Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/S02l4TnNUmUcgOwRu5eP3xV83R0.roa
File: S02l4TnNUmUcgOwRu5eP3xV83R0.roa (raw, json)
Hash identifier: tkE2rJZKZ9voLRAIPR77Nvv2Zfzn5LPlhNQ6LlCJXC8=
Subject key identifier: 4B:4D:A5:E1:39:CD:52:65:1C:80:EC:11:BB:97:8F:DF:15:7C:DD:1D
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 01856F8B78547EDAC66A9E5C520666F4A3C2
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/S02l4TnNUmUcgOwRu5eP3xV83R0.roa
Signing time: Sun 01 Jan 2023 22:54:49 +0000
ROA not before: Sun 01 Jan 2023 22:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12297
IP address blocks: 87.241.128.0/18 maxlen: 24
178.160.192.0/18 maxlen: 18
212.73.64.0/19 maxlen: 24
178.160.245.0/24 maxlen: 24
178.160.252.0/22 maxlen: 22
178.160.248.0/22 maxlen: 22
178.160.251.0/24 maxlen: 24
46.70.0.0/15 maxlen: 24
2a00:f38::/29 maxlen: 29
2a00:f38:0:111c::/64 maxlen: 64
2a00:f38:0:111d::/64 maxlen: 64
2a00:f38::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 19 Jan 2023 12:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:78:54:7e:da:c6:6a:9e:5c:52:06:66:f4:a3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jan 1 22:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b4da5e139cd52651c80ec11bb978fdf157cdd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:ac:4b:1a:18:68:81:03:fd:cb:d9:17:c7:
eb:50:dd:7d:b4:61:66:82:62:4a:ae:7b:e0:a9:63:
fe:43:d5:de:2d:a8:1c:a8:57:24:48:4e:6f:0b:9c:
b6:39:1f:b6:85:68:98:81:39:87:48:cb:9d:f4:b1:
99:cf:ee:88:f2:5f:b5:32:9a:ef:cd:b5:22:37:73:
ed:f0:af:49:58:8a:da:cf:49:d5:2b:9d:e2:93:ff:
f2:af:01:7f:d1:d1:e1:cf:31:52:af:65:68:7c:e3:
fa:68:b9:2c:31:43:ec:7d:b1:70:2c:43:ba:a9:52:
79:d0:92:8e:d4:cb:2a:73:53:70:9d:fb:18:a9:f3:
79:b8:b0:f2:0e:08:69:4f:14:e5:bf:07:6b:33:95:
72:d0:f5:aa:aa:4b:3f:b6:a7:a9:d9:3b:3b:f4:bf:
25:aa:13:61:39:92:d3:cc:ea:e0:4a:75:ba:5a:54:
35:36:d2:62:0d:00:c0:ae:97:7a:29:db:c0:86:53:
97:27:89:b8:f1:36:18:e7:2d:c6:42:10:46:df:cb:
6c:4c:ed:c8:03:73:e9:ac:56:86:ca:48:fe:5d:7f:
53:8f:8a:9b:f6:04:e6:0c:c0:7a:e3:5b:52:22:b9:
d5:46:92:c3:58:29:de:a1:78:86:4a:7e:25:e3:5c:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:A5:E1:39:CD:52:65:1C:80:EC:11:BB:97:8F:DF:15:7C:DD:1D
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/S02l4TnNUmUcgOwRu5eP3xV83R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.0.0/15
87.241.128.0/18
178.160.192.0/18
212.73.64.0/19
IPv6:
2a00:f38::/29
Signature Algorithm: sha256WithRSAEncryption
46:e2:f2:aa:45:08:6b:f0:6c:e1:aa:75:68:9e:9f:d0:a1:11:
d5:b2:0d:32:f0:b9:5b:32:a1:f9:a7:1f:63:f4:0a:d4:b1:fd:
99:47:d8:85:2d:09:da:9a:63:7e:7a:37:b1:1f:b5:14:93:87:
a4:ef:9d:1f:9e:8a:dc:64:0e:3a:30:e4:87:08:07:6d:68:0e:
80:c9:b8:b9:58:96:23:ee:10:29:54:bd:43:3b:9f:57:62:13:
59:53:88:2f:a5:b4:34:5f:26:7f:dc:00:0e:dc:ab:c3:cf:af:
03:e0:eb:f5:21:1c:7c:0d:77:f4:76:0b:41:e4:9b:44:de:51:
62:5d:ac:cc:c2:73:45:18:a8:40:35:94:b1:57:13:8e:39:69:
40:04:2c:a6:12:f9:b1:e5:4d:76:8a:01:79:aa:fa:e2:12:fe:
7d:66:7e:e4:ec:99:42:d8:bd:88:b9:f4:f2:ad:5f:8f:c5:c7:
a0:9d:e0:0c:af:34:2f:97:6e:f5:3f:db:42:80:d6:d9:c1:4e:
cb:8d:64:90:96:11:87:69:b3:7b:26:28:e2:4b:f9:9b:e3:af:
a4:26:ec:a8:c3:e6:cb:fe:97:4e:8a:73:54:43:cb:80:8d:27:
94:ac:bc:23:0f:ca:9b:2f:c7:77:9a:d9:23:ab:f4:d9:b2:e9:
fc:ba:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:27 2024 by rpki-client on console-fra.rpki-client.org