Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/3F8oBOQsIeGYwTRQ7j7Bgb8DfW4.roa
File: 3F8oBOQsIeGYwTRQ7j7Bgb8DfW4.roa (raw, json)
Hash identifier: vCDAnKx8Cmhy/VUSYhNk2/5FN0NKzAYTIIZlSM6RFJg=
Subject key identifier: DC:5F:28:04:E4:2C:21:E1:98:C1:34:50:EE:3E:C1:81:BF:03:7D:6E
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 018728ED8C3383FD7C25265E6F0E6941D144
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/3F8oBOQsIeGYwTRQ7j7Bgb8DfW4.roa
Signing time: Tue 28 Mar 2023 15:54:29 +0000
ROA not before: Tue 28 Mar 2023 15:54:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47262
IP address blocks: 212.120.192.0/19 maxlen: 19
212.120.196.0/23 maxlen: 23
46.245.0.0/18 maxlen: 20
95.81.64.0/24 maxlen: 24
46.245.9.0/24 maxlen: 24
95.81.66.0/23 maxlen: 23
95.81.65.0/24 maxlen: 24
95.81.68.0/22 maxlen: 22
95.81.68.0/23 maxlen: 23
95.81.104.0/21 maxlen: 21
2a00:d20::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:ed:8c:33:83:fd:7c:25:26:5e:6f:0e:69:41:d1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Mar 28 15:54:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc5f2804e42c21e198c13450ee3ec181bf037d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:3d:35:ba:61:22:c2:39:bc:c7:60:0f:03:
60:9a:06:09:d3:79:a5:7b:9f:5d:12:12:15:c4:f8:
34:a2:45:44:b3:65:17:4f:af:b5:11:91:63:3b:15:
d7:75:af:43:46:0e:42:37:82:1c:ec:56:3b:0c:c7:
c3:58:af:67:32:91:86:cc:1c:ec:c2:4b:65:ee:4a:
d8:8f:bf:82:08:5d:ca:39:ed:e5:2e:9e:5c:5d:05:
d9:b4:9c:31:6c:ec:b0:1d:63:5e:b3:ce:8b:e7:30:
3c:28:5d:73:d4:fb:3a:91:6c:05:ce:3a:1a:5f:59:
e8:c8:9d:15:8b:3c:d4:bb:c6:aa:ed:c8:47:f6:5f:
84:9c:0b:94:c4:a9:61:37:34:38:ee:f8:d2:23:67:
cc:3d:67:50:e3:16:be:ef:ad:07:74:8a:ca:7d:b3:
c8:97:74:38:35:9e:70:aa:48:e2:20:66:b7:be:49:
3a:2d:3a:42:a4:9a:53:9e:67:d4:b2:9e:90:ec:fd:
96:89:d2:d3:0f:7a:b5:08:f1:c2:39:a6:0a:cb:b1:
6e:b8:79:5b:2d:1c:23:94:53:69:ca:4f:b4:e3:1f:
13:d0:71:b3:d7:20:56:0b:d5:01:db:30:f5:47:98:
98:de:f1:e7:16:ba:62:65:87:13:ce:3e:23:6c:0a:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5F:28:04:E4:2C:21:E1:98:C1:34:50:EE:3E:C1:81:BF:03:7D:6E
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/3F8oBOQsIeGYwTRQ7j7Bgb8DfW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.0.0/18
95.81.64.0/21
95.81.104.0/21
212.120.192.0/19
IPv6:
2a00:d20::/32
Signature Algorithm: sha256WithRSAEncryption
1a:26:75:78:b5:e5:5c:e5:ce:1f:44:74:a5:fc:78:ed:ba:09:
fa:75:f4:ad:32:f9:6e:6b:7d:14:be:a2:63:97:ae:71:5f:0b:
9f:f9:74:a6:ed:2b:78:46:9f:38:f6:d1:f4:cd:88:c6:29:94:
db:e9:52:b6:26:41:2c:90:a4:d5:90:c3:9e:48:3b:26:57:ad:
21:21:e8:0e:74:53:15:99:1d:f7:37:ba:c6:c2:e2:29:32:de:
60:45:77:89:1f:b0:2b:4e:fc:44:29:9b:3a:95:ce:c8:93:66:
1f:33:75:57:b5:03:87:6d:b3:59:6c:1a:80:5d:14:a2:28:9a:
d5:b0:87:cf:79:07:19:2a:e3:6e:b4:50:7b:cd:e9:60:65:ee:
93:94:71:be:ba:b3:4c:b0:60:38:f8:8a:03:d7:4f:59:7d:79:
83:90:9e:be:ec:f3:d8:bb:fb:c6:80:ff:76:c1:30:ae:d9:4c:
4f:e6:12:c0:6e:ae:f8:27:bd:96:89:e8:0f:bd:08:51:1e:67:
11:19:b5:2a:22:b7:e0:c8:1e:bb:2b:20:e7:00:29:e3:ce:9a:
c4:93:ef:ed:bd:59:1c:08:4a:53:cc:8a:f9:90:61:91:2c:66:
ae:a4:86:a9:1e:e9:8e:2d:04:cf:3e:59:3d:02:23:2f:be:02:
f2:10:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org