Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/IF8ACDTRcWepWVNx06bvpyaETgs.roa
File: IF8ACDTRcWepWVNx06bvpyaETgs.roa (raw, json)
Hash identifier: sKoIVKSPJ6xadufrCao7AmAtV8Z3MnzpkzLCSz5FQq0=
Subject key identifier: 20:5F:00:08:34:D1:71:67:A9:59:53:71:D3:A6:EF:A7:26:84:4E:0B
Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial: 01856DCAFE034A775F9A674A01CFD1BEB738
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/IF8ACDTRcWepWVNx06bvpyaETgs.roa
Signing time: Sun 01 Jan 2023 14:44:57 +0000
ROA not before: Sun 01 Jan 2023 14:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48940
IP address blocks: 176.115.48.0/20 maxlen: 20
62.122.96.0/22 maxlen: 22
62.122.96.0/21 maxlen: 21
62.122.100.0/22 maxlen: 22
94.231.160.0/20 maxlen: 20
94.231.160.0/21 maxlen: 21
94.231.168.0/21 maxlen: 21
46.148.96.0/21 maxlen: 21
46.148.96.0/20 maxlen: 20
176.115.32.0/19 maxlen: 19
176.115.32.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:fe:03:4a:77:5f:9a:67:4a:01:cf:d1:be:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
Validity
Not Before: Jan 1 14:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=205f000834d17167a9595371d3a6efa726844e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b3:8c:a5:d7:73:27:d8:66:66:c6:0e:02:d8:
ea:16:e2:f5:10:c8:7c:bd:e6:ef:b0:a6:5b:a2:99:
48:fa:a8:b1:36:e0:da:f6:2e:c7:0b:d8:6e:a9:b0:
ee:57:49:64:3c:3a:37:05:bf:6b:3c:44:13:74:80:
ed:95:38:9a:d9:80:b7:d9:1c:b9:c9:d5:77:3f:60:
6d:45:14:36:27:94:e2:41:2c:23:53:6f:c0:79:ad:
98:1c:9e:1b:83:a3:75:9a:2f:ba:93:d8:72:5d:c4:
b2:29:26:d2:15:b6:96:d8:0e:4f:1f:18:5d:cf:9d:
f5:d3:56:5b:be:49:49:45:e5:05:c2:c7:82:29:5b:
0e:f3:18:66:1b:f5:15:4a:ae:23:af:f6:04:33:2e:
eb:da:70:b7:74:d3:a2:36:2d:02:57:d9:64:30:b7:
6f:d7:e1:fc:24:3e:ae:aa:bd:d6:f7:8f:37:74:71:
bd:34:f0:c6:c0:c2:1f:55:bf:68:d7:5a:b4:4d:59:
cb:d6:4a:2b:b6:81:62:20:16:d7:0e:01:aa:20:f8:
0b:43:24:3b:1c:99:bf:a4:c2:99:a8:be:c6:b0:bd:
81:84:2e:c9:da:2a:85:03:9d:7b:ab:a8:47:23:ef:
23:e2:9a:e5:0c:c6:9b:b1:de:57:51:6c:20:50:d9:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5F:00:08:34:D1:71:67:A9:59:53:71:D3:A6:EF:A7:26:84:4E:0B
X509v3 Authority Key Identifier:
keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/IF8ACDTRcWepWVNx06bvpyaETgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.96.0/20
62.122.96.0/21
94.231.160.0/20
176.115.32.0/19
Signature Algorithm: sha256WithRSAEncryption
68:7f:71:83:b2:a5:ff:28:e7:96:23:4f:64:49:54:de:92:fb:
cf:36:ee:35:49:81:e4:7f:20:34:93:20:26:b9:0d:14:81:84:
4f:30:b5:c4:09:41:cd:23:65:c2:38:d5:0a:05:3a:46:06:4d:
c4:fd:3a:38:a3:e0:49:18:b9:90:6d:0c:23:f3:3a:cb:1a:65:
aa:de:84:70:f6:48:bc:ce:b1:37:b0:d5:cf:54:39:d8:42:79:
7f:f3:72:78:92:99:9b:97:db:e8:ef:2e:ba:f1:51:f2:bd:67:
da:51:92:5d:10:92:20:a1:6c:ac:69:c9:4b:4b:f2:8d:86:c6:
4b:f3:d8:41:56:1c:7b:f6:dc:76:db:ec:be:4d:0a:c9:16:18:
54:fd:93:28:57:f9:a9:fe:3d:07:6f:4c:0a:66:29:af:e5:89:
22:de:41:6f:bc:4b:fb:ce:38:96:a9:b5:1c:2e:3f:ba:dc:c8:
68:55:1c:c7:92:a6:42:59:9b:01:0c:7e:29:e6:8b:d1:42:b9:
01:1a:60:77:ff:fa:b7:9f:06:48:5d:0a:38:f7:53:a0:a9:0e:
cd:cb:92:97:4e:aa:27:e2:c9:74:f4:08:47:12:63:0a:64:5b:
85:da:11:e6:cc:ea:a3:5e:fc:eb:29:b7:72:30:46:26:52:6e:
8c:09:e5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:55 2024 by rpki-client on console-ams.rpki-client.org