Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/uZ60EN9spxgQldXGkyMA6nsdMfE.roa
File: uZ60EN9spxgQldXGkyMA6nsdMfE.roa (raw, json)
Hash identifier: EBGp+9hpLgJeB55OM3okwG/c5ypjCi8OCVif6mInim0=
Subject key identifier: B9:9E:B4:10:DF:6C:A7:18:10:95:D5:C6:93:23:00:EA:7B:1D:31:F1
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AD2227152CB628CBD6E397F6475D00143
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/uZ60EN9spxgQldXGkyMA6nsdMfE.roa
Signing time: Tue 26 Sep 2023 15:36:27 +0000
ROA not before: Tue 26 Sep 2023 15:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43519
IP address blocks: 213.248.219.0/24 maxlen: 24
213.248.218.0/24 maxlen: 24
213.248.254.0/24 maxlen: 24
2a01:618:407::/48 maxlen: 48
2a01:618:402::/48 maxlen: 48
2a01:618:405::/48 maxlen: 48
2a01:618:400::/48 maxlen: 48
2a01:618:403::/48 maxlen: 48
2a01:618:406::/48 maxlen: 48
2a01:618:401::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:22:71:52:cb:62:8c:bd:6e:39:7f:64:75:d0:01:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 26 15:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b99eb410df6ca7181095d5c6932300ea7b1d31f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:bd:21:8c:51:c9:91:18:24:36:92:01:d9:
ad:8f:0d:0e:e2:f0:7c:7d:92:8e:3a:b4:be:b0:a9:
02:c8:02:32:33:e2:80:90:f3:bf:eb:51:87:89:fb:
ae:7d:96:60:7b:27:2d:f7:b2:96:cb:13:26:44:ef:
3c:96:19:c6:96:36:6d:91:83:c2:01:8b:c5:12:22:
7a:da:e1:6d:e5:bc:ed:51:4a:fa:f9:b4:91:74:d4:
62:ae:4b:19:29:1d:5d:14:62:8b:bd:4d:0b:94:02:
34:77:64:b3:af:83:84:f2:ea:b7:27:cd:96:3c:49:
57:28:6b:37:7b:8f:03:b0:5b:8b:11:e9:bc:9e:64:
72:c9:f5:38:62:44:84:58:38:df:08:61:bf:f1:b3:
54:82:3d:d2:9a:93:31:cf:3c:eb:e0:c8:1e:f8:c6:
61:5a:af:6d:c8:ca:8e:c3:7f:fb:7d:b9:a7:7f:52:
81:d7:36:89:b0:2d:b0:ec:39:c6:6a:a3:f7:f3:b4:
60:16:ad:5c:ef:34:62:b3:bf:20:83:82:c8:71:d8:
0e:46:c2:de:d8:1d:4d:84:6d:80:e7:c6:fb:a0:2e:
a6:0c:e2:e4:66:66:fb:cb:6a:47:b4:6b:dc:90:6c:
47:bf:6d:ca:ea:66:d9:88:07:49:64:4b:09:af:ce:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9E:B4:10:DF:6C:A7:18:10:95:D5:C6:93:23:00:EA:7B:1D:31:F1
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/uZ60EN9spxgQldXGkyMA6nsdMfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.218.0/23
213.248.254.0/24
IPv6:
2a01:618:400::/45
Signature Algorithm: sha256WithRSAEncryption
48:00:ed:3d:38:13:15:d1:f7:e8:c4:24:db:76:c9:f8:83:ae:
29:9b:b1:e7:bd:eb:ae:5d:78:c0:00:f9:33:cd:1a:74:23:6c:
ee:42:83:b6:34:dd:7c:1b:e8:eb:1a:50:e3:47:69:62:a3:9d:
65:7a:01:57:49:5a:ab:a7:1b:f5:8c:d7:dd:61:c3:7f:c3:82:
90:e5:96:49:fd:92:ec:66:95:14:09:31:22:31:e6:7c:89:ae:
2e:ed:78:b6:e3:9b:60:8c:af:24:f5:5b:eb:03:d1:3a:79:51:
87:8b:ee:c8:ef:69:ce:4c:78:e9:09:54:a2:7e:b5:72:42:5e:
ce:40:0e:41:e2:19:a3:c7:67:52:79:82:46:4b:66:cc:bb:09:
1c:59:5d:91:35:c6:c6:46:46:d2:df:c5:66:b3:b3:d4:a3:82:
c8:6c:29:0b:0b:8b:d4:ff:93:c5:fe:bf:2a:2a:f2:ee:0f:83:
a0:2c:7a:d1:b5:af:0f:fe:1d:4f:4b:0b:fd:49:a7:38:b0:ac:
18:da:25:9a:42:1f:07:12:0b:72:c8:c6:00:bf:84:b9:0c:f8:
e8:a9:77:38:09:34:69:da:85:55:59:a8:12:23:85:40:ee:01:
2d:e2:85:9f:8c:38:5c:1e:5b:74:ef:8d:bd:b9:b4:71:5d:a4:
65:7a:e6:77
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYrSInFSy2KMvW45f2R10AFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj
ZGQ1NGYwHhcNMjMwOTI2MTUzNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTllYjQxMGRmNmNhNzE4MTA5NWQ1YzY5MzIzMDBlYTdiMWQzMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcC9IYxRyZEYJDaSAdmtjw0O4vB8
fZKOOrS+sKkCyAIyM+KAkPO/61GHifuufZZgeyct97KWyxMmRO88lhnGljZtkYPC
AYvFEiJ62uFt5bztUUr6+bSRdNRirksZKR1dFGKLvU0LlAI0d2Szr4OE8uq3J82W
PElXKGs3e48DsFuLEem8nmRyyfU4YkSEWDjfCGG/8bNUgj3SmpMxzzzr4Mge+MZh
Wq9tyMqOw3/7fbmnf1KB1zaJsC2w7DnGaqP387RgFq1c7zRis78gg4LIcdgORsLe
2B1NhG2A58b7oC6mDOLkZmb7y2pHtGvckGxHv23K6mbZiAdJZEsJr854wQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLmetBDfbKcYEJXVxpMjAOp7HTHxMB8GA1UdIwQY
MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt
MzQ2MzY4ODI3ZTY4LzEvdVo2MEVOOXNweGdRbGRYR2t5TUE2bnNkTWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4
LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQB1fjaAwQA
1fj+MA8EAgACMAkDBwMqAQYYBAAwDQYJKoZIhvcNAQELBQADggEBAEgA7T04ExXR
9+jEJNt2yfiDrimbsee9665deMAA+TPNGnQjbO5Cg7Y03Xwb6OsaUONHaWKjnWV6
AVdJWqunG/WM191hw3/DgpDllkn9kuxmlRQJMSIx5nyJri7teLbjm2CMryT1W+sD
0Tp5UYeL7sjvac5MeOkJVKJ+tXJCXs5ADkHiGaPHZ1J5gkZLZsy7CRxZXZE1xsZG
RtLfxWazs9SjgshsKQsLi9T/k8X+vyoq8u4Pg6AsetG1rw/+HU9LC/1JpziwrBja
JZpCHwcSC3LIxgC/hLkM+OipdzgJNGnahVVZqBIjhUDuAS3ihZ+MOFweW3Tvjb25
tHFdpGV65nc=
-----END CERTIFICATE-----
Generated at Wed Sep 27 11:43:10 2023 by rpki-client on console-ams.rpki-client.org