Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/iwhQg-8rjGmF2bEi39bicTn_kP4.roa
File: iwhQg-8rjGmF2bEi39bicTn_kP4.roa (raw, json)
Hash identifier: NGRCh+z5wPea0jnpfbupQvaFbaemBg+3AxY/3fEtYPM=
Subject key identifier: 8B:08:50:83:EF:2B:8C:69:85:D9:B1:22:DF:D6:E2:71:39:FF:90:FE
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018A8DB42D59500736B8343D7F8C13F8D13C
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/iwhQg-8rjGmF2bEi39bicTn_kP4.roa
Signing time: Wed 13 Sep 2023 08:41:50 +0000
ROA not before: Wed 13 Sep 2023 08:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8683
IP address blocks: 149.20.108.0/22 maxlen: 22
213.248.198.0/23 maxlen: 23
213.248.196.0/23 maxlen: 23
149.20.96.0/22 maxlen: 22
149.20.104.0/22 maxlen: 22
149.20.100.0/22 maxlen: 22
2a01:61c:1000::/40 maxlen: 40
2a01:61c:1100::/40 maxlen: 40
2a01:61c:1900::/40 maxlen: 40
2a01:61c:1d00::/40 maxlen: 40
2a01:61c:1f00::/40 maxlen: 40
2a01:61c:2000::/40 maxlen: 40
2a01:61c:2100::/40 maxlen: 40
2a01:61c:2f00::/40 maxlen: 40
2a01:618:8000::/33 maxlen: 33
2a01:618:8000::/40 maxlen: 40
2a01:61c:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Sep 2023 09:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:b4:2d:59:50:07:36:b8:34:3d:7f:8c:13:f8:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 13 08:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b085083ef2b8c6985d9b122dfd6e27139ff90fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d2:03:fb:fa:f7:74:cd:0c:75:aa:c3:94:e6:
59:ba:82:6a:80:ef:5d:00:a2:6d:15:3f:5e:e0:9f:
4a:9e:9f:a5:07:28:55:55:2a:70:d9:5b:d2:eb:1e:
eb:26:bf:f5:e5:f3:a7:71:b3:97:09:d6:94:4b:a1:
cb:fd:5c:7d:37:e2:d1:97:df:1c:ca:cd:f2:21:f7:
78:eb:e9:d1:54:94:00:23:9f:a0:b9:d0:d4:32:6f:
90:a4:0c:9a:40:47:70:b3:d6:17:46:eb:7e:85:6f:
89:a2:d5:57:b5:f2:46:3b:a8:6e:de:a3:73:ad:0f:
c8:35:1e:99:c1:9f:e2:67:9a:08:98:61:13:ff:22:
f8:16:46:e5:c7:e9:5a:f6:3f:c0:16:da:9e:38:4f:
0c:20:4d:73:a7:c4:b6:d8:6a:cb:b0:5b:cd:32:15:
f5:56:e0:42:ee:7c:f0:55:b1:e7:77:4a:fe:6f:89:
4e:fb:f2:5d:db:aa:77:07:45:f6:3a:0e:ad:95:2b:
41:57:b9:5b:17:1c:3b:a1:86:ae:a6:0a:f2:a0:88:
f9:67:a6:7a:79:c2:2e:30:e5:c1:b1:4f:16:db:71:
0b:55:f8:fb:27:db:79:3f:56:df:6f:29:07:e7:c6:
60:a8:db:34:48:12:9f:9a:1b:93:85:7c:da:e7:c9:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:50:83:EF:2B:8C:69:85:D9:B1:22:DF:D6:E2:71:39:FF:90:FE
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/iwhQg-8rjGmF2bEi39bicTn_kP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.20.96.0/20
213.248.196.0/22
IPv6:
2a01:618:8000::/33
2a01:61c:1000::/39
2a01:61c:1900::/40
2a01:61c:1d00::/40
2a01:61c:1f00::-2a01:61c:21ff:ffff:ffff:ffff:ffff:ffff
2a01:61c:2f00::/40
2a01:61c:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
90:ed:40:fb:bb:41:f0:0e:73:d6:c7:c1:a1:4e:09:49:84:88:
b0:d7:8d:e3:ba:4a:0e:0e:73:59:d8:4e:4c:cd:1e:64:bd:35:
0d:bb:be:84:c0:a4:1f:aa:09:a6:48:3d:4d:a5:ba:ad:7b:3b:
88:36:bd:e9:d0:d6:2f:35:91:ab:52:cc:a8:17:7b:dc:b1:5b:
d2:4d:05:00:14:be:74:ec:f2:b4:6c:57:94:49:33:6a:1d:00:
7c:88:a2:91:bf:09:83:8a:e9:56:19:26:35:de:f0:13:af:ea:
77:37:55:25:f9:f4:b0:55:6c:41:06:0e:5c:bf:7e:63:4d:b2:
3b:22:62:bb:26:db:f2:92:6d:75:2b:2d:c7:45:a3:0d:66:60:
60:27:e0:c7:2c:96:3d:2d:fa:80:2f:b3:8c:fd:7b:49:a3:42:
7c:99:11:bf:08:51:aa:de:5e:5a:7a:31:05:74:4a:e4:f9:a3:
39:72:b0:ba:d8:12:c4:15:4f:d3:6a:8e:eb:f5:ab:35:7a:4b:
a4:19:55:e1:1c:8c:0f:8a:d8:f0:41:0c:76:32:65:48:62:aa:
e3:19:5e:31:d0:63:16:70:9c:4c:ad:6b:fa:11:95:9f:eb:74:
40:ec:7d:39:e4:81:42:b5:9e:cb:1f:1a:d6:16:26:54:3e:b0:
04:93:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:02 2024 by rpki-client on console-ams.rpki-client.org