Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/phkfEylG25y36_tNPl7nXs2580k.roa
File: phkfEylG25y36_tNPl7nXs2580k.roa (raw, json)
Hash identifier: F6BjbF2ESOAQCTQorXrQzECGbCunbMBh3XYUXmbhnLo=
Subject key identifier: A6:19:1F:13:29:46:DB:9C:B7:EB:FB:4D:3E:5E:E7:5E:CD:B9:F3:49
Certificate issuer: /CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
Certificate serial: 018EC44EF4DB1AFC9C67EE50388D05811773
Authority key identifier: 39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/phkfEylG25y36_tNPl7nXs2580k.roa
Signing time: Tue 09 Apr 2024 19:21:32 +0000
ROA not before: Tue 09 Apr 2024 19:21:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15626
IP address blocks: 5.34.182.0/23 maxlen: 24
46.28.64.0/21 maxlen: 24
82.118.16.0/22 maxlen: 22
82.118.17.0/24 maxlen: 24
82.118.18.0/24 maxlen: 24
217.12.192.0/21 maxlen: 21
217.12.199.0/24 maxlen: 24
217.12.204.0/23 maxlen: 23
217.12.210.0/23 maxlen: 23
217.12.210.0/24 maxlen: 24
217.12.212.0/22 maxlen: 22
217.12.216.0/23 maxlen: 23
217.12.219.0/24 maxlen: 24
217.12.220.0/22 maxlen: 22
217.12.221.0/24 maxlen: 24
217.12.223.0/24 maxlen: 24
2a02:27a8::/32 maxlen: 32
2a02:27a8:0:2::/64 maxlen: 64
2a02:27a8:0:a::/64 maxlen: 64
2a02:27a8:feed::/48 maxlen: 48
2a02:27ad::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:4e:f4:db:1a:fc:9c:67:ee:50:38:8d:05:81:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
Validity
Not Before: Apr 9 19:21:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6191f132946db9cb7ebfb4d3e5ee75ecdb9f349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:bc:2c:9c:cb:cb:9e:b9:88:a4:33:b9:1a:
80:3a:97:98:4e:00:0c:ce:15:37:62:58:fc:6a:be:
f2:bb:7d:11:b9:fd:1f:3e:57:56:15:3f:2c:c0:98:
69:e6:b9:22:e7:f1:ee:f1:ab:e0:53:ff:21:19:ac:
36:d1:8d:14:b1:c4:8e:34:ed:99:0c:ea:3c:af:09:
44:ce:b9:8a:99:25:1e:d9:2f:0e:20:01:71:93:b4:
31:85:4b:38:c0:66:87:ae:5a:e6:dd:28:dd:60:d1:
02:e3:29:83:ab:9f:95:a8:c8:11:4c:cd:cd:76:89:
a2:79:c4:6c:af:ca:ec:74:68:23:b4:76:9f:33:56:
40:a3:28:19:d8:b1:0f:ec:ae:41:24:8b:40:96:ab:
84:89:af:e8:59:ae:c3:70:b8:7f:10:21:72:c1:16:
b0:63:2c:45:8c:a4:96:74:d2:ee:7a:5d:e5:73:d9:
0b:6b:e1:f3:9a:de:4a:ea:51:79:ec:77:07:da:19:
99:0b:6b:c6:b2:cc:7a:97:b8:1b:9e:c0:f2:da:ea:
f8:3c:4a:31:04:52:7c:a2:bf:2f:17:19:ce:e7:ea:
14:3f:7b:6d:b4:d2:31:f5:33:3a:65:07:f9:0c:7b:
ed:63:bf:59:73:2b:fb:36:22:88:81:52:cb:8f:35:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:1F:13:29:46:DB:9C:B7:EB:FB:4D:3E:5E:E7:5E:CD:B9:F3:49
X509v3 Authority Key Identifier:
keyid:39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/phkfEylG25y36_tNPl7nXs2580k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.182.0/23
46.28.64.0/21
82.118.16.0/22
217.12.192.0/21
217.12.204.0/23
217.12.210.0-217.12.217.255
217.12.219.0-217.12.223.255
IPv6:
2a02:27a8::/32
2a02:27ad::/32
Signature Algorithm: sha256WithRSAEncryption
2a:5e:68:ad:15:a7:1b:9e:72:72:8b:41:b2:8b:d6:4f:4c:b8:
fb:c5:c4:54:eb:86:6e:ec:c4:2f:ea:94:b8:82:fe:aa:ae:29:
17:99:2a:5d:0c:a1:39:d5:e1:cd:9e:7f:5d:2a:25:89:f9:8e:
80:c4:2a:43:91:82:bd:0f:44:8d:8f:3e:59:6c:3e:83:32:bf:
3a:1f:b1:7b:f9:1d:f7:32:bb:01:a0:42:21:e9:67:e8:dd:cc:
e2:3e:3c:cf:5a:48:b0:05:64:9b:80:64:5e:ee:55:52:d6:05:
f9:d3:f1:e5:30:71:72:d2:46:ea:2b:b5:e8:82:a5:c9:61:d2:
11:c6:ac:18:0b:f9:4c:1b:90:a1:77:65:7b:76:f2:bc:2d:a7:
67:f3:a4:73:2d:ad:c6:e7:a2:2c:75:ce:39:c2:d7:8f:54:f6:
ce:2b:19:e1:03:04:53:38:1d:4d:c6:f0:74:cc:23:8d:85:f2:
77:f1:c6:c1:84:7f:a3:ba:e7:5a:2a:e1:58:81:5e:03:84:c0:
05:03:eb:a1:ca:0f:3d:5d:23:d7:68:56:1b:b7:6e:5a:ec:60:
33:88:2c:37:ef:0c:27:50:53:88:37:9c:32:23:92:c4:04:a6:
51:e5:99:3d:cd:9b:09:1b:5c:b1:1e:c9:93:02:95:1a:c7:54:
a8:32:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:22 2024 by rpki-client on console-fra.rpki-client.org