Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/lXo6X-MIr759mDqorwm_syPd1KI.roa
File: lXo6X-MIr759mDqorwm_syPd1KI.roa (raw, json)
Hash identifier: /r7CH3uDsziipKeQyYm2lZii81CjxHWmeYoIF6CJDN4=
Subject key identifier: 95:7A:3A:5F:E3:08:AF:BE:7D:98:3A:A8:AF:09:BF:B3:23:DD:D4:A2
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 018AB16F360912B318B7B7F09688B6ED9D1F
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/lXo6X-MIr759mDqorwm_syPd1KI.roa
Signing time: Wed 20 Sep 2023 07:12:50 +0000
ROA not before: Wed 20 Sep 2023 07:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8648
IP address blocks: 213.146.96.0/19 maxlen: 24
82.141.0.0/18 maxlen: 24
212.110.96.0/19 maxlen: 24
195.62.96.0/19 maxlen: 24
185.117.248.0/22 maxlen: 24
185.84.80.0/23 maxlen: 24
185.84.82.0/24 maxlen: 24
2a02:248::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Oct 2023 07:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:6f:36:09:12:b3:18:b7:b7:f0:96:88:b6:ed:9d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Sep 20 07:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=957a3a5fe308afbe7d983aa8af09bfb323ddd4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:4f:fa:a8:f7:41:7c:a4:d8:b2:b1:f0:51:
d9:fe:ca:4f:8f:10:a8:63:32:60:8f:fb:99:68:4c:
92:99:21:c3:ce:c3:08:32:1a:31:52:a0:e0:e1:22:
a7:15:55:cb:48:7c:82:0a:f3:98:96:45:ec:1b:32:
a3:99:0f:4a:ec:2b:d5:c5:d9:7d:08:1e:cc:cb:d1:
f3:2e:be:27:9b:a9:20:66:4d:43:94:69:67:bc:cb:
3d:e4:3f:77:dc:1c:c8:b9:e0:4b:e9:ac:11:df:83:
b2:0e:bc:2d:a3:07:37:9b:a8:cc:1b:1a:a4:99:42:
78:fa:6b:ab:1c:59:59:32:2b:f6:90:67:c2:9d:50:
4c:1a:b4:88:45:2c:71:d5:0b:f8:c8:30:bf:ed:e4:
ed:6a:31:ab:15:15:53:99:4b:6a:c9:4a:78:09:5f:
9a:f6:41:3a:a8:47:90:eb:78:bb:29:89:0c:0e:18:
40:9a:3a:68:2f:21:93:5e:3a:7a:6a:c9:d8:c6:33:
0d:09:1a:f1:a3:1a:ad:31:f3:5c:b7:02:b4:1b:5c:
21:4a:22:7b:ec:4a:b3:1f:d2:42:83:96:4d:ce:a5:
1a:40:70:4e:c5:0f:71:4a:11:b4:05:97:27:90:e5:
92:a8:91:3e:2f:b5:db:df:27:d9:db:a0:7f:c5:21:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:3A:5F:E3:08:AF:BE:7D:98:3A:A8:AF:09:BF:B3:23:DD:D4:A2
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/lXo6X-MIr759mDqorwm_syPd1KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.141.0.0/18
185.84.80.0-185.84.82.255
185.117.248.0/22
195.62.96.0/19
212.110.96.0/19
213.146.96.0/19
IPv6:
2a02:248::/32
Signature Algorithm: sha256WithRSAEncryption
7e:cf:8d:5d:8b:7e:49:bd:9d:56:ef:82:4f:06:2b:8f:ce:93:
fa:52:dc:6d:ed:ae:16:57:0a:79:a3:af:71:02:2d:02:82:7c:
ac:7e:5c:49:8d:d8:74:bd:bf:82:c3:f5:9b:f5:9a:92:f0:80:
54:47:e3:aa:15:84:18:33:de:b5:a7:67:d0:01:54:58:62:97:
1a:71:f3:fa:65:53:fe:f7:38:68:3b:97:a8:b7:cc:ec:b3:3f:
7f:cb:2f:d8:bf:64:32:22:eb:be:66:d3:5f:7b:7f:29:68:01:
fe:65:52:70:d0:37:a5:ca:98:c9:9a:36:da:48:01:b0:d8:45:
d5:b4:b2:73:cc:38:37:d5:df:67:a4:00:2a:c1:cb:e3:be:58:
de:6d:b9:23:d9:10:cd:a6:ae:e6:e5:fd:7a:5d:ea:b9:e6:81:
54:b1:e2:95:e7:85:95:a8:a4:e7:29:6a:f6:3e:b0:53:6d:c4:
2e:2d:76:f8:8e:a9:1a:64:d2:4b:de:a3:03:95:ba:53:d6:84:
67:aa:0f:2c:31:6d:b9:bb:89:43:69:1c:bc:87:7f:fe:a3:76:
0c:37:df:77:f9:06:1f:3e:49:fe:67:53:ac:8f:34:53:aa:8a:
46:f8:20:74:12:12:9e:66:5b:10:23:ee:6e:45:3f:f4:40:3a:
4d:8b:b8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:44 2024 by rpki-client on console-fra.rpki-client.org