Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/9BgZFBbbv2VslxklCOvB7isdHKc.roa
File: 9BgZFBbbv2VslxklCOvB7isdHKc.roa (raw, json)
Hash identifier: HvtQvNgR8tmsmdyLn2WyeLPzAFtAP1wprFq3z5Tslfo=
Subject key identifier: F4:18:19:14:16:DB:BF:65:6C:97:19:25:08:EB:C1:EE:2B:1D:1C:A7
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 01856C1CBF851BA48B027A8914BE2E0C3A98
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/9BgZFBbbv2VslxklCOvB7isdHKc.roa
Signing time: Sun 01 Jan 2023 06:55:01 +0000
ROA not before: Sun 01 Jan 2023 06:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12876
IP address blocks: 62.4.0.0/19 maxlen: 19
212.83.160.0/19 maxlen: 19
212.47.224.0/19 maxlen: 19
62.210.0.0/16 maxlen: 16
195.154.0.0/16 maxlen: 16
212.83.128.0/19 maxlen: 19
212.129.0.0/18 maxlen: 18
2001:bc8::/32 maxlen: 38
2001:bc8:1400::/38 maxlen: 38
2001:bc8:1800::/38 maxlen: 38
2001:bc8:1c00::/38 maxlen: 38
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:bf:85:1b:a4:8b:02:7a:89:14:be:2e:0c:3a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Jan 1 06:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f418191416dbbf656c97192508ebc1ee2b1d1ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:07:a1:4a:6b:4c:44:4a:3d:2a:5d:59:aa:
89:be:6e:61:dc:62:0a:4e:30:6e:fe:25:d5:f3:b3:
78:be:ae:58:97:6e:e3:0b:54:54:a0:92:a4:67:6d:
f3:81:70:cc:33:3f:73:95:3e:17:bb:df:c7:02:28:
4c:02:42:f3:63:4f:e7:47:1f:09:f6:37:e6:9c:2b:
8c:f5:8d:79:8f:9a:d8:8e:56:68:ea:e9:62:1a:ce:
35:be:f5:f8:d7:b3:2d:3e:d4:30:a0:7a:27:20:ea:
b3:d3:e8:27:99:43:19:b1:bb:25:96:ab:a7:c7:52:
e0:54:de:e4:4a:8e:80:02:36:dd:44:92:fd:01:2d:
80:00:d4:95:6a:fc:e7:45:6c:ca:32:ec:0d:45:b0:
de:2c:8b:93:09:ce:ac:d8:62:6f:37:8f:4d:12:43:
95:87:89:58:59:ac:7c:28:ea:d8:dd:e8:82:6d:db:
ce:59:7f:e0:c7:35:9f:1a:fb:d8:ed:57:e4:78:df:
49:b8:55:58:49:68:62:42:61:39:e8:75:c2:35:a6:
18:0c:26:62:1e:d5:07:6e:e1:21:95:8a:d0:f1:2f:
24:b6:48:91:16:7a:a0:d1:a0:c0:14:9d:09:0a:5e:
4d:08:39:bc:f6:f5:25:5f:65:bd:54:08:0c:90:0d:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:19:14:16:DB:BF:65:6C:97:19:25:08:EB:C1:EE:2B:1D:1C:A7
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/9BgZFBbbv2VslxklCOvB7isdHKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.0.0/19
62.210.0.0/16
195.154.0.0/16
212.47.224.0/19
212.83.128.0/18
212.129.0.0/18
IPv6:
2001:bc8::/32
Signature Algorithm: sha256WithRSAEncryption
5a:f8:fe:c3:43:07:f0:9d:7d:f5:c6:ff:7e:a5:3d:b2:f2:90:
4f:5b:e0:ef:dd:0a:7f:ec:31:b6:bf:0b:03:ce:63:6b:6b:ca:
83:d0:cf:72:ab:88:ff:22:b3:d9:89:a5:08:9f:a0:89:54:e5:
36:ad:b3:ba:96:42:6e:e9:12:dd:e2:ea:18:a6:fe:48:57:14:
bf:b3:fd:63:d7:1e:2f:9b:2b:77:0c:c4:e1:d0:58:b1:e7:6d:
97:17:0a:df:b3:e5:b5:2a:80:d7:bd:6c:25:5c:8c:ca:51:17:
17:51:a7:8c:0f:60:54:62:47:2f:77:a4:7c:60:06:2c:ee:b8:
b6:58:4a:e4:e8:0e:6f:99:ec:a0:71:0e:1e:f2:5c:0a:00:b8:
f9:9d:f3:fe:c9:98:ce:30:ec:82:c4:29:b6:8b:95:e5:a4:74:
d6:e6:b2:da:be:89:77:1d:fc:f8:fc:06:8e:f7:fd:7d:a9:1a:
47:6e:5b:0b:1c:51:c4:2d:d2:57:1a:e1:1f:e7:17:b1:ab:4b:
66:bb:06:1d:8d:ed:4a:39:4a:c3:16:a3:86:9a:de:e3:a4:fa:
d8:3a:be:74:ff:72:df:65:dc:17:97:4a:13:c9:bd:1a:b5:3a:
ab:65:46:be:07:06:2b:b6:fa:31:82:8d:c4:b1:20:fa:29:3e:
70:30:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:01 2024 by rpki-client on console-fra.rpki-client.org