Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/80VNHqQ3xPPNlNeOEEpfCeAHwfo.roa
File: 80VNHqQ3xPPNlNeOEEpfCeAHwfo.roa (raw, json)
Hash identifier: It4dtipaEHySOaYtfhBHguhu7aN4ddkWvXH00mQx/Gg=
Subject key identifier: F3:45:4D:1E:A4:37:C4:F3:CD:94:D7:8E:10:4A:5F:09:E0:07:C1:FA
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018A8D950C748BC8819EB7CBB44E27624855
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/80VNHqQ3xPPNlNeOEEpfCeAHwfo.roa
Signing time: Wed 13 Sep 2023 08:07:50 +0000
ROA not before: Wed 13 Sep 2023 08:07:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8683
IP address blocks: 149.20.108.0/22 maxlen: 22
213.248.198.0/23 maxlen: 23
213.248.196.0/23 maxlen: 23
149.20.96.0/22 maxlen: 22
149.20.100.0/22 maxlen: 22
149.20.104.0/22 maxlen: 22
2a01:61c:1000::/40 maxlen: 40
2a01:61c:1100::/40 maxlen: 40
2a01:61c:1900::/40 maxlen: 40
2a01:61c:1d00::/40 maxlen: 40
2a01:61c:1f00::/40 maxlen: 40
2a01:61c:2000::/40 maxlen: 40
2a01:61c:2100::/40 maxlen: 40
2a01:61c:2f00::/40 maxlen: 40
2a01:618:8000::/40 maxlen: 40
2a01:61c:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Sep 2023 08:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:95:0c:74:8b:c8:81:9e:b7:cb:b4:4e:27:62:48:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 13 08:07:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3454d1ea437c4f3cd94d78e104a5f09e007c1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:7e:38:1c:2f:b3:f6:d2:06:83:ee:f9:17:
79:c6:91:2e:f2:54:2c:80:c7:3f:57:86:7c:f5:2e:
e1:9e:72:f9:df:95:31:6f:48:37:67:1b:45:96:f4:
9e:9f:d1:b9:d9:61:d2:fb:94:ed:c8:76:9a:ac:01:
fb:65:2f:59:cc:87:79:67:a7:b5:39:1f:1d:98:1f:
96:f7:d1:08:bf:9a:01:23:e3:c3:cf:95:1c:d2:78:
3f:31:21:8a:5c:f4:60:67:1e:b3:f0:e8:b9:8d:eb:
43:7d:6d:03:69:25:e5:1f:da:bd:54:fa:a2:96:11:
e2:6f:6b:e5:19:b4:03:1a:e3:59:83:e6:ba:3e:a3:
62:51:65:1f:ac:4e:aa:73:11:84:2d:68:b7:83:d2:
f1:08:d1:b8:e6:3d:7b:2f:50:42:f2:4d:14:38:97:
61:af:e5:0b:70:ac:fe:2a:fa:d7:1f:97:2e:79:eb:
42:2a:03:fc:d3:80:88:52:ba:80:5b:07:7c:c6:e5:
4d:29:44:07:33:f2:7b:ad:77:fa:22:0d:5d:ae:e9:
f8:8f:28:2a:b2:f6:d1:3c:98:93:f0:a2:44:17:49:
54:ae:89:e6:60:21:83:08:16:5a:b4:67:81:ee:d4:
6a:3d:62:09:36:d1:65:35:c2:01:62:4b:1a:6c:39:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:45:4D:1E:A4:37:C4:F3:CD:94:D7:8E:10:4A:5F:09:E0:07:C1:FA
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/80VNHqQ3xPPNlNeOEEpfCeAHwfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.20.96.0/20
213.248.196.0/22
IPv6:
2a01:618:8000::/40
2a01:61c:1000::/39
2a01:61c:1900::/40
2a01:61c:1d00::/40
2a01:61c:1f00::-2a01:61c:21ff:ffff:ffff:ffff:ffff:ffff
2a01:61c:2f00::/40
2a01:61c:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
68:90:0e:b6:47:59:ad:43:2e:93:68:cf:8e:b6:f8:98:9e:04:
31:b6:5b:0d:4b:7e:27:7a:b6:92:f5:7d:2d:21:4f:bb:e0:34:
96:ae:ea:d2:6d:fc:81:da:43:66:5a:71:b5:0b:ce:22:d2:6a:
8a:6f:cb:57:dd:df:26:85:79:be:93:23:95:f6:68:27:0b:e1:
f7:2f:6b:f7:e9:21:9f:48:ea:0c:ff:1c:bb:85:94:ba:ba:49:
6f:89:c5:03:d5:40:cf:48:08:a8:23:50:54:2e:ed:c9:1e:7f:
98:ec:0b:ac:5d:1e:96:3f:d6:b5:3b:9a:b1:2c:11:f4:83:54:
80:0e:81:26:99:48:3b:48:50:11:01:a7:cb:39:79:6a:7c:2a:
f0:2c:db:da:12:bd:17:d1:19:92:a7:9b:8d:a4:26:c8:a7:56:
f5:7c:56:d0:32:75:3e:d5:39:4b:9f:db:aa:84:41:52:f1:7e:
dd:f2:6c:36:de:3b:c2:ee:3e:33:9e:87:95:b7:bd:80:22:1a:
36:b9:5d:c0:c4:7e:dc:24:5e:5b:08:09:d1:4c:ed:fb:24:77:
03:1d:aa:79:77:24:42:51:97:b2:1d:f1:2c:60:03:12:b9:38:
38:eb:2a:c6:66:58:a5:06:2c:30:e5:2e:44:88:92:cb:79:b9:
34:ee:69:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:02 2024 by rpki-client on console-ams.rpki-client.org