Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/K__E0jhmrwT0Py8l0DzF15FS_i4.roa
File: K__E0jhmrwT0Py8l0DzF15FS_i4.roa (raw, json)
Hash identifier: d6NWgLZsxN3lf5ldxh78m83h+XGklzx29FjSt5oAQ2s=
Subject key identifier: 2B:FF:C4:D2:38:66:AF:04:F4:3F:2F:25:D0:3C:C5:D7:91:52:FE:2E
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 0185719E74F7DDD5808840D65936086FE30A
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/K__E0jhmrwT0Py8l0DzF15FS_i4.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44124
IP address blocks: 195.20.218.0/23 maxlen: 23
195.225.244.0/22 maxlen: 22
78.31.136.0/21 maxlen: 21
193.189.116.0/23 maxlen: 23
185.34.236.0/22 maxlen: 24
79.124.96.0/19 maxlen: 24
2a03:6600::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 09 Jun 2023 06:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:74:f7:dd:d5:80:88:40:d6:59:36:08:6f:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bffc4d23866af04f43f2f25d03cc5d79152fe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:1f:c9:e0:f7:34:42:46:1d:98:b2:07:f6:
fd:97:95:b3:f3:dc:05:3f:92:27:ba:ef:93:36:17:
34:ac:af:e9:f9:88:cb:47:65:66:96:e1:77:46:51:
a5:d1:ab:66:3a:68:3e:ce:b4:d9:cc:40:07:9a:95:
f9:1b:57:4d:f8:e3:8a:66:f5:14:e1:67:02:d4:65:
19:27:34:be:f4:9e:83:b0:07:23:72:3a:52:c3:cc:
52:6b:d1:23:5f:bd:72:62:35:f9:4c:0f:29:8e:43:
7f:a0:8f:4b:a3:3d:0d:7a:02:69:ed:8f:b1:6f:f8:
5d:9f:0d:ae:f0:80:d6:cf:fd:db:f3:81:54:68:2e:
54:d9:db:98:50:5d:6c:b0:57:f3:58:f8:a6:3d:4c:
82:85:82:4b:6c:7f:de:1b:97:54:9a:76:b3:74:57:
92:96:04:4e:fa:2b:9d:c7:4b:d9:33:a8:31:a5:af:
c5:1d:5a:56:6f:41:23:af:77:6c:7f:c4:ad:04:e9:
3b:e1:0b:93:ee:8e:3e:46:e8:22:82:f1:2c:2a:75:
87:fc:4b:02:26:8c:6e:a6:d4:03:6e:45:69:b3:dc:
8a:27:16:af:21:62:fa:75:03:8e:74:a1:a2:f8:4c:
10:3b:a1:d5:ab:b7:eb:b4:f3:44:85:1f:96:f1:d3:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FF:C4:D2:38:66:AF:04:F4:3F:2F:25:D0:3C:C5:D7:91:52:FE:2E
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/K__E0jhmrwT0Py8l0DzF15FS_i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.136.0/21
79.124.96.0/19
185.34.236.0/22
193.189.116.0/23
195.20.218.0/23
195.225.244.0/22
IPv6:
2a03:6600::/32
Signature Algorithm: sha256WithRSAEncryption
6b:57:a6:64:9b:96:16:f7:60:96:c6:e6:4f:b2:8e:6a:30:35:
a5:71:03:5b:b6:fa:46:8c:a4:a7:af:6c:cd:40:c0:64:a9:e0:
72:67:70:ca:23:d4:68:ae:73:d4:52:18:ba:86:4e:ff:80:fd:
82:14:da:13:c6:5b:e1:5c:89:68:d9:23:f7:9d:73:8b:3a:d8:
8b:31:6b:dc:2c:38:76:5d:aa:58:c1:ae:66:e9:d6:21:d5:26:
a1:93:64:b8:78:6f:1b:4b:5a:c0:36:a7:d8:ec:fc:1a:d6:fe:
4f:7d:ad:f4:11:ca:ee:41:b2:f9:ab:29:f6:cf:0b:48:7e:a5:
a8:51:c5:9d:a9:58:a6:94:fa:ce:96:23:ec:06:e9:8e:69:2c:
85:5c:d5:31:de:ba:38:6f:09:6c:86:70:55:42:f3:0b:f5:32:
ec:7c:64:12:d4:94:f9:4e:9e:d4:5c:7e:fb:2c:47:72:80:f9:
06:2c:c0:b8:12:ad:21:51:f9:e8:67:67:ca:9d:01:2c:80:1a:
60:11:89:d7:46:fa:27:5d:a9:0d:08:e6:36:15:27:53:ef:3f:
21:a5:1e:78:0c:fc:18:45:c5:7a:72:0b:26:0f:1f:8f:7a:b5:
c9:5c:a3:dd:df:b1:04:95:0a:72:b1:31:ea:4c:78:3b:66:d9:
80:57:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:37 2024 by rpki-client on console-fra.rpki-client.org