47:41:ea:52:12:aa:4e:04:72:3f:0e:6f:85:
a1:2f:7f:e8:71:1e:cb:00:53:c7:9d:e0:09:fc:b3:
0b:5e:8a:10:11:25:86:59:25:6a:c5:1b:39:68:fb:
7d:3f:4c:31:2c:1a:0f:23:6f:10:a9:4f:4c:9f:4e:
a9:04:98:27:a4:89:fb:e3:cb:7e:f8:2e:bc:d9:86:
4a:5e:74:09:c5:90:bd:1e:9b:8e:bd:d0:95:d8:8f:
b0:5c:c9:5c:9a:69:f9:42:60:ce:31:d3:d4:c5:9a:
5c:eb:48:fe:c5:15:0e:ff:bc:2a:3b:e7:05:4f:e7:
b3:6f:01:8e:a6:ab:65:16:78:aa:5f:8b:09:ba:86:
bd:2a:fd:1b:a5:f2:a3:38:97:c2:4b:a6:8b:b7:04:
16:e0:e0:67:b5:57:5f:dd:d0:30:90:f5:87:02:30:
08:ba:f2:ee:19:3b:99:d2:ac:87:c2:85:22:04:8c:
c1:35:78:27:3e:de:f2:bc:c2:e0:65:ed:84:34:b1:
24:ce:3d:5c:d0:f6:a3:1d:f6:4f:42:0f:2d:9a:9c:
20:79:c8:13:b5:6e:73:38:ae:b1:62:92:d9:b3:ed:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:3E:FB:51:55:73:B4:44:8D:75:22:33:E5:16:5F:7E:AA:3B:0F
X509v3 Authority Key Identifier:
keyid:39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/neY--1FVc7REjXUiM-UWX36qOw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.182.0/23
46.28.64.0/21
82.118.16.0/22
217.12.192.0/21
217.12.204.0/23
217.12.210.0-217.12.217.255
217.12.219.0-217.12.223.255
IPv6:
2a02:27a8::/32
2a02:27ad::/32
Signature Algorithm: sha256WithRSAEncryption
6f:9c:c1:7e:bd:6f:33:d8:8c:52:8a:92:a6:02:49:eb:cf:93:
53:89:9f:6f:91:5e:5e:be:ed:ef:40:bc:af:e8:dd:b2:ba:49:
6b:b5:cd:65:9b:a1:f0:89:04:1d:de:25:c6:50:4d:d9:c6:7a:
d3:2d:16:04:3d:57:1b:25:da:60:9d:aa:34:ef:12:1a:32:fb:
10:8c:b1:d4:8c:32:5a:7b:5e:b7:80:9c:c9:c0:8c:9f:b9:06:
a2:0c:a0:fe:c8:fa:29:91:6b:73:32:90:69:ec:dc:57:c9:9f:
fa:43:0a:3b:87:07:02:f2:2d:2e:38:31:39:2a:40:66:53:b1:
d9:9c:a8:9b:00:77:e2:52:b4:2d:b4:67:88:0e:0b:32:45:95:
aa:6f:6a:ca:f7:7c:87:86:61:14:85:8d:86:3e:7c:75:e3:c1:
c1:cf:bb:0f:b6:58:69:2b:e6:71:c7:bb:fa:51:6d:54:3e:af:
c7:df:64:e7:5f:40:55:24:cf:05:06:fd:66:61:ce:84:27:c6:
e5:50:e0:2c:04:ba:0a:0f:c0:dd:52:e4:47:b9:84:53:9f:66:
db:0c:bf:87:b7:ef:83:69:f3:1a:8c:12:f5:6c:d3:32:ce:96:
b5:a9:9a:4a:b8:4a:95:60:38:8a:46:eb:6c:a0:f7:75:2c:9b:
ef:62:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:46 2024 by rpki-client on console-ams.rpki-client.org