Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/_S7vAnzTo7yYR8YtA8RmP20ZeUo.roa
File: _S7vAnzTo7yYR8YtA8RmP20ZeUo.roa (raw, json)
Hash identifier: AfdxYp8AQXTz6WPQTkYqT53qATL3EZCAndQOJUz44AU=
Subject key identifier: FD:2E:EF:02:7C:D3:A3:BC:98:47:C6:2D:03:C4:66:3F:6D:19:79:4A
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 018571F0DFAB91D04F9A4309B759CB448F5C
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/_S7vAnzTo7yYR8YtA8RmP20ZeUo.roa
Signing time: Mon 02 Jan 2023 10:04:49 +0000
ROA not before: Mon 02 Jan 2023 10:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50231
IP address blocks: 81.30.136.0/23 maxlen: 23
81.30.140.0/22 maxlen: 22
193.150.44.0/22 maxlen: 22
193.150.42.0/23 maxlen: 23
109.95.232.0/21 maxlen: 21
193.34.220.0/22 maxlen: 22
193.17.54.0/24 maxlen: 24
109.196.48.0/20 maxlen: 20
193.27.210.0/23 maxlen: 23
91.123.208.0/20 maxlen: 20
213.5.136.0/21 maxlen: 21
80.65.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:df:ab:91:d0:4f:9a:43:09:b7:59:cb:44:8f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Jan 2 10:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd2eef027cd3a3bc9847c62d03c4663f6d19794a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:20:f1:91:6a:a7:86:38:1c:11:e8:6b:e2:
5b:9e:3b:e5:62:5d:d5:c9:14:6b:c3:92:05:86:79:
af:8b:3a:e1:29:3b:95:9b:b3:14:af:6b:2a:ae:7f:
ae:95:5e:dd:4f:52:9b:00:38:da:f6:d3:52:8c:f3:
4f:d7:d0:3a:89:63:7b:1c:db:3e:b9:4b:c0:77:be:
80:fb:c8:62:af:b2:fb:ae:e9:56:f1:c9:71:72:af:
0d:11:45:f9:e8:1e:71:0f:da:76:20:9d:73:0a:49:
f7:c2:bf:23:27:8c:1c:62:26:80:d4:dc:61:98:a4:
a2:89:61:76:58:fb:e8:96:b4:28:a0:27:a0:c2:73:
05:d7:11:ab:92:b3:c1:18:95:3a:18:f1:76:0e:fc:
03:70:9b:a3:30:5d:13:1f:05:56:ea:bd:0c:58:d1:
47:0f:9c:26:1c:f0:a5:64:23:b3:53:05:75:1e:e2:
42:5d:4b:7d:f0:f9:63:87:c0:03:b3:83:71:0f:6b:
b6:91:50:23:c7:b1:c9:b8:79:74:f7:ae:51:92:08:
e5:7e:d0:53:0f:0e:db:27:51:87:ec:d9:da:e2:3e:
aa:28:11:e9:e5:df:dc:bc:d6:4c:a7:d9:ce:b7:65:
3b:ea:62:1a:c7:60:99:e0:a8:31:5b:ec:91:64:6f:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2E:EF:02:7C:D3:A3:BC:98:47:C6:2D:03:C4:66:3F:6D:19:79:4A
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/_S7vAnzTo7yYR8YtA8RmP20ZeUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.212.0/22
81.30.136.0/23
81.30.140.0/22
91.123.208.0/20
109.95.232.0/21
109.196.48.0/20
193.17.54.0/24
193.27.210.0/23
193.34.220.0/22
193.150.42.0-193.150.47.255
213.5.136.0/21
Signature Algorithm: sha256WithRSAEncryption
69:6a:25:33:52:88:07:96:1a:cc:b3:27:b8:ac:6d:e6:5c:0d:
45:c9:a6:5b:ae:14:9c:b9:b0:4f:53:75:0c:9e:94:7c:a5:c8:
1b:62:01:91:74:1a:cf:b1:68:d8:da:99:71:ea:c3:82:b5:9a:
c7:b4:24:b1:a6:10:9d:be:d1:b8:bf:e8:b5:89:09:0d:c1:60:
0b:aa:b5:27:e2:a5:9a:1b:47:d0:fa:a5:b6:81:01:29:66:67:
e0:87:b3:7b:4f:51:50:84:d0:31:59:3f:f2:b1:ae:3a:8c:0d:
a0:f4:4c:6e:6a:cf:34:1d:0b:b2:14:41:9c:1a:ef:0c:96:58:
81:fc:59:cd:c1:eb:0e:b4:2d:2a:30:94:c2:20:a9:0b:c7:8b:
85:6d:16:49:49:7b:c0:60:80:5c:52:57:fc:7d:be:37:9e:80:
d6:2c:fe:ff:4e:d6:31:3b:dc:38:ed:da:dd:8f:fc:1a:a6:1d:
89:e8:68:df:e5:c4:02:84:41:3d:00:27:d4:0e:db:2b:20:30:
c1:75:d2:33:b4:66:90:16:a1:9f:a6:69:48:66:13:cf:81:dc:
05:04:19:b4:f3:c5:52:b5:09:4b:3c:9b:1f:4f:8c:f5:2a:0c:
c4:2d:44:8d:4a:95:0e:eb:1c:5f:b2:3a:f4:21:bc:d0:27:3e:
bf:00:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:55 2024 by rpki-client on console-ams.rpki-client.org