Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/RvPLqonYYh9g7UVAdWIp_LHWTG0.roa
File: RvPLqonYYh9g7UVAdWIp_LHWTG0.roa (raw, json)
Hash identifier: 5gtNor3EKAYo7IknI/ORCQzWAcsppFY+JTA6OteSgYg=
Subject key identifier: 46:F3:CB:AA:89:D8:62:1F:60:ED:45:40:75:62:29:FC:B1:D6:4C:6D
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AD6BA8D42B7495AC7B6FDB969563FF803
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/RvPLqonYYh9g7UVAdWIp_LHWTG0.roa
Signing time: Wed 27 Sep 2023 13:01:04 +0000
ROA not before: Wed 27 Sep 2023 13:01:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137502
IP address blocks: 213.248.219.0/24 maxlen: 24
213.248.218.0/24 maxlen: 24
213.248.217.0/24 maxlen: 24
213.248.216.0/24 maxlen: 24
213.248.222.0/24 maxlen: 24
213.248.254.0/24 maxlen: 24
213.248.255.0/24 maxlen: 24
2a01:618:405::/48 maxlen: 48
2a01:618:400::/48 maxlen: 48
2a01:618:403::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
2a01:618:407::/48 maxlen: 48
2a01:618:402::/48 maxlen: 48
2a01:618:406::/48 maxlen: 48
2a01:618:401::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Sep 2023 14:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:ba:8d:42:b7:49:5a:c7:b6:fd:b9:69:56:3f:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 27 13:01:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46f3cbaa89d8621f60ed4540756229fcb1d64c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:b0:be:bb:60:18:a3:e3:06:04:5b:83:10:
63:27:41:f0:80:de:e0:c7:ec:3c:ba:c8:45:9d:86:
d3:b2:04:11:ca:4f:cd:aa:bf:2d:fc:7b:70:72:85:
37:80:ef:6d:59:b6:2d:cc:3c:2d:d2:ed:19:0c:bd:
42:fe:37:a1:d8:a0:67:a9:c1:0e:57:43:2c:31:da:
1e:63:5d:76:9c:d8:54:4c:02:16:a5:d3:26:0d:71:
96:4f:a3:4d:f0:c9:e9:5a:98:b6:6a:84:7e:c0:5c:
98:32:7f:0d:7f:e9:24:cc:b0:d5:9a:e1:00:00:7b:
a7:24:44:6e:54:40:13:23:89:92:25:0e:f4:82:8e:
83:da:ad:e2:e3:e8:17:71:9a:45:a0:95:39:05:e6:
9c:26:9d:ee:6b:67:e8:5a:5c:82:0e:80:69:a2:7a:
88:25:5d:14:e5:f2:e8:03:fb:0d:d9:e7:0c:c4:ed:
27:4d:c3:d9:ed:67:19:61:9f:35:a8:4b:67:46:cf:
59:69:fe:36:11:e9:db:1e:1f:4a:a9:7c:e3:86:d4:
66:99:29:a2:8b:3f:76:74:9f:71:29:00:90:41:33:
40:60:09:f3:60:0a:23:b5:8e:52:b4:41:0c:86:8f:
71:08:7c:08:a7:b7:4a:1a:f0:e5:d1:9c:bf:4e:40:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F3:CB:AA:89:D8:62:1F:60:ED:45:40:75:62:29:FC:B1:D6:4C:6D
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/RvPLqonYYh9g7UVAdWIp_LHWTG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.216.0/22
213.248.222.0/24
213.248.254.0/23
IPv6:
2a01:618:400::/45
Signature Algorithm: sha256WithRSAEncryption
76:ac:f0:5d:67:a6:21:45:74:5f:31:42:65:c8:bd:c8:55:fd:
59:ce:42:18:ad:f7:42:4b:f4:bb:d5:87:4a:2c:55:10:c2:3e:
c1:0d:c7:cd:2b:d3:1b:fb:7a:a4:13:10:ec:ca:05:65:eb:8a:
ad:2e:d7:9c:e1:2c:e8:8f:7d:84:7d:46:83:6d:20:3c:b5:f7:
bc:35:f4:9c:42:a1:64:ff:ad:40:ad:68:e7:08:c1:80:c1:ca:
8c:61:1e:08:ef:76:7e:f7:be:ea:dc:3f:4d:31:22:0d:09:b5:
3e:ef:f8:9d:c4:be:f7:db:2b:89:26:8a:05:7e:0d:59:f9:16:
39:b1:4b:52:6b:ec:77:e0:dd:33:74:07:35:2b:75:09:b6:6f:
f2:ff:55:58:ad:ec:6a:57:05:28:37:af:2e:b5:48:76:75:ca:
3a:7d:d7:02:6e:e6:15:80:8b:d9:ee:15:72:4b:42:12:0a:7a:
58:c4:6a:89:6f:fa:ab:49:99:6c:48:62:9f:19:79:47:3b:e9:
2f:e5:54:34:47:44:88:2a:fc:97:80:31:cb:c0:cf:9d:d0:2c:
1e:d2:b6:d1:6d:2f:39:90:3d:19:00:d1:69:9a:78:4d:44:34:
55:f8:e8:32:2a:24:c7:10:88:79:4d:68:f5:a0:7b:8c:e3:7b:
3c:09:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org