Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/mCngeHHO3t4eHTau8wWOkjrajo0.roa
File: mCngeHHO3t4eHTau8wWOkjrajo0.roa (raw, json)
Hash identifier: BZMwg2qvauz3QLDv8sOi1ZDxr0LwHfkP1WM+8vFvFko=
Subject key identifier: 98:29:E0:78:71:CE:DE:DE:1E:1D:36:AE:F3:05:8E:92:3A:DA:8E:8D
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AD6487477A119EA3DF2A9CC160454C1CF
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/mCngeHHO3t4eHTau8wWOkjrajo0.roa
Signing time: Wed 27 Sep 2023 10:56:27 +0000
ROA not before: Wed 27 Sep 2023 10:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137502
IP address blocks: 213.248.219.0/24 maxlen: 24
213.248.218.0/24 maxlen: 24
213.248.216.0/24 maxlen: 24
213.248.254.0/24 maxlen: 24
213.248.255.0/24 maxlen: 24
2a01:618:405::/48 maxlen: 48
2a01:618:400::/48 maxlen: 48
2a01:618:403::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
2a01:618:407::/48 maxlen: 48
2a01:618:402::/48 maxlen: 48
2a01:618:406::/48 maxlen: 48
2a01:618:401::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:48:74:77:a1:19:ea:3d:f2:a9:cc:16:04:54:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 27 10:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9829e07871cedede1e1d36aef3058e923ada8e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:53:a1:7d:9a:6c:db:af:54:62:0a:3e:70:
63:f2:45:a0:6f:f8:97:ad:91:12:99:7d:13:49:27:
6b:19:69:6a:e5:78:6e:5b:7e:f0:ab:77:35:e9:86:
e9:13:35:31:bc:65:ce:4e:09:d4:66:67:90:c2:f1:
38:d5:1f:e5:e3:7e:a9:27:c4:79:e9:3c:17:50:75:
8e:4d:33:bd:78:a5:e4:40:43:7e:d5:28:ad:b0:b4:
3f:a2:f9:21:c2:41:f1:55:94:eb:f5:87:35:66:08:
44:23:20:00:62:bf:4f:8b:2e:1d:d0:0c:96:81:c4:
53:d4:e7:15:21:46:ab:7b:53:58:5f:97:2b:71:4f:
ea:f1:67:46:03:57:2e:f0:2a:0a:b4:88:b4:b1:1a:
e3:df:99:b5:0e:16:34:6b:15:92:64:98:54:fb:8f:
08:79:59:25:4d:3a:be:e6:56:1b:db:3f:15:70:25:
9f:23:cf:f9:2b:b3:66:8b:a0:fa:b4:b9:17:2d:a3:
a5:7e:6c:45:a3:3c:f4:1c:ad:75:9b:e2:ca:70:d6:
c9:1e:9d:1b:98:7e:1a:c7:22:00:6d:be:1f:2c:ba:
35:b4:8d:34:6c:f3:75:09:4b:84:fe:db:3f:e4:47:
09:c9:89:90:88:ba:7a:b2:21:11:7c:fe:5d:8d:06:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:E0:78:71:CE:DE:DE:1E:1D:36:AE:F3:05:8E:92:3A:DA:8E:8D
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/mCngeHHO3t4eHTau8wWOkjrajo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.216.0/24
213.248.218.0/23
213.248.254.0/23
IPv6:
2a01:618:400::/45
Signature Algorithm: sha256WithRSAEncryption
19:39:6b:2a:8e:e5:37:a9:29:9d:15:63:c2:93:8d:52:3c:1e:
06:15:6e:94:78:06:8d:ff:5c:b8:7d:bd:f5:9b:dd:3b:3f:23:
91:d5:43:a5:85:55:be:3d:f5:b4:ed:b9:28:69:ef:83:fa:c8:
f7:8c:88:90:68:cb:2f:98:2f:78:c4:ef:68:3a:9e:de:c9:c7:
dc:3f:b9:5d:3a:2f:cd:5e:71:d4:b2:7e:70:0a:14:33:b2:c1:
6c:87:82:17:91:99:6b:8d:1e:c0:e4:c6:45:06:62:97:98:ce:
fb:cf:a8:12:bd:3e:97:d9:4f:36:1b:2d:7f:45:20:2b:47:fe:
b2:eb:5a:27:3f:7b:24:9d:9b:87:36:f9:fa:bd:e3:7f:79:ff:
ad:17:ae:ce:6d:7f:f2:31:f9:85:72:b7:6d:98:3e:3c:e4:0f:
ec:d2:1f:e1:7f:c2:d6:a7:2a:40:e4:17:d2:0d:9a:71:f2:5a:
83:3a:17:a6:6a:16:53:c5:91:59:30:2c:44:c4:02:13:8e:d0:
75:a3:57:8a:22:d2:7d:f0:38:80:2c:b4:77:5f:b5:56:0b:c5:
d5:f5:b8:85:09:3e:37:32:5e:ea:d7:71:d5:b3:97:a7:d2:65:
81:0d:68:fd:0b:43:52:be:03:81:ff:9f:42:fa:06:61:46:15:
72:6b:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 12:48:16 2023 by rpki-client on console-ams.rpki-client.org