Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/SuvsoZQr_-ffgQHIgrIs15J7X88.roa
File: SuvsoZQr_-ffgQHIgrIs15J7X88.roa (raw, json)
Hash identifier: CmXHE8Y5CQy56ORBL4zVZha7sC17yigenR0aeC3NOJ8=
Subject key identifier: 4A:EB:EC:A1:94:2B:FF:E7:DF:81:01:C8:82:B2:2C:D7:92:7B:5F:CF
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 018B99FF6F5EF14BE487210E508AA21C2377
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/SuvsoZQr_-ffgQHIgrIs15J7X88.roa
Signing time: Sat 04 Nov 2023 11:02:16 +0000
ROA not before: Sat 04 Nov 2023 11:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8814
IP address blocks: 212.47.132.0/22 maxlen: 22
212.47.128.0/22 maxlen: 22
212.47.144.0/22 maxlen: 22
212.47.148.0/22 maxlen: 22
158.181.44.0/22 maxlen: 22
158.181.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 06 Dec 2023 08:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:99:ff:6f:5e:f1:4b:e4:87:21:0e:50:8a:a2:1c:23:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Nov 4 11:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aebeca1942bffe7df8101c882b22cd7927b5fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f3:89:69:6d:f3:5b:09:ad:17:6e:39:b2:52:
d0:d1:c2:bb:ee:12:df:cb:26:84:5f:22:91:b8:56:
3a:f3:e5:0c:5e:42:44:e9:03:1c:a9:ed:0a:aa:3a:
93:4a:bf:4d:5f:69:23:09:09:b0:e4:f2:f3:cf:0e:
72:10:19:17:56:41:15:56:9b:08:83:32:52:ef:a2:
ba:9a:6f:1e:5e:db:60:a3:ab:a1:66:d3:7b:8e:13:
a1:36:08:fb:a1:2b:18:be:3e:9f:2a:85:b5:2a:8f:
2e:5a:d7:12:b5:4e:ad:15:52:28:74:fa:2a:6d:2b:
7e:b3:3a:e8:1f:86:ed:50:00:c4:16:c1:1d:bd:62:
b9:7a:c7:87:7b:ed:d3:4f:0a:50:b9:98:5b:f5:27:
3e:1e:2e:b9:35:5e:f9:62:68:13:18:60:b5:3d:53:
d8:4b:7d:f7:6b:82:e2:c7:fb:4a:20:12:b9:5e:e6:
be:a6:75:00:1b:ed:38:a0:1b:63:a3:fb:c6:5b:ee:
7a:fc:44:11:6e:ed:01:06:f9:42:81:76:db:ef:f2:
80:47:0d:6a:61:79:fe:8b:8f:c6:a8:94:37:ff:6e:
5b:2c:78:8e:e9:73:df:26:3d:39:3c:0d:ab:84:0e:
90:23:70:74:e2:80:ab:cc:82:90:af:05:26:5d:1a:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EB:EC:A1:94:2B:FF:E7:DF:81:01:C8:82:B2:2C:D7:92:7B:5F:CF
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/SuvsoZQr_-ffgQHIgrIs15J7X88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.181.40.0/21
212.47.128.0/21
212.47.144.0/21
Signature Algorithm: sha256WithRSAEncryption
10:f6:b5:78:84:45:c1:9d:bc:08:2b:cc:1b:a8:83:b1:de:a9:
61:ff:a6:28:e2:e3:38:14:6c:1c:31:08:42:f5:30:30:ad:83:
8e:e4:b3:f1:12:9a:64:d4:67:9d:3f:85:17:73:de:59:a8:6b:
ed:93:b9:f7:a3:47:32:eb:b1:77:80:71:a6:8c:04:d3:17:1f:
df:f6:55:42:68:eb:d4:c0:d4:95:16:67:28:ad:fa:7a:56:b1:
6c:21:7f:bf:59:e3:27:52:80:8e:4a:4d:58:65:b0:6c:22:54:
e0:96:af:4e:6b:00:d3:f0:cd:06:ff:43:98:fb:3a:28:07:cb:
0f:a9:5e:f2:5b:4b:96:73:95:d1:a4:97:f5:bd:bc:df:56:01:
4f:12:45:8e:65:33:78:c3:14:0c:60:f8:b7:f7:80:e1:cd:5b:
c3:99:a6:7e:38:1a:3f:eb:d1:5b:fb:3f:51:97:da:03:df:08:
c0:02:fc:08:6f:2d:4f:a1:34:f3:80:d6:45:9b:9c:03:3c:fe:
43:e5:ff:dd:6d:fa:76:f7:91:ad:0b:f2:fe:3d:99:9d:24:95:
6f:bc:79:de:95:57:b0:f2:d5:25:51:d7:18:36:45:bd:f4:51:
b2:9f:3a:5d:c6:65:d6:7d:fc:45:29:1c:19:ac:4a:cf:4a:7f:
b4:10:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:51 2024 by rpki-client on console-ams.rpki-client.org