Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/_E-4pLItES1Inae5HiF80k_faEo.roa
File: _E-4pLItES1Inae5HiF80k_faEo.roa (raw, json)
Hash identifier: I+/KbUYawpJIg5MSB5hp1bMCVSTvbA+drlClqLOv80A=
Subject key identifier: FC:4F:B8:A4:B2:2D:11:2D:48:9D:A7:B9:1E:21:7C:D2:4F:DF:68:4A
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018AB6E6DAC387926A21A966421A601E4AEF
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/_E-4pLItES1Inae5HiF80k_faEo.roa
Signing time: Thu 21 Sep 2023 08:41:37 +0000
ROA not before: Thu 21 Sep 2023 08:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12462
IP address blocks: 212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
212.66.160.0/24 maxlen: 24
185.123.120.0/22 maxlen: 24
2a0c:f5c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:e6:da:c3:87:92:6a:21:a9:66:42:1a:60:1e:4a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Sep 21 08:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc4fb8a4b22d112d489da7b91e217cd24fdf684a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:58:10:b2:e0:83:9b:78:1a:c7:eb:36:46:
8b:c0:6c:a0:f8:70:c0:d2:a5:c0:a1:ea:62:ed:82:
b0:4b:c4:91:af:e8:79:94:a4:fb:e8:bf:0d:fe:24:
c1:89:85:e6:18:e7:e9:90:d2:a2:6e:a9:b8:03:26:
00:af:32:53:77:6f:b0:c2:65:90:46:63:0b:44:50:
eb:5a:d7:3c:81:6e:1e:60:c5:58:5e:00:a7:61:f8:
20:34:79:00:91:70:28:af:eb:26:10:dd:ae:d5:58:
7d:64:76:97:b2:f8:4e:55:ab:26:95:39:18:ef:8e:
b6:fe:b8:78:4e:53:03:22:2d:b6:8a:3a:37:45:ab:
d8:11:e2:92:ee:1b:30:39:0a:97:2f:e4:dc:4f:0b:
a1:08:5b:f5:de:fe:81:ae:11:d0:41:bb:72:7d:de:
be:9c:ee:7f:b8:28:5c:a3:d0:2f:bc:cd:31:79:f9:
3b:40:8a:6b:e7:3c:94:b1:7b:38:4a:ee:e3:3d:fe:
a4:4b:98:9c:d7:e2:9f:bf:87:84:6d:9b:a7:89:d7:
26:2f:3e:9e:3b:cc:04:65:dd:4f:65:26:a3:57:6d:
4d:df:46:bd:b6:92:18:52:ae:4b:56:32:9f:ff:71:
36:e4:25:3c:5c:2c:9f:a4:b1:e6:08:81:1a:5c:36:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:B8:A4:B2:2D:11:2D:48:9D:A7:B9:1E:21:7C:D2:4F:DF:68:4A
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/_E-4pLItES1Inae5HiF80k_faEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.66.160.0/24
212.80.160.0/19
213.170.32.0/19
IPv6:
2a0c:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
86:8f:9b:25:18:d3:55:59:45:8c:87:96:7d:5d:e6:12:1e:a0:
a0:9a:c1:6f:28:ce:cb:95:2d:01:1c:b0:2e:79:2f:63:5b:f3:
1d:7b:dd:76:2b:c7:42:64:96:50:19:36:5e:9c:7b:37:db:97:
66:9c:7a:f5:00:fb:33:9f:2d:48:8a:5c:40:cf:10:05:1f:04:
69:e9:3c:11:bc:b8:33:54:e7:87:1f:bd:b5:9e:06:c4:a8:2a:
c6:d9:ee:17:13:6b:5a:a7:87:f6:70:bd:3a:ea:e0:12:3a:8a:
18:58:8b:81:e2:e8:cc:35:33:08:6d:14:8c:ff:c1:f3:10:7a:
8e:c5:fc:20:fe:35:e0:60:29:95:f1:96:16:a5:52:fc:8b:55:
6d:8a:be:ce:01:da:08:45:a6:5c:c5:1c:83:82:33:1f:d6:99:
f5:a7:b1:60:ed:20:3d:34:ac:68:83:ad:cb:04:c2:b7:52:fb:
4d:d5:5b:8a:85:41:be:a7:55:9b:cf:54:d1:69:2c:fd:2b:3b:
67:39:c8:0d:91:16:4d:21:ab:41:50:17:32:97:1d:14:e0:a3:
6d:28:90:13:e8:d5:4a:85:42:be:fc:33:a1:16:d5:8b:0a:81:
81:30:b2:37:9b:d3:a4:fc:bc:8b:5c:8d:e1:e5:50:29:da:09:
f6:a6:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:41 2024 by rpki-client on console-fra.rpki-client.org