Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/L-ea6-yKsg9X8iYT2A1GojGtTIQ.roa
File: L-ea6-yKsg9X8iYT2A1GojGtTIQ.roa (raw, json)
Hash identifier: b2FiAwpFb89MSsTR82DtJlJ3sD4wZDBiQXExlDJRACA=
Subject key identifier: 2F:E7:9A:EB:EC:8A:B2:0F:57:F2:26:13:D8:0D:46:A2:31:AD:4C:84
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018B37F505EDF41ED47DB689D45DF7EDF63C
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/L-ea6-yKsg9X8iYT2A1GojGtTIQ.roa
Signing time: Mon 16 Oct 2023 10:08:06 +0000
ROA not before: Mon 16 Oct 2023 10:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44889
IP address blocks: 212.16.64.0/19 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.150.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.8.0/22 maxlen: 22
212.80.20.0/23 maxlen: 23
46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.132.0/22 maxlen: 22
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked on Fri 03 Nov 2023 15:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:f5:05:ed:f4:1e:d4:7d:b6:89:d4:5d:f7:ed:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 16 10:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe79aebec8ab20f57f22613d80d46a231ad4c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:45:f4:55:cf:20:91:7b:9e:9f:97:45:26:
8d:a3:88:9d:a9:94:f5:07:20:6a:12:54:61:87:dc:
09:75:4d:c6:f3:d5:32:00:01:bd:4d:38:5b:86:9e:
5c:19:76:0e:91:f4:7c:f6:fa:b5:00:98:00:ee:c1:
76:d0:73:1a:d4:0d:9b:e3:aa:00:d6:d7:1b:be:92:
71:59:d3:68:72:15:db:5a:0d:9a:34:b8:f0:ac:59:
c4:e4:02:d9:a1:c7:2b:81:2e:a2:4f:37:bb:32:49:
f3:10:3f:6b:7b:00:8d:ef:75:c7:7c:df:36:db:d3:
13:58:c6:69:80:8f:0f:a9:e4:72:21:0e:72:56:e0:
0b:5a:3c:a6:92:6f:1e:c4:d4:d4:cf:cc:ea:83:8b:
49:e3:1c:94:d9:e0:ee:b8:0d:03:07:e6:bd:28:99:
3d:4c:19:6d:26:0b:a7:ea:ac:98:d6:d4:58:ae:f7:
55:91:50:33:ea:1c:b2:15:ee:8e:d6:81:88:d5:b6:
33:8f:9a:6b:f8:f3:57:da:6e:82:f0:af:f4:bc:a9:
29:75:b1:2e:fb:8d:51:31:73:1e:56:f3:66:36:60:
a6:3f:f4:aa:ce:66:9a:b4:43:60:41:44:a3:a7:07:
6a:bc:bd:ac:e5:fa:0a:43:4f:e1:de:44:e5:2c:08:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E7:9A:EB:EC:8A:B2:0F:57:F2:26:13:D8:0D:46:A2:31:AD:4C:84
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/L-ea6-yKsg9X8iYT2A1GojGtTIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0-46.38.135.255
46.38.140.0/24
46.38.150.0/24
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
a5:ae:23:0b:1f:d6:7a:d2:5e:55:4a:67:5c:c0:e7:97:72:d1:
3e:ee:32:76:59:a9:6a:8d:1e:ef:b9:02:9a:51:56:c4:03:27:
9d:37:e3:c6:12:3a:c4:8e:56:1d:24:a7:e4:d7:da:0c:57:24:
12:74:68:b1:73:26:b7:66:d8:83:21:3d:19:9a:d3:30:09:e8:
a2:5d:f7:52:66:02:6e:55:e1:1d:56:81:c4:7e:3c:65:9d:24:
2a:79:23:68:df:6a:64:8c:c5:ca:dd:45:74:11:1d:94:f6:e9:
9c:47:5e:1e:31:65:8c:9e:41:37:5c:3c:fb:37:4a:2f:91:3b:
ed:d3:4f:1d:51:1f:ee:b6:d1:5b:0b:eb:40:55:ec:82:86:3c:
3c:d6:04:60:e6:3a:75:fb:6b:6b:e2:3e:16:fe:4c:c2:29:30:
9c:3c:0f:1a:50:ff:8b:c0:e8:3d:dc:46:4b:9c:5c:26:2f:40:
1a:c3:4e:ff:7f:b4:a4:e6:6e:5b:b4:a5:68:80:60:76:08:df:
95:9c:04:6e:4a:a0:4a:eb:c9:2f:59:37:74:7f:48:f0:4c:87:
af:a2:dd:87:5c:b2:5b:0b:3a:09:ec:ee:23:59:8a:51:66:f2:
67:3e:5c:bb:28:8c:49:42:da:45:aa:d2:b9:ef:bf:13:86:0e:
ad:7a:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org