Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/8B-cORxtcAbub53ZFxZGzn6I0hk.roa
File: 8B-cORxtcAbub53ZFxZGzn6I0hk.roa (raw, json)
Hash identifier: DdPmYfoazfzBCRV8B72JM2Vltt5eW2tsmaIywDx2kwc=
Subject key identifier: F0:1F:9C:39:1C:6D:70:06:EE:6F:9D:D9:17:16:46:CE:7E:88:D2:19
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 018B46D59CF09B37379A9F58CECE36F11F66
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/8B-cORxtcAbub53ZFxZGzn6I0hk.roa
Signing time: Thu 19 Oct 2023 07:28:06 +0000
ROA not before: Thu 19 Oct 2023 07:28:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8648
IP address blocks: 213.146.96.0/19 maxlen: 24
82.141.0.0/18 maxlen: 24
212.110.96.0/19 maxlen: 24
195.62.96.0/19 maxlen: 24
185.117.248.0/22 maxlen: 24
185.84.80.0/23 maxlen: 24
185.84.82.0/24 maxlen: 24
2a02:248::/32 maxlen: 48
2001:880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Nov 2023 13:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:d5:9c:f0:9b:37:37:9a:9f:58:ce:ce:36:f1:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Oct 19 07:28:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f01f9c391c6d7006ee6f9dd9171646ce7e88d219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:89:bd:4e:ad:f1:e7:64:37:a6:85:74:b9:
a0:13:fd:92:cf:69:28:ce:c1:a9:89:a6:aa:57:30:
70:15:cb:10:b1:9a:38:16:99:4d:dd:f2:69:b2:38:
50:8e:0b:24:ac:63:5e:51:28:f8:ab:e3:0f:73:7f:
0e:d3:75:1c:1a:c4:5c:73:02:8e:f6:50:18:c3:70:
f0:62:26:2a:de:74:2a:a3:a5:9a:4a:92:8f:ff:09:
db:20:de:6c:dc:18:5e:77:20:dd:e0:a0:20:77:4c:
b8:6a:3c:79:e2:9f:b8:6d:11:73:90:d5:f9:fb:47:
6d:57:c1:77:87:87:b1:41:81:e7:7b:1f:d3:6a:84:
6c:16:ce:ee:9a:55:42:6d:5d:60:d6:85:da:4f:34:
e6:63:1c:96:75:60:dd:f3:b3:bf:4b:e9:0a:fc:45:
f4:ff:68:88:73:0d:ce:46:66:09:7c:0d:04:db:8b:
5e:14:91:89:fc:18:70:b0:ee:9d:fc:42:51:f1:52:
69:24:65:30:b1:3f:8f:18:0b:6b:39:6f:0c:7c:23:
58:6c:e2:70:3c:e4:ba:fb:2b:0c:d5:39:6f:64:5a:
5b:1e:b2:2f:bb:bc:b5:7a:4b:d6:64:21:8f:9b:5c:
91:39:fb:4e:9c:ce:ed:d0:26:a5:fe:cb:9c:c1:fb:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:9C:39:1C:6D:70:06:EE:6F:9D:D9:17:16:46:CE:7E:88:D2:19
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/8B-cORxtcAbub53ZFxZGzn6I0hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.141.0.0/18
185.84.80.0-185.84.82.255
185.117.248.0/22
195.62.96.0/19
212.110.96.0/19
213.146.96.0/19
IPv6:
2001:880::/32
2a02:248::/32
Signature Algorithm: sha256WithRSAEncryption
44:9b:dd:f3:ff:ea:8e:f1:a0:e4:66:e8:b3:ba:cd:4f:28:57:
87:9d:ac:25:c2:b1:57:7b:31:5e:1c:40:03:5f:7f:7c:cd:00:
84:80:00:64:4a:da:1d:e8:a8:6c:d8:e4:da:50:e6:fc:66:5c:
c3:5d:73:ae:a6:fe:34:e8:71:0f:ac:6c:5d:1e:56:eb:c7:ab:
02:49:f0:0f:55:ec:3c:6b:50:b5:a5:6b:a8:5d:be:ef:b2:86:
8e:e4:5f:9f:b8:55:d0:33:01:b8:77:0a:ab:5d:23:94:0a:89:
5c:92:67:40:0b:c2:7d:ce:cf:a9:83:0d:26:0a:f7:04:6a:c9:
31:cd:c5:4d:ef:fa:91:44:8f:93:d8:f2:d1:5b:73:73:17:28:
01:27:42:05:97:bd:34:ea:1a:4a:a8:c3:c2:12:be:7e:ab:4d:
e8:9c:e3:04:cb:10:bc:52:b5:7c:4b:dd:72:1e:ce:a3:81:50:
0c:d5:0e:29:1e:f7:76:0a:31:fa:9d:ae:a9:b3:da:27:2c:10:
3a:7f:3b:ad:a9:67:2d:eb:0f:e2:72:de:8d:e5:df:b6:a0:16:
9d:a5:6e:95:1e:1e:bf:6e:30:25:44:b1:11:89:1e:d1:f5:2b:
7b:0c:c5:70:44:c6:60:24:f9:1b:34:38:ed:72:28:82:99:55:
2c:0c:54:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:44 2024 by rpki-client on console-ams.rpki-client.org