Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/62FC2cuj3lYR2P7bbD-3eivPAdM.roa
File: 62FC2cuj3lYR2P7bbD-3eivPAdM.roa (raw, json)
Hash identifier: +CR4G70xMsMMPZr6WPSjuKX5G0L9sav6VcqzkcgqKPQ=
Subject key identifier: EB:61:42:D9:CB:A3:DE:56:11:D8:FE:DB:6C:3F:B7:7A:2B:CF:01:D3
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 01865537E94EAE81BE54DCF39B85E471AC9B
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/62FC2cuj3lYR2P7bbD-3eivPAdM.roa
Signing time: Wed 15 Feb 2023 13:16:12 +0000
ROA not before: Wed 15 Feb 2023 13:16:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203924
IP address blocks: 185.113.144.0/22 maxlen: 22
185.146.36.0/22 maxlen: 22
185.216.120.0/22 maxlen: 22
85.117.252.0/22 maxlen: 22
193.105.0.0/24 maxlen: 24
2a06:6a40::/29 maxlen: 29
2a0b:b640::/29 maxlen: 29
2a07:4d00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 15 Feb 2023 14:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:37:e9:4e:ae:81:be:54:dc:f3:9b:85:e4:71:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Feb 15 13:16:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb6142d9cba3de5611d8fedb6c3fb77a2bcf01d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:dc:bc:ad:fb:db:6f:ff:d5:21:c0:85:b9:
9b:94:f8:0f:81:a2:aa:a9:50:97:58:f2:38:af:a6:
7d:93:af:68:d4:52:0d:e3:fe:51:86:0b:90:7c:07:
51:7e:95:eb:81:6e:eb:7b:43:94:72:f3:39:86:30:
55:78:a3:52:1f:72:79:5d:78:f9:bb:ac:c9:b6:5e:
98:db:cc:ac:d3:4c:1c:93:fe:ee:7a:03:66:5a:8c:
c1:b1:01:ac:4a:e4:f0:d7:63:f8:d2:33:0d:08:ed:
6c:ef:d9:89:b7:28:7b:31:f3:26:34:d5:cc:01:1f:
be:9b:0d:a4:64:15:38:21:85:70:ef:dc:72:73:ee:
d6:1d:bf:10:d0:11:00:ea:c3:77:9d:92:59:ab:5c:
14:d1:75:73:a0:07:44:fd:86:c2:3d:b0:90:d1:a2:
1f:92:e8:09:e3:d3:4a:b5:04:f4:80:16:db:6e:3c:
0b:37:7e:21:39:7d:a0:f5:42:f6:14:a9:d4:a0:27:
39:73:87:db:82:58:31:c8:04:70:d6:14:85:73:d0:
6f:07:e1:a3:b3:f3:a5:cc:8d:14:de:b9:7d:c9:d4:
ed:36:f1:2c:7e:a8:37:37:26:28:b2:e3:12:cb:ff:
c3:f5:a1:87:38:6e:5c:e7:38:25:ae:cf:a5:db:a2:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:42:D9:CB:A3:DE:56:11:D8:FE:DB:6C:3F:B7:7A:2B:CF:01:D3
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/62FC2cuj3lYR2P7bbD-3eivPAdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.252.0/22
185.113.144.0/22
185.146.36.0/22
185.216.120.0/22
193.105.0.0/24
IPv6:
2a06:6a40::/29
2a07:4d00::/29
2a0b:b640::/29
Signature Algorithm: sha256WithRSAEncryption
37:74:2b:32:0e:e5:a1:b4:55:c6:3d:8e:77:c4:90:39:bf:42:
1f:0a:69:2b:42:66:88:96:09:56:37:da:5c:0a:e1:d1:dd:85:
2a:2f:f0:8a:43:e6:d5:66:11:36:e7:d1:3e:fb:ee:1d:8e:6b:
50:67:4f:e3:4a:85:eb:8f:35:99:83:8a:04:dd:c0:0c:4d:2f:
f0:43:36:10:4b:24:da:54:2d:f7:39:09:9e:43:bb:2b:83:ea:
18:fd:8a:9c:10:f8:9d:c3:88:3b:d1:ef:fb:57:d6:95:36:46:
1b:57:0e:80:3b:6a:c3:2c:77:75:1b:12:fe:5b:33:3c:ef:af:
54:49:a4:89:30:48:1b:fa:a7:8a:d4:d5:1a:16:c0:57:03:cd:
0d:8a:d4:b4:7b:ce:ff:62:76:c6:9e:c4:81:d0:ff:cd:63:bb:
b6:3d:73:3a:2d:80:1e:17:fd:52:3c:2f:3f:45:54:7e:5c:18:
89:3b:73:f9:9d:04:d7:4e:ee:e8:8d:af:bb:b0:9f:0b:0f:49:
64:7e:78:e8:bc:e0:68:5b:cc:41:05:83:88:44:0e:ad:d8:86:
e3:8f:92:57:1c:e5:2d:ad:db:8e:2f:2d:fe:9f:0e:05:0d:23:
ef:02:98:d7:ce:af:f2:cb:a6:14:68:2b:b3:19:bb:02:16:3d:
5a:a4:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:45 2024 by rpki-client on console-fra.rpki-client.org