Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/p6HCviD0ldRjCeLLinIGqKT4fL8.roa
File: p6HCviD0ldRjCeLLinIGqKT4fL8.roa (raw, json)
Hash identifier: VbJBFWfTlPiCGm+CEipan+SemnxBZcH7txqUQW+hy/8=
Subject key identifier: A7:A1:C2:BE:20:F4:95:D4:63:09:E2:CB:8A:72:06:A8:A4:F8:7C:BF
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570305BE6A32E478ECC2AB154C9732F9E
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/p6HCviD0ldRjCeLLinIGqKT4fL8.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15555
IP address blocks: 81.182.245.0/24 maxlen: 24
84.1.30.0/23 maxlen: 23
84.1.32.0/23 maxlen: 23
84.2.224.0/21 maxlen: 21
84.2.226.0/24 maxlen: 24
195.228.156.0/23 maxlen: 23
195.228.82.0/23 maxlen: 23
195.228.80.0/23 maxlen: 23
62.201.96.0/21 maxlen: 21
194.149.58.0/24 maxlen: 24
188.36.224.0/23 maxlen: 23
195.228.224.0/23 maxlen: 23
188.36.228.0/24 maxlen: 24
188.36.227.0/24 maxlen: 24
195.228.236.0/24 maxlen: 24
195.228.240.0/24 maxlen: 24
195.228.240.0/20 maxlen: 20
195.228.243.0/24 maxlen: 24
195.228.244.0/24 maxlen: 24
188.6.167.0/24 maxlen: 24
195.228.249.0/24 maxlen: 24
195.228.250.0/24 maxlen: 24
195.228.251.0/24 maxlen: 24
195.228.248.0/24 maxlen: 24
195.228.253.0/24 maxlen: 24
195.228.163.0/24 maxlen: 24
195.228.203.0/24 maxlen: 24
84.1.118.0/23 maxlen: 23
188.6.252.0/23 maxlen: 23
188.6.250.0/23 maxlen: 23
81.183.232.0/23 maxlen: 23
81.183.238.0/23 maxlen: 23
80.249.160.0/20 maxlen: 20
84.2.40.0/23 maxlen: 23
84.2.44.0/23 maxlen: 23
84.2.41.0/24 maxlen: 24
84.2.46.0/23 maxlen: 23
84.2.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5b:e6:a3:2e:47:8e:cc:2a:b1:54:c9:73:2f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7a1c2be20f495d46309e2cb8a7206a8a4f87cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:0c:44:d9:f6:20:de:5a:02:95:02:54:4b:
cd:fb:35:93:43:2a:2e:45:9b:e6:e5:7d:5c:26:9a:
58:a3:15:62:9a:9f:73:1b:da:fd:16:5d:fd:92:12:
ce:ad:e8:1a:1d:1e:9c:1e:b9:30:88:50:c3:f3:ab:
91:36:ea:b3:97:90:7f:03:7c:43:2b:02:c6:6e:05:
41:a8:ec:92:f4:a8:9c:d0:24:c4:5f:ac:cb:78:79:
45:0a:5f:43:10:3b:52:1a:ea:b2:42:49:c7:28:7b:
3e:b3:92:71:4b:a8:b2:30:79:c5:e8:59:7e:af:03:
a4:14:e6:79:f4:e5:81:e5:ba:52:6f:6f:d5:be:f0:
7c:fe:54:84:c8:fc:c0:3b:e5:08:cf:26:a3:f5:51:
49:96:f9:ac:f1:af:79:6e:f2:5c:96:d0:28:78:a6:
2e:66:f0:51:b4:64:8a:14:54:ea:ac:46:b2:ae:40:
a6:99:07:02:55:22:74:b6:d8:ac:2a:4b:2f:46:9e:
c2:b9:93:1c:b1:52:14:da:3c:e1:99:7a:27:3d:fe:
be:e8:50:5e:53:2a:ba:ff:5d:6a:ce:04:19:25:b1:
2c:6d:1c:32:3a:04:39:49:db:d4:ad:68:a1:20:22:
fd:80:bc:27:ec:4f:d8:e4:e4:48:97:2c:b8:83:40:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:C2:BE:20:F4:95:D4:63:09:E2:CB:8A:72:06:A8:A4:F8:7C:BF
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/p6HCviD0ldRjCeLLinIGqKT4fL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.96.0/21
80.249.160.0/20
81.182.245.0/24
81.183.232.0/23
81.183.238.0/23
84.1.30.0-84.1.33.255
84.1.118.0/23
84.2.40.0/23
84.2.44.0/22
84.2.56.0/23
84.2.224.0/21
188.6.167.0/24
188.6.250.0-188.6.253.255
188.36.224.0/23
188.36.227.0-188.36.228.255
194.149.58.0/24
195.228.80.0/22
195.228.156.0/23
195.228.163.0/24
195.228.203.0/24
195.228.224.0/23
195.228.236.0/24
195.228.240.0/20
Signature Algorithm: sha256WithRSAEncryption
60:36:70:16:9e:5f:77:b5:73:0f:1c:3e:77:11:6d:37:b6:75:
f8:48:30:58:af:f8:60:34:87:22:84:f2:ea:1d:fb:06:fd:54:
17:b0:54:a9:8c:8c:2e:de:e9:ab:ac:76:97:d0:d6:49:7e:8f:
0e:b3:ba:e0:c6:3c:f8:1b:52:42:4c:97:b5:f1:73:56:bf:0a:
60:2b:91:10:f6:0f:01:a1:4b:bb:d1:b5:89:27:c9:ad:9d:dd:
bc:cb:5c:32:7c:55:eb:7b:d5:b6:df:7e:38:88:53:4a:a2:64:
55:b5:e8:f3:24:5d:f6:71:0a:55:72:74:8c:fd:cc:e6:89:6f:
ef:29:d0:b5:2f:98:25:c9:12:c4:d4:eb:eb:3e:06:c3:d8:75:
75:94:8f:d1:b5:a5:f8:bf:65:5f:7e:a2:69:b4:7b:53:05:7d:
b0:72:00:44:9b:38:47:a6:21:de:40:50:b4:40:f3:24:d7:93:
b3:3b:bd:02:2a:dc:8d:5d:a1:b7:db:0b:80:d2:a1:34:5c:e4:
3a:02:67:0c:c2:36:a9:bc:37:12:d7:30:b8:1d:98:37:4e:c0:
60:9e:cc:4a:05:66:57:33:29:b3:42:21:7d:14:60:29:a3:39:
34:22:22:d1:53:00:b2:bc:3f:18:ab:f3:21:6a:01:88:3c:1c:
c6:fb:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org