Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/H6JZ4Cyho7LMBT7Q2Rpt6gJFoZA.roa
File: H6JZ4Cyho7LMBT7Q2Rpt6gJFoZA.roa (raw, json)
Hash identifier: IKiWhhGUT6VOo+e86yJrQ05bEqxaf0Cfdc4KqjkLSQg=
Subject key identifier: 1F:A2:59:E0:2C:A1:A3:B2:CC:05:3E:D0:D9:1A:6D:EA:02:45:A1:90
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 018BA463F4D502E3D927209B31E6E47F7F6F
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/H6JZ4Cyho7LMBT7Q2Rpt6gJFoZA.roa
Signing time: Mon 06 Nov 2023 11:28:16 +0000
ROA not before: Mon 06 Nov 2023 11:28:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8508
IP address blocks: 83.230.64.0/21 maxlen: 21
83.230.64.0/20 maxlen: 20
213.227.96.0/19 maxlen: 19
213.227.80.0/20 maxlen: 20
213.227.88.0/21 maxlen: 21
185.126.188.0/22 maxlen: 22
83.230.96.0/19 maxlen: 19
83.230.110.0/24 maxlen: 24
83.230.118.0/23 maxlen: 23
157.158.0.0/16 maxlen: 16
212.106.177.0/24 maxlen: 24
212.106.176.0/24 maxlen: 24
212.106.176.0/20 maxlen: 20
83.230.123.0/24 maxlen: 24
212.106.184.0/22 maxlen: 22
212.106.183.0/24 maxlen: 24
2a01:1d8::/30 maxlen: 30
2a01:1de::/32 maxlen: 32
2a01:1dd::/32 maxlen: 32
2a01:1dc::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:63:f4:d5:02:e3:d9:27:20:9b:31:e6:e4:7f:7f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Nov 6 11:28:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fa259e02ca1a3b2cc053ed0d91a6dea0245a190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ee:8d:28:32:f0:3e:79:39:d8:9c:07:e0:38:
15:48:22:08:59:28:ed:e6:4d:45:6f:70:95:ab:c3:
ba:f0:ed:61:ff:e2:78:28:5a:7c:2b:28:55:86:56:
a9:17:cb:46:c1:b7:34:bb:36:bd:65:1d:c8:70:9b:
bd:a8:44:cc:9e:d1:46:a0:8c:e0:dc:d5:f2:b8:59:
a3:3b:c6:07:85:07:8f:ab:17:dd:f7:96:ab:e5:70:
f1:52:45:5d:22:e5:74:5a:17:14:06:26:3e:af:e7:
23:1d:bc:a8:de:36:22:6f:a0:6d:95:4c:11:22:c1:
12:78:04:da:c1:78:05:a2:9a:43:45:27:f3:39:e8:
57:0e:54:ce:b7:a2:e9:b5:7b:4f:34:b1:99:d7:ef:
9d:b1:65:c5:77:a9:db:df:da:2d:7c:c7:e5:49:56:
16:74:05:ad:a5:53:c8:2c:f9:94:8e:ab:04:24:22:
06:55:89:bc:8c:56:9e:ef:e6:32:2f:7f:95:b2:a8:
42:9a:2f:71:31:05:17:50:af:ef:b6:79:25:de:3f:
5f:d9:85:19:0f:c2:3b:36:68:29:28:78:fe:65:50:
db:52:29:24:81:39:02:0f:00:76:a1:ed:32:4d:78:
cd:e7:82:45:22:78:8d:c4:37:1e:61:11:02:f0:d0:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A2:59:E0:2C:A1:A3:B2:CC:05:3E:D0:D9:1A:6D:EA:02:45:A1:90
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/H6JZ4Cyho7LMBT7Q2Rpt6gJFoZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.64.0/20
83.230.96.0/19
157.158.0.0/16
185.126.188.0/22
212.106.176.0/20
213.227.80.0-213.227.127.255
IPv6:
2a01:1d8::-2a01:1de:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:5d:38:99:61:b7:54:e8:fd:16:ad:45:89:a8:45:1e:d6:f8:
cc:54:f1:9a:c6:c0:a4:ea:1f:a1:0f:02:19:73:bb:72:0e:8d:
8d:e0:a7:71:72:1c:1a:7f:95:35:69:1b:f9:e6:05:36:0b:be:
5a:c4:0e:43:43:b6:f9:3d:0f:a8:f1:69:55:b6:f6:90:cb:a8:
db:cf:ae:30:3a:c7:5b:c1:26:a0:0d:06:c7:31:37:a6:1e:13:
91:39:57:b5:9e:21:b0:32:1a:f5:3d:b5:95:be:cc:8f:a9:78:
7c:b9:d0:9b:09:e1:a1:95:e3:af:5d:4e:7a:12:a4:e3:1b:89:
2a:fc:3b:15:93:6f:db:4a:75:15:cc:6c:4b:5b:c0:8a:76:4b:
90:44:fa:01:06:6b:1d:07:e4:65:f2:11:f5:bf:af:c6:97:91:
2c:f5:32:e9:63:cf:35:89:9e:05:36:04:9c:07:79:60:e8:d6:
1b:eb:39:ed:f2:80:08:16:f8:b6:26:ea:33:65:7f:56:7c:89:
2d:81:55:db:3a:96:36:da:46:ae:1e:2f:ac:9b:74:7b:71:5c:
6a:74:36:65:ad:a2:4b:0a:64:f4:2f:13:66:86:3b:8a:ca:6c:
49:1f:d3:6f:ef:72:5a:55:0f:9c:22:af:77:0c:02:b6:6e:a4:
7d:1a:44:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:36 2024 by rpki-client on console-ams.rpki-client.org