Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Er_Fmp_eHcz0_lBjUlA3rnv2fmE.roa
File: Er_Fmp_eHcz0_lBjUlA3rnv2fmE.roa (raw, json)
Hash identifier: MpmbtdCphQPbR/SUBR+43FSRh2n8+o1Xc31jmQf+3S4=
Subject key identifier: 12:BF:C5:9A:9F:DE:1D:CC:F4:FE:50:63:52:50:37:AE:7B:F6:7E:61
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01887CC17195507B10B8027252E50C5C0DDB
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Er_Fmp_eHcz0_lBjUlA3rnv2fmE.roa
Signing time: Fri 02 Jun 2023 15:37:12 +0000
ROA not before: Fri 02 Jun 2023 15:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 195.80.50.0/24 maxlen: 24
195.80.51.0/24 maxlen: 24
85.92.110.0/24 maxlen: 24
45.8.96.0/24 maxlen: 24
45.8.97.0/24 maxlen: 24
37.220.80.0/24 maxlen: 24
94.198.217.0/24 maxlen: 24
94.198.218.0/24 maxlen: 24
94.198.219.0/24 maxlen: 24
94.198.216.0/24 maxlen: 24
81.200.144.0/24 maxlen: 24
81.200.145.0/24 maxlen: 24
81.200.150.0/24 maxlen: 24
81.200.151.0/24 maxlen: 24
81.200.152.0/24 maxlen: 24
81.200.146.0/24 maxlen: 24
81.200.147.0/24 maxlen: 24
81.200.148.0/24 maxlen: 24
81.200.149.0/24 maxlen: 24
81.200.153.0/24 maxlen: 24
46.19.64.0/24 maxlen: 24
46.19.67.0/24 maxlen: 24
46.19.65.0/24 maxlen: 24
46.19.66.0/24 maxlen: 24
92.118.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 15:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:c1:71:95:50:7b:10:b8:02:72:52:e5:0c:5c:0d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jun 2 15:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12bfc59a9fde1dccf4fe5063525037ae7bf67e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:e9:65:da:f6:ae:83:45:d3:4a:cc:d9:7c:
28:1d:f3:dc:19:3a:4b:02:52:0e:a0:ef:81:c2:7e:
6d:30:ab:c9:6a:04:5c:b0:29:0f:51:59:b9:8d:2a:
83:83:f8:23:44:da:67:e0:42:5e:17:ed:74:d4:f9:
70:8c:a7:9d:f9:6a:aa:15:45:e4:08:7d:85:14:ce:
5d:2a:91:ef:9c:71:73:75:f2:f6:67:20:50:0f:1c:
bd:80:1c:d3:5a:6c:1b:df:0b:28:39:3c:f2:1d:8e:
d3:3c:a6:ed:91:e7:50:f7:ac:4e:d6:b3:94:d7:94:
d0:67:78:15:27:b6:60:6a:68:bb:74:d0:f4:14:f0:
5a:84:f4:7b:cd:70:e7:81:4c:fe:05:a9:ea:37:da:
93:5c:2a:fb:df:df:d7:39:7f:63:ad:e9:e2:ca:58:
39:23:e7:74:28:35:f2:76:a3:d6:9a:a7:ed:e1:eb:
5e:1f:12:08:6b:bc:94:58:e0:bc:a9:85:1f:77:81:
a8:b1:aa:c2:69:85:46:e4:6a:b0:be:3e:72:fc:57:
df:5d:f6:68:53:77:94:22:01:f3:f4:55:e9:d0:3d:
44:17:39:5f:0b:c8:cb:d7:f9:bb:d1:5b:f1:54:aa:
9c:4c:f8:a0:05:21:d1:a9:ef:82:da:a3:ba:cd:8a:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BF:C5:9A:9F:DE:1D:CC:F4:FE:50:63:52:50:37:AE:7B:F6:7E:61
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Er_Fmp_eHcz0_lBjUlA3rnv2fmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.80.0/24
45.8.96.0/23
46.19.64.0/22
81.200.144.0-81.200.153.255
85.92.110.0/24
92.118.114.0/24
94.198.216.0/22
195.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:19:10:a6:c1:64:a9:b8:f3:fd:0f:64:f7:4b:50:6a:94:6c:
01:8c:db:eb:53:14:ef:3e:c8:1f:47:89:14:2b:d6:8e:b8:16:
ef:db:72:44:35:72:bf:f7:ec:7c:93:b2:9e:d2:a7:41:1f:e9:
2d:d4:2b:a3:f4:96:ca:a5:b4:ba:b5:e6:92:de:e6:2e:52:4e:
e7:48:41:be:98:49:bb:31:46:75:bd:21:09:97:ee:f2:d9:f5:
f4:36:e7:4a:57:eb:2b:d2:7e:dd:24:a9:fe:95:c1:d2:d3:42:
7c:c8:6d:5c:b2:2b:03:84:1b:93:00:51:70:67:9c:fb:a1:85:
86:bf:3a:e0:28:82:3a:e4:48:1c:b2:2f:e7:e4:bb:07:0a:01:
d9:4d:ea:7d:48:a4:d3:03:27:5d:83:a5:52:a3:a3:25:78:ce:
7c:78:86:45:c4:9a:23:b0:e3:15:54:7b:60:d3:a4:80:a8:02:
c6:c9:41:a4:e2:87:2d:38:e2:e2:cb:ea:51:18:dc:1d:34:78:
b1:3a:a5:5b:28:39:77:e9:ef:4d:1c:7f:4b:8e:4a:fe:4b:49:
88:a8:7e:7c:c9:7b:1d:79:df:49:a4:d6:2b:f7:d6:da:d7:57:
78:ee:07:74:c9:91:8a:41:c5:43:4c:3d:7e:6b:c6:46:f5:35:
0e:6b:0c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:54 2024 by rpki-client on console-fra.rpki-client.org