Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/F78PO6xXIhl14gmQs2s6Zt5GHII.roa
File: F78PO6xXIhl14gmQs2s6Zt5GHII.roa (raw, json)
Hash identifier: AxQ27srtl6Dv6Bu4nCryeoBMOvQM8qfrznTnF+3sc+I=
Subject key identifier: 17:BF:0F:3B:AC:57:22:19:75:E2:09:90:B3:6B:3A:66:DE:46:1C:82
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018AD7652EA8A1BA65219CC427BDC25C8EBB
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/F78PO6xXIhl14gmQs2s6Zt5GHII.roa
Signing time: Wed 27 Sep 2023 16:07:27 +0000
ROA not before: Wed 27 Sep 2023 16:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 195.8.160.0/19 maxlen: 19
77.233.128.0/19 maxlen: 19
83.107.64.0/18 maxlen: 18
80.176.0.0/15 maxlen: 15
212.248.128.0/17 maxlen: 17
195.58.64.0/19 maxlen: 19
212.225.0.0/17 maxlen: 17
62.49.0.0/16 maxlen: 16
212.228.0.0/15 maxlen: 15
83.107.192.0/18 maxlen: 18
62.56.0.0/17 maxlen: 17
83.104.0.0/14 maxlen: 14
83.107.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Wed 27 Sep 2023 16:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:65:2e:a8:a1:ba:65:21:9c:c4:27:bd:c2:5c:8e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Sep 27 16:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17bf0f3bac57221975e20990b36b3a66de461c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:31:51:06:b0:1c:b2:e6:d8:61:b9:d9:98:
3f:70:9d:4d:91:88:b3:40:e8:b6:82:cb:44:98:1d:
12:8a:aa:4d:1c:f6:5d:38:fd:b9:c3:d6:9f:90:20:
40:8e:b8:3c:24:22:e7:4b:c9:29:a3:53:f5:72:7f:
18:c3:1f:3e:e8:dd:42:b3:64:46:30:f2:f9:c0:b4:
ea:d9:e3:ed:c7:32:60:0e:e6:8e:e5:8a:c6:a2:08:
ec:69:c7:48:9a:58:78:61:e1:c7:5b:2f:73:29:7d:
05:b3:bf:5f:0f:68:b8:f6:d9:91:c6:57:20:d1:ca:
d1:e8:23:da:66:2e:4e:34:f2:9b:03:4a:4b:e0:db:
ea:99:dc:0b:5b:0c:ce:46:ef:cf:f6:7e:5c:b8:ea:
17:f6:ad:7d:97:31:85:92:39:d3:aa:12:e5:98:fa:
38:8f:e8:cb:d8:a9:5d:e2:19:ad:40:e6:27:36:2e:
21:3d:5f:0f:57:87:65:d3:b0:03:b1:c7:e3:be:82:
2e:6a:21:57:73:33:1c:ca:d9:cd:eb:ca:c2:36:3b:
8e:cd:f9:42:55:88:16:da:c7:f0:1c:46:9d:f8:64:
db:8e:81:8c:59:b8:ba:4b:1b:55:c0:45:e2:be:9b:
16:52:b2:e5:16:47:6b:f6:ab:7d:6e:23:35:56:5c:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BF:0F:3B:AC:57:22:19:75:E2:09:90:B3:6B:3A:66:DE:46:1C:82
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/F78PO6xXIhl14gmQs2s6Zt5GHII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.49.0.0/16
62.56.0.0/17
77.233.128.0/19
80.176.0.0/15
83.104.0.0/14
195.8.160.0/19
195.58.64.0/19
212.225.0.0/17
212.228.0.0/15
212.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:9f:51:ed:21:7b:21:77:4d:b8:db:8a:cb:43:09:94:d3:30:
af:87:35:cb:e8:c5:29:e9:ba:1d:ae:d2:b2:ba:03:47:14:32:
08:d6:4e:3c:2a:d6:58:86:9c:90:49:97:72:33:e9:76:0c:55:
af:56:ba:67:c4:8e:0f:34:fd:8a:3a:9f:9c:c2:be:30:f8:66:
7c:05:0f:a9:a6:61:52:36:11:d5:6b:82:41:ef:b5:b2:af:4f:
67:89:10:83:08:fd:2a:fa:40:13:6a:f7:f5:5b:6e:ec:67:26:
ea:63:0b:78:2a:b3:5b:a6:97:94:e7:d9:b7:ec:1e:7d:d5:d9:
b6:12:10:da:46:bd:2c:12:4f:73:57:12:2a:67:01:55:90:f4:
60:e2:53:5f:86:dc:8f:00:2e:02:32:74:91:1b:f6:03:44:55:
53:1e:b6:4f:24:e5:aa:37:32:84:ce:3b:f0:53:2d:77:9e:7d:
ae:fd:bb:bc:d6:28:89:ce:6a:34:65:74:8c:19:3d:98:96:3e:
16:5c:d8:81:27:81:9b:87:8a:ff:1d:db:6a:7f:39:e2:86:53:
bc:c4:5f:c8:72:87:72:e5:c1:8e:e4:47:29:8e:8d:97:8f:89:
d1:26:75:e1:39:5c:12:6c:3d:fa:70:84:02:f6:65:0a:10:7b:
f7:7d:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:10 2024 by rpki-client on console-fra.rpki-client.org