Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Clh1kkITAgw_frFoibTXE_iD8kY.roa
File: Clh1kkITAgw_frFoibTXE_iD8kY.roa (raw, json)
Hash identifier: eLrgO+CNsS+L2YgDhMzSmouQE/wY8GnvDdSKiT3Zfm0=
Subject key identifier: 0A:58:75:92:42:13:02:0C:3F:7E:B1:68:89:B4:D7:13:F8:83:F2:46
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018A8E19CCEE645F5DFABA3728159CE3C0BC
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Clh1kkITAgw_frFoibTXE_iD8kY.roa
Signing time: Wed 13 Sep 2023 10:32:50 +0000
ROA not before: Wed 13 Sep 2023 10:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8683
IP address blocks: 149.20.108.0/22 maxlen: 22
213.248.198.0/23 maxlen: 23
213.248.196.0/23 maxlen: 23
149.20.96.0/22 maxlen: 22
149.20.104.0/22 maxlen: 22
149.20.100.0/22 maxlen: 22
213.248.232.0/21 maxlen: 21
213.248.230.0/23 maxlen: 23
213.248.228.0/23 maxlen: 23
2a01:61c:2f00::/40 maxlen: 40
2a01:61c:2100::/40 maxlen: 40
2a01:61c:2000::/40 maxlen: 40
2a01:61c:1f00::/40 maxlen: 40
2a01:61c:1d00::/40 maxlen: 40
2a01:61c:1900::/40 maxlen: 40
2a01:61c:1100::/40 maxlen: 40
2a01:61c:1000::/40 maxlen: 40
2a01:618:8000::/33 maxlen: 33
2a01:618:8000::/40 maxlen: 40
2a01:61c:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Sep 2023 12:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:19:cc:ee:64:5f:5d:fa:ba:37:28:15:9c:e3:c0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 13 10:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a5875924213020c3f7eb16889b4d713f883f246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:98:13:e7:30:42:18:e4:fb:11:e5:fa:30:93:
8a:5a:a5:f8:81:85:e1:25:ea:87:83:65:8e:d4:e0:
ff:10:80:b7:8e:eb:85:e5:c5:78:96:13:2e:b2:5d:
e3:e2:79:7d:3d:6d:8b:f1:24:67:d8:54:0a:46:a0:
5a:0e:ca:93:82:23:aa:35:85:14:3f:ff:94:54:22:
af:00:fc:22:4e:07:30:0d:db:72:40:b7:8b:e2:c2:
05:c1:90:a4:99:b1:e8:99:72:c1:01:b6:57:a0:67:
00:04:8b:7d:a3:0d:5f:a2:02:dc:f6:8b:fa:5a:9e:
aa:41:fd:f5:ac:28:70:23:32:09:1b:17:80:89:1c:
d2:e6:db:4b:fb:fb:49:2c:fd:d7:35:c0:31:cb:56:
a7:ea:3e:0c:2b:5d:bf:2a:f6:73:87:09:42:0b:a7:
b6:b4:1e:f8:15:1b:7f:30:ba:c8:73:fa:c9:ae:c7:
2d:d4:71:2d:b9:29:46:22:ff:23:a0:6a:a2:4d:b2:
6c:67:e5:8f:51:74:e9:ea:5d:81:4a:0f:5c:d9:68:
a0:10:ea:91:55:b0:16:7d:8f:03:99:28:66:2c:c6:
e0:67:ca:8a:35:f8:a3:79:ad:ef:06:da:4d:cb:8c:
d9:16:cf:51:76:94:ac:ba:06:f6:f0:11:42:46:b2:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:75:92:42:13:02:0C:3F:7E:B1:68:89:B4:D7:13:F8:83:F2:46
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Clh1kkITAgw_frFoibTXE_iD8kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.20.96.0/20
213.248.196.0/22
213.248.228.0-213.248.239.255
IPv6:
2a01:618:8000::/33
2a01:61c:1000::/39
2a01:61c:1900::/40
2a01:61c:1d00::/40
2a01:61c:1f00::-2a01:61c:21ff:ffff:ffff:ffff:ffff:ffff
2a01:61c:2f00::/40
2a01:61c:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
6b:72:69:c0:78:a3:c1:a0:e7:e4:9e:4c:1b:a2:f1:9c:5c:81:
87:9c:b6:28:4b:db:74:c8:8d:31:9a:f9:27:62:ea:af:45:fd:
a5:62:62:14:96:45:18:d2:10:b4:72:5d:7b:24:d6:45:09:de:
7f:f8:c2:d9:5f:59:ab:17:5a:fb:4f:1b:28:8e:5d:4e:19:b9:
10:50:65:2c:9a:9b:85:b8:c5:58:70:99:1e:1d:a3:a0:cb:45:
7d:f8:02:6b:c9:96:a9:f2:29:2d:39:1b:ca:6a:e9:d2:ed:21:
34:e5:36:5f:d6:3c:1a:9a:da:52:3c:15:c2:a8:7d:b3:25:78:
91:61:ea:f2:5e:ab:9d:f4:62:24:ea:b4:2c:ed:c7:8f:4b:26:
68:c7:44:1c:c9:36:5a:7f:f4:b1:ab:e3:2f:be:bc:e0:fb:2b:
a9:ef:37:c5:84:de:dc:53:37:ae:d8:40:c1:ea:4b:f0:ca:f2:
1e:4e:a9:56:f2:59:06:d0:9c:6a:66:ed:a4:12:ec:e5:81:e2:
c8:59:aa:e8:8a:aa:f5:4f:66:e8:75:d9:6c:02:ed:04:50:03:
08:c1:88:5d:c6:4c:85:03:9a:19:97:e0:92:4c:09:bb:7a:6f:
d7:73:5a:ac:7f:16:60:42:b4:88:5a:45:05:4e:08:c7:f8:e0:
f1:34:33:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org