Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/aTzbtfEfX9Mhnyps3mD-OdfAhpQ.roa
File: aTzbtfEfX9Mhnyps3mD-OdfAhpQ.roa (raw, json)
Hash identifier: T81x/EorkRlhLeWVLW4W/YdnFSUvrUJ+8M9MDFYx/yY=
Subject key identifier: 69:3C:DB:B5:F1:1F:5F:D3:21:9F:2A:6C:DE:60:FE:39:D7:C0:86:94
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 018CC5DC89EDACF8BF1036A496E9C99032AB
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/aTzbtfEfX9Mhnyps3mD-OdfAhpQ.roa
Signing time: Mon 01 Jan 2024 16:30:13 +0000
ROA not before: Mon 01 Jan 2024 16:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64476
IP address blocks: 185.231.8.0/22 maxlen: 22
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.88.0/22 maxlen: 22
185.253.171.0/24 maxlen: 24
185.253.169.0/24 maxlen: 24
185.253.170.0/24 maxlen: 24
185.253.168.0/24 maxlen: 24
85.190.64.0/24 maxlen: 24
46.247.138.0/23 maxlen: 23
46.247.136.0/23 maxlen: 23
85.190.67.0/24 maxlen: 24
46.247.141.0/24 maxlen: 24
185.161.168.0/22 maxlen: 22
46.247.140.0/24 maxlen: 24
87.121.208.0/21 maxlen: 21
2a0a:e805:500::/40 maxlen: 40
2a0a:e805:710::/44 maxlen: 44
2a0a:e805:610::/44 maxlen: 44
2a0a:e805:210::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 13 Mar 2024 10:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:89:ed:ac:f8:bf:10:36:a4:96:e9:c9:90:32:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Jan 1 16:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=693cdbb5f11f5fd3219f2a6cde60fe39d7c08694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:b1:f5:c3:d1:1f:e5:7f:5e:90:ad:97:98:
e1:34:48:54:b3:6d:11:19:ae:a3:2c:6a:e1:3c:51:
4e:67:dd:a7:06:ca:7c:bb:16:00:02:3e:42:fb:bf:
24:55:0d:cd:50:a3:f5:c0:e3:d3:67:59:63:40:ab:
bb:6d:a4:13:0a:46:ae:d9:38:52:77:40:80:c8:5d:
0a:90:c2:82:86:d5:68:c5:c9:29:1c:c3:3c:f2:70:
25:aa:2b:05:57:5e:9d:c3:27:20:5b:94:a8:ed:ff:
4e:1f:9f:c5:ae:94:3c:f3:99:77:aa:a1:d0:38:bc:
90:6a:ee:70:36:38:4a:0e:a6:a4:65:92:9d:04:65:
0f:53:59:67:0e:20:58:b0:c1:06:68:2c:a7:88:ef:
0a:f4:37:e0:76:59:e4:9f:0d:60:71:97:93:60:73:
5a:90:92:ea:be:04:c8:c2:f9:2e:bc:16:72:66:2c:
81:94:da:80:d8:41:97:89:8b:bf:9f:da:e0:c5:e5:
c1:d5:27:a2:59:15:e9:c6:55:d3:cf:45:bb:76:5a:
5b:64:94:5b:32:26:ee:ef:fe:81:35:d0:05:68:e3:
f5:b1:26:56:9c:b7:51:ee:40:70:49:6d:ad:e4:c8:
d7:5c:60:15:eb:ff:c9:b8:23:b6:aa:2e:91:ad:73:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3C:DB:B5:F1:1F:5F:D3:21:9F:2A:6C:DE:60:FE:39:D7:C0:86:94
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/aTzbtfEfX9Mhnyps3mD-OdfAhpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0-46.247.141.255
85.190.64.0/24
85.190.67.0/24
85.190.84.0/23
85.190.88.0/22
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e805:210::/44
2a0a:e805:500::/40
2a0a:e805:610::/44
2a0a:e805:710::/44
Signature Algorithm: sha256WithRSAEncryption
82:c3:33:ee:e8:90:17:95:79:73:dc:0e:f1:11:1a:e3:36:1c:
e7:16:ee:59:44:1d:d9:64:1c:82:21:cb:77:8f:6a:91:fc:a8:
5c:0d:fe:9d:26:68:ad:08:48:9a:87:58:8e:9f:47:a9:d4:6c:
e2:78:87:d9:84:54:3a:22:2a:73:34:4a:d3:e1:16:2e:69:96:
b0:50:47:3d:64:16:79:a5:f6:19:c5:7a:ec:9a:26:eb:97:10:
d0:c9:6a:56:33:4f:19:0b:7b:0f:22:13:8e:82:fe:e1:4c:28:
96:e0:15:32:dd:72:e8:b8:e7:b5:fe:b7:ef:6c:0a:15:78:9f:
9b:61:1d:31:c7:94:e3:e6:ad:a1:b9:77:1a:00:cd:22:b1:6a:
1c:a4:2d:16:c9:d8:c7:c4:e1:fc:45:c2:85:40:18:b9:69:1a:
ec:e1:55:f5:a1:b6:23:23:96:01:cb:c5:70:13:bf:de:c2:3f:
10:fd:98:a9:82:71:14:6f:aa:56:f5:1f:0d:83:79:79:39:7f:
3b:3a:dc:14:ce:e4:49:59:55:ac:b0:e0:0f:5b:5f:30:15:6d:
cd:1c:0a:30:18:06:f4:d1:da:5a:88:9d:8d:30:b6:2f:2c:28:
cc:a7:4f:59:b2:36:41:8a:3e:ed:db:ef:9d:96:7c:36:5f:1a:
33:4e:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:06 2024 by rpki-client on console-fra.rpki-client.org