Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/k_tk7m4Kbytt4Ttff-wPUJE1g3Q.roa
File: k_tk7m4Kbytt4Ttff-wPUJE1g3Q.roa (raw, json)
Hash identifier: DTHSOuJH/JIOpkIxpVlqKpsITKCd2kmAv32yP3FX8O4=
Subject key identifier: 93:FB:64:EE:6E:0A:6F:2B:6D:E1:3B:5F:7F:EC:0F:50:91:35:83:74
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018A281A7F17AF717B40C4FDDEF2F64D845F
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/k_tk7m4Kbytt4Ttff-wPUJE1g3Q.roa
Signing time: Thu 24 Aug 2023 15:12:19 +0000
ROA not before: Thu 24 Aug 2023 15:12:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec0:7001::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Oct 2023 17:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:1a:7f:17:af:71:7b:40:c4:fd:de:f2:f6:4d:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Aug 24 15:12:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93fb64ee6e0a6f2b6de13b5f7fec0f5091358374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:86:5f:cc:9e:05:c5:3a:17:81:be:92:1d:
ec:69:4d:92:a4:92:69:1c:da:b5:e6:11:03:59:f0:
ff:b7:61:e0:ce:3e:81:47:33:28:dc:0d:0e:6c:19:
18:a9:df:1b:a8:5b:72:fb:12:60:3b:15:fe:7b:16:
99:a9:5d:3a:f9:15:06:ba:42:c0:b5:7d:51:45:09:
67:12:17:ca:ad:cf:4d:f4:44:dc:37:3c:74:58:8d:
21:05:1d:47:c4:d1:67:cd:89:58:10:af:8d:f1:dd:
29:b4:32:59:c7:d0:52:65:64:39:67:08:d6:4a:83:
f6:3c:89:59:85:43:0b:ba:4a:40:d6:1a:9d:89:92:
84:f7:3f:e4:ab:63:c1:15:e5:3a:a6:81:48:a7:df:
5b:90:99:97:ad:39:aa:60:e6:f4:85:9f:3a:91:87:
1e:45:8e:3b:ab:b9:38:25:52:5c:86:f5:54:c8:65:
b0:f0:23:d7:7c:78:bb:8b:1f:c6:c5:cd:b0:93:fe:
6b:33:09:64:95:bb:76:e9:64:05:f3:51:13:c1:05:
8d:93:d2:06:4e:32:a2:62:99:ab:78:6c:8e:de:f1:
fb:68:91:70:49:06:33:1c:e3:60:8b:30:fe:e2:f3:
34:b4:c1:dc:5e:a5:a7:08:66:fc:8d:7a:87:fe:cf:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FB:64:EE:6E:0A:6F:2B:6D:E1:3B:5F:7F:EC:0F:50:91:35:83:74
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/k_tk7m4Kbytt4Ttff-wPUJE1g3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
185.248.134.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1:b00b::/48
2a12:bec2::/32
Signature Algorithm: sha256WithRSAEncryption
5f:53:f8:0d:88:d5:50:ee:e6:82:b8:76:fa:5e:e4:cd:4c:62:
ee:2a:1f:bd:7e:f9:e1:f5:00:76:69:9d:75:8a:42:cf:b6:a0:
a2:23:32:86:27:71:77:fc:34:83:ba:4c:7e:c0:fc:f0:82:46:
2e:79:18:b5:4c:4c:f1:fd:20:c6:95:32:57:e3:f4:f6:de:8e:
0c:43:c4:8a:9d:90:bd:35:86:36:e4:47:77:8a:73:5b:e2:ca:
0a:89:5f:3e:98:82:7c:12:b5:8a:1c:6a:8e:06:73:b3:1d:00:
88:b9:51:0c:cf:fb:7c:bc:38:f2:07:e4:94:f5:06:d2:a4:18:
61:78:3e:12:b5:15:15:5b:2b:e1:fd:7e:bf:f8:98:27:5c:8d:
09:73:aa:7d:77:24:db:dc:f7:9c:27:43:cb:ab:fb:fc:38:35:
f8:ee:1c:93:6b:b6:80:dd:a7:36:91:cb:08:1a:b1:00:7c:6a:
6b:91:60:eb:05:f9:27:ad:ec:47:3e:ee:de:8c:56:61:f4:f7:
2d:fe:94:b6:4a:35:34:59:59:c6:cf:8a:0b:48:d4:9f:84:e0:
cd:19:14:e4:a5:ff:f8:3e:b0:4f:f0:1e:7f:50:13:05:70:69:
93:78:9e:3a:fb:ff:ed:67:4d:3d:1b:1b:53:09:11:73:4e:c2:
d6:e8:1e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org