Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/j6InN6cx2jKGlXvmxB28-g7LXP4.roa
File: j6InN6cx2jKGlXvmxB28-g7LXP4.roa (raw, json)
Hash identifier: meHnpbHzO3uKADUgCVSp0fWAsxWSr3sOSReoGuQEysQ=
Subject key identifier: 8F:A2:27:37:A7:31:DA:32:86:95:7B:E6:C4:1D:BC:FA:0E:CB:5C:FE
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 01856D13E02E5F90E7CC94502C7AF43D330F
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/j6InN6cx2jKGlXvmxB28-g7LXP4.roa
Signing time: Sun 01 Jan 2023 11:24:56 +0000
ROA not before: Sun 01 Jan 2023 11:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31435
IP address blocks: 82.146.22.0/24 maxlen: 24
82.146.20.0/23 maxlen: 23
82.146.26.0/23 maxlen: 23
84.238.208.0/21 maxlen: 21
84.238.220.0/23 maxlen: 23
84.238.220.0/22 maxlen: 22
84.238.224.0/22 maxlen: 22
84.238.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 11:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:e0:2e:5f:90:e7:cc:94:50:2c:7a:f4:3d:33:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Jan 1 11:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fa22737a731da3286957be6c41dbcfa0ecb5cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:1f:eb:3c:af:a7:9b:b6:df:3f:7c:aa:89:
29:ca:03:44:0a:cf:9c:6a:bc:e3:e1:44:8a:50:ca:
6f:18:48:0b:a2:38:35:46:0c:51:7f:c3:7b:91:ff:
30:22:0b:44:1e:c7:64:35:24:bc:fa:74:dc:25:cf:
55:20:5a:81:46:74:99:c6:5d:ad:dc:b0:23:51:d6:
67:a7:f3:72:d3:10:9d:c0:12:84:ae:57:0a:c8:07:
54:f4:c2:aa:f6:61:37:fb:41:b1:25:a4:ce:29:22:
fe:36:2a:12:30:c1:c2:fc:72:08:7f:51:73:64:76:
fa:a1:9c:38:59:ba:07:73:c0:bc:a9:8a:12:0a:0d:
9c:3d:4a:fd:0d:63:e6:46:9a:d6:10:b8:1e:cd:db:
f9:d7:bd:4e:a6:f7:88:f1:01:f5:8f:cf:05:7d:35:
5b:a7:5b:03:ed:8a:b1:1a:ea:31:69:a5:53:10:69:
b8:ac:84:26:c3:bb:4c:cd:b5:6a:ba:71:d1:95:9e:
76:ea:54:d7:13:44:e4:4c:7e:c5:75:1c:5e:0c:df:
ec:46:b9:76:86:6d:4a:e9:5c:e8:19:2d:1b:c8:45:
0d:16:6c:ed:af:23:43:4b:03:48:68:be:ec:7c:75:
ab:46:42:0a:90:e2:91:be:98:c8:bc:c0:1b:f0:27:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:27:37:A7:31:DA:32:86:95:7B:E6:C4:1D:BC:FA:0E:CB:5C:FE
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/j6InN6cx2jKGlXvmxB28-g7LXP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.20.0-82.146.22.255
82.146.26.0/23
84.238.208.0/21
84.238.220.0-84.238.227.255
Signature Algorithm: sha256WithRSAEncryption
7c:28:c8:1c:15:39:1a:0f:a9:20:b7:73:48:ac:9a:57:a5:51:
db:a2:1f:4e:50:af:99:3a:d8:f7:55:09:bd:22:06:62:37:20:
a4:51:8f:e0:70:3e:d3:b8:e6:93:f9:0e:e7:a6:36:8d:dd:ba:
49:c1:14:e5:2a:cb:35:cb:7f:af:be:55:f6:14:d3:b2:d4:83:
7c:28:b1:34:5c:88:66:a3:a0:71:25:51:a5:18:84:5b:1d:89:
62:21:89:55:0f:5d:2d:c8:d7:f5:6a:54:90:eb:ff:ee:fb:74:
df:e4:7a:af:c8:c6:01:ad:d5:7d:ed:b2:b2:1d:ee:4f:1d:1c:
17:8f:f2:95:94:64:ca:4e:17:fe:41:d9:4c:3b:e1:c2:58:cf:
55:03:bc:c6:69:93:2d:4b:eb:44:13:d5:92:fa:96:1f:b8:3f:
d9:43:da:18:2c:49:34:a3:ba:6d:38:3e:db:7c:f3:fc:c2:17:
57:c2:54:da:b6:28:d3:6d:d5:01:1b:b5:da:6f:7a:05:9f:3b:
43:56:6a:d8:4c:6e:99:76:39:ec:57:e7:fb:2a:3c:a2:aa:c7:
e7:5c:db:9e:6f:28:56:ac:6b:a2:6e:64:a8:9c:db:52:4a:62:
13:45:42:c3:bb:d8:76:50:9a:2a:1a:3d:57:d7:f6:ad:0c:02:
0b:67:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org