Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/szFT0GmL2T45Iko0gCzrvlc-4QQ.roa
File: szFT0GmL2T45Iko0gCzrvlc-4QQ.roa (raw, json)
Hash identifier: g+qqXg1FaRs2XpUB49uN81tf5ooQTuwIeVxy2rO+cog=
Subject key identifier: B3:31:53:D0:69:8B:D9:3E:39:22:4A:34:80:2C:EB:BE:57:3E:E1:04
Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial: 018571B0E13B9605D39F380AD9A3B398E0F5
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/szFT0GmL2T45Iko0gCzrvlc-4QQ.roa
Signing time: Mon 02 Jan 2023 08:54:55 +0000
ROA not before: Mon 02 Jan 2023 08:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15935
IP address blocks: 217.66.188.0/23 maxlen: 23
217.66.191.0/24 maxlen: 24
217.66.190.0/24 maxlen: 24
213.195.192.0/18 maxlen: 18
217.66.160.0/19 maxlen: 19
217.66.160.0/24 maxlen: 24
217.66.166.0/24 maxlen: 24
217.66.179.0/24 maxlen: 24
217.66.178.0/24 maxlen: 24
81.30.246.0/23 maxlen: 23
95.173.68.0/23 maxlen: 23
109.238.32.0/20 maxlen: 20
93.185.48.0/20 maxlen: 20
81.30.224.0/19 maxlen: 19
81.30.229.0/24 maxlen: 24
95.173.64.0/23 maxlen: 23
95.173.64.0/19 maxlen: 19
2a02:570::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:e1:3b:96:05:d3:9f:38:0a:d9:a3:b3:98:e0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
Validity
Not Before: Jan 2 08:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b33153d0698bd93e39224a34802cebbe573ee104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:74:d1:45:47:48:ad:3a:ee:63:0f:13:93:
ff:e3:1e:0f:07:17:47:5f:00:bd:63:d3:c9:1a:9c:
e2:a1:f7:cf:c1:d0:98:93:41:01:b3:9e:f6:4c:b1:
ae:b8:64:65:ba:76:cc:3e:0c:7d:80:b6:29:3e:fa:
b4:10:73:22:4d:87:fc:15:95:24:a5:bf:00:93:3d:
a0:16:c6:65:8f:d8:fb:32:aa:40:0b:62:37:6b:ac:
e3:70:a7:a3:a5:e7:59:3e:93:6f:8d:36:17:34:10:
a9:ec:cd:89:b5:17:5f:ab:d6:74:b8:fe:15:64:79:
50:12:9c:59:fd:d4:15:f8:3d:ab:31:d6:b0:89:35:
57:e1:15:0c:1a:db:1b:ca:62:73:59:a9:be:f3:99:
02:30:5d:23:24:59:eb:53:05:65:5a:aa:d2:82:90:
94:42:6a:53:40:ce:b5:9a:64:14:89:12:9c:fc:6e:
75:10:9b:07:a8:d2:91:cd:bd:dd:f0:8e:43:1c:f6:
56:09:01:95:0f:b0:66:8d:da:3b:01:a8:3d:38:2d:
88:34:e3:40:e2:c5:62:fe:db:18:0c:61:55:f4:5d:
03:d5:f4:1f:ed:96:b5:9b:38:ea:44:87:ea:b1:f8:
68:ed:32:cf:22:b8:34:f9:cc:46:7b:6a:cd:f5:9c:
2a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:53:D0:69:8B:D9:3E:39:22:4A:34:80:2C:EB:BE:57:3E:E1:04
X509v3 Authority Key Identifier:
keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/szFT0GmL2T45Iko0gCzrvlc-4QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.224.0/19
93.185.48.0/20
95.173.64.0/19
109.238.32.0/20
213.195.192.0/18
217.66.160.0/19
IPv6:
2a02:570::/32
Signature Algorithm: sha256WithRSAEncryption
1d:3e:6c:77:ba:19:e6:4d:53:da:00:14:99:e5:f5:7a:39:69:
ba:f4:50:30:cd:d0:45:07:0a:84:44:14:99:a6:80:6e:25:c5:
ed:7e:2f:8a:0d:80:60:f3:12:4f:69:d6:15:5a:12:64:8a:ca:
1f:4a:d2:5e:4d:b5:d7:c3:71:68:c4:bc:1a:08:b5:d6:ac:87:
36:5c:2b:c7:7d:e4:c2:e1:ee:c8:3a:ab:6d:20:c1:85:b1:f4:
8c:1c:dd:eb:c7:3f:0d:54:31:35:10:49:65:c1:c6:3d:a0:cd:
39:e4:b9:00:63:a3:47:fb:da:c5:07:e1:cd:8f:41:31:4b:81:
55:94:74:5b:ad:b2:21:cb:1a:f7:10:e1:95:c9:de:62:50:4e:
4b:79:37:3e:6e:2b:da:3b:48:cb:8a:da:f5:f8:92:61:51:31:
8a:fe:49:0a:cf:a1:44:5c:92:62:cb:47:dd:9f:3d:7e:e8:3a:
a6:dc:c8:2a:a1:84:a2:17:45:c7:0f:8f:89:83:19:13:7d:06:
09:47:c0:99:75:b4:15:12:15:8c:a5:f3:05:24:95:15:a9:fc:
03:fb:a8:62:57:20:89:ba:be:cd:54:6b:92:8a:db:a8:b3:cc:
10:5f:4e:f5:9d:4a:bb:c6:df:e1:e9:4e:2e:3f:85:bb:0b:6b:
7e:ae:2b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:50 2024 by rpki-client on console-fra.rpki-client.org