Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/klK6rrF-lWxqreSqjakU3Di_6sE.roa
File: klK6rrF-lWxqreSqjakU3Di_6sE.roa (raw, json)
Hash identifier: m7CT25GGCtNDbOw3pJyH/wk4rckpB1C8LhMibDONcrA=
Subject key identifier: 92:52:BA:AE:B1:7E:95:6C:6A:AD:E4:AA:8D:A9:14:DC:38:BF:EA:C1
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 01856BB7FA41403AC890585BE1B1A4A40DF6
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/klK6rrF-lWxqreSqjakU3Di_6sE.roa
Signing time: Sun 01 Jan 2023 05:04:57 +0000
ROA not before: Sun 01 Jan 2023 05:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 78.132.0.0/17 maxlen: 18
212.95.0.0/19 maxlen: 24
46.124.0.0/15 maxlen: 16
185.99.72.0/22 maxlen: 23
62.140.32.0/19 maxlen: 20
213.142.96.0/19 maxlen: 23
212.67.224.0/19 maxlen: 20
213.162.64.0/19 maxlen: 23
2001:4bc8::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:fa:41:40:3a:c8:90:58:5b:e1:b1:a4:a4:0d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Jan 1 05:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9252baaeb17e956c6aade4aa8da914dc38bfeac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:d0:e5:54:e9:24:e3:a1:fc:39:d5:12:64:
ee:26:a3:55:39:f8:aa:05:a2:c1:69:b0:02:17:59:
af:a2:9e:e0:9b:46:dc:94:b0:6b:14:ac:ee:d1:ee:
55:00:ce:41:5a:a0:8d:1e:fe:38:80:ca:57:b7:f1:
56:d7:57:e1:81:2e:5a:33:36:39:e2:e3:e0:f2:d9:
31:65:9d:1e:7a:8b:16:71:05:c5:55:4d:91:96:ae:
3b:3f:4a:46:44:28:e1:99:a9:6e:93:d0:25:49:57:
4f:17:53:a1:12:fa:f3:39:50:5d:e3:91:8c:3d:26:
e8:9f:c3:89:2b:80:14:7d:f2:66:97:ff:57:8a:8c:
bc:fe:ef:ae:04:c7:bf:28:9c:0e:8c:2a:86:e0:ca:
ce:3a:75:f5:cd:ec:79:77:8b:32:df:70:6f:4b:2c:
d0:de:63:d2:22:d1:27:80:cd:bd:05:fd:8f:09:ed:
7d:7c:31:75:b9:08:2b:cd:4a:26:ee:0e:28:81:4c:
41:47:7b:6e:ff:b9:3d:27:c5:ab:c3:f6:77:92:58:
d1:ce:ac:a3:c7:0f:d9:a4:8b:7f:3a:32:93:18:f0:
af:5b:88:5c:58:59:c4:d8:aa:f2:93:94:c4:06:9e:
40:5c:32:30:37:57:ae:f4:19:12:23:fa:b1:15:32:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:52:BA:AE:B1:7E:95:6C:6A:AD:E4:AA:8D:A9:14:DC:38:BF:EA:C1
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/klK6rrF-lWxqreSqjakU3Di_6sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.124.0.0/15
62.140.32.0/19
78.132.0.0/17
185.99.72.0/22
212.67.224.0/19
212.95.0.0/19
213.142.96.0/19
213.162.64.0/19
IPv6:
2001:4bc8::/29
Signature Algorithm: sha256WithRSAEncryption
67:fe:04:7f:ef:e0:ad:3b:2b:22:0f:68:ce:32:cf:98:68:25:
e1:b0:ee:c0:b2:c4:10:fd:71:0d:f4:7c:26:3e:7a:e7:53:49:
4d:3d:13:20:e2:d0:48:3b:b9:1d:d8:0a:68:10:08:14:87:f5:
e4:ca:4d:e8:1e:c0:9e:80:55:e5:22:2d:ca:38:f1:e2:f6:b2:
31:1a:58:22:2b:fc:b1:3f:95:3d:57:71:5a:76:ff:4b:f7:23:
87:c0:cb:d2:1a:6b:27:67:07:f8:a1:07:d6:4e:3b:bc:5b:de:
0e:50:cb:42:b9:67:c2:82:27:52:b1:31:23:ab:0c:5d:c1:c9:
d7:c6:a7:c0:09:c4:6c:9b:ff:d7:2b:a1:1a:a6:de:76:76:97:
c1:87:ab:69:b0:67:95:6a:4d:ec:ac:d7:37:fc:86:4e:f2:a5:
ff:a7:ae:a3:5a:5b:06:fd:ee:3c:16:56:53:62:5e:79:bf:e8:
9a:87:9f:04:b4:5c:dc:c6:68:e4:ff:3d:69:fd:29:66:57:18:
26:99:7f:f2:b1:bf:26:1a:3d:5f:c5:7f:81:c2:82:5d:b8:c4:
25:98:df:ac:43:be:b9:ce:85:ef:63:f9:89:f7:49:64:b7:b8:
f4:5c:18:ce:4e:90:9c:2a:e3:47:16:9f:be:44:90:95:37:f6:
98:fc:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:35 2024 by rpki-client on console-ams.rpki-client.org