Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/otfqlvEN0EJh_Cc1YLGOpItNby8.roa
File: otfqlvEN0EJh_Cc1YLGOpItNby8.roa (raw, json)
Hash identifier: 24Ph2j8nhKH4jzPLUaXfl4ydsYqFr02dey/3Kv78fcA=
Subject key identifier: A2:D7:EA:96:F1:0D:D0:42:61:FC:27:35:60:B1:8E:A4:8B:4D:6F:2F
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AD64873E3A916BB69959B97F85035FC43
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/otfqlvEN0EJh_Cc1YLGOpItNby8.roa
Signing time: Wed 27 Sep 2023 10:56:27 +0000
ROA not before: Wed 27 Sep 2023 10:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43519
IP address blocks: 213.248.216.0/24 maxlen: 24
213.248.219.0/24 maxlen: 24
213.248.218.0/24 maxlen: 24
213.248.254.0/24 maxlen: 24
2a01:618:407::/48 maxlen: 48
2a01:618:402::/48 maxlen: 48
2a01:618:405::/48 maxlen: 48
2a01:618:400::/48 maxlen: 48
2a01:618:403::/48 maxlen: 48
2a01:618:406::/48 maxlen: 48
2a01:618:401::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Sep 2023 11:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:48:73:e3:a9:16:bb:69:95:9b:97:f8:50:35:fc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 27 10:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2d7ea96f10dd04261fc273560b18ea48b4d6f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1b:ad:fd:e4:4b:88:45:f0:a1:81:bc:9b:2e:
41:8b:59:20:8b:f2:5d:f2:59:a1:36:03:7d:72:ed:
2e:70:08:df:b1:b3:6f:11:6e:26:dc:8a:f2:20:05:
c6:06:7e:1e:98:63:01:71:d4:1a:03:61:86:bf:50:
04:5d:1c:ec:84:78:f4:0b:c2:d1:de:88:5d:b7:ad:
66:66:eb:cd:ff:8c:0c:56:7b:20:d8:76:a7:fe:b8:
cc:d2:6e:ac:d4:a3:7b:df:ed:99:b9:05:eb:e2:f4:
67:d7:e8:02:6d:39:7b:f4:69:20:e5:b7:2e:7a:04:
ff:86:ad:e4:7a:b9:cf:a4:0f:c6:b0:a1:43:de:ff:
b3:20:0c:87:95:65:07:64:18:78:08:9f:af:f1:a9:
aa:98:9c:13:d6:e3:b7:a8:4e:fe:64:47:42:1b:2a:
74:15:ab:06:2f:ac:37:f2:b9:5b:51:49:7a:69:52:
66:1f:84:09:b7:f7:ba:c3:b7:9a:c5:28:1b:0d:62:
92:3b:ca:55:4b:d3:9d:bd:f8:8d:fd:f0:46:15:fc:
87:a1:a5:08:42:34:b4:d4:80:42:68:ab:e0:70:f2:
ea:1a:89:d9:a7:f4:63:54:c6:b4:1a:14:b1:48:8c:
19:bd:ea:3d:8d:5b:79:6a:41:8c:cb:e3:c1:1a:56:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:EA:96:F1:0D:D0:42:61:FC:27:35:60:B1:8E:A4:8B:4D:6F:2F
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/otfqlvEN0EJh_Cc1YLGOpItNby8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.216.0/24
213.248.218.0/23
213.248.254.0/24
IPv6:
2a01:618:400::/45
Signature Algorithm: sha256WithRSAEncryption
9c:36:43:43:4e:16:25:41:8b:23:a1:53:fa:5e:d0:a2:94:80:
67:f2:cf:23:c0:25:3f:97:67:30:fc:90:b5:d7:53:d1:cb:6d:
11:f7:7f:78:67:aa:90:db:93:20:fa:2c:f8:3e:33:92:36:4d:
f3:80:bd:2e:6d:75:73:0b:d7:8e:ad:eb:4f:30:ad:8e:a5:9d:
92:62:9e:d6:11:ba:f2:a0:bc:95:05:77:04:32:4f:a8:0f:26:
4e:68:11:52:85:a9:80:d5:70:48:b0:98:0e:5d:a4:cf:c1:4e:
a9:7f:31:3e:dd:12:a7:0a:3b:a0:fd:cd:f9:d2:8d:3b:2a:f1:
04:fc:53:4a:6e:3c:60:88:1c:e1:d9:6f:42:2a:61:b3:1e:11:
50:4c:54:82:0a:fd:f7:aa:f6:3b:8d:da:ee:17:7e:ee:d5:e5:
1c:e1:ae:71:fd:d4:9d:00:44:28:34:34:19:80:4a:f2:47:71:
85:fd:ad:50:b7:81:6f:15:61:74:50:ff:1c:95:bf:bc:71:62:
ce:14:f7:ad:77:e8:32:e7:90:a9:8a:7f:d6:a9:01:37:de:d0:
9b:69:49:97:d7:37:0d:3d:ca:9e:ae:5a:95:47:b8:cf:ef:7e:
7c:8d:f2:67:ae:03:6d:b6:75:ad:08:05:c7:f0:c4:aa:ab:30:
b7:98:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:02 2024 by rpki-client on console-ams.rpki-client.org