Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/j6Fr9DpHUfOU1_6bxKsuyZfvFTg.roa
File: j6Fr9DpHUfOU1_6bxKsuyZfvFTg.roa (raw, json)
Hash identifier: OET1jAiwEjS4arhd/tXm40lCwgPxhVPEyZrcDy3r+pQ=
Subject key identifier: 8F:A1:6B:F4:3A:47:51:F3:94:D7:FE:9B:C4:AB:2E:C9:97:EF:15:38
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 01856B93417D022D3C1CD4A49D441758226E
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/j6Fr9DpHUfOU1_6bxKsuyZfvFTg.roa
Signing time: Sun 01 Jan 2023 04:24:50 +0000
ROA not before: Sun 01 Jan 2023 04:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47331
IP address blocks: 212.156.0.0/16 maxlen: 24
81.212.0.0/14 maxlen: 24
85.96.0.0/12 maxlen: 24
95.0.0.0/12 maxlen: 24
88.224.0.0/11 maxlen: 24
78.160.0.0/11 maxlen: 24
212.174.0.0/15 maxlen: 24
2a01:358::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:41:7d:02:2d:3c:1c:d4:a4:9d:44:17:58:22:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: Jan 1 04:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fa16bf43a4751f394d7fe9bc4ab2ec997ef1538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:6c:29:9b:71:79:1f:fe:68:92:a5:49:1e:
62:e8:4b:5e:4d:b0:b0:c4:1c:ff:b8:d7:ff:f9:d0:
f5:52:37:ce:20:56:3e:01:a4:41:3b:01:2a:8e:aa:
29:26:33:b0:28:e8:d5:02:69:8c:37:1f:23:1c:cb:
fa:e4:39:bd:55:29:36:0d:c6:fa:35:84:11:32:0c:
68:9a:fe:53:d3:fc:11:d9:7f:97:e7:48:89:fa:08:
90:31:fd:fa:b1:e5:ed:e2:15:88:c3:f2:36:6c:58:
7f:6b:81:88:b5:2e:84:a0:cb:7d:cd:87:99:df:e8:
13:cf:50:ef:7d:e7:1a:d0:69:bd:1b:ba:19:c8:2b:
f7:8f:f0:83:c1:e1:fe:3e:fe:22:3f:f9:b5:e3:5c:
85:d6:57:0e:3d:ed:ec:50:43:0b:bd:4c:42:b3:fa:
f4:65:2d:97:03:2d:a2:6d:a0:3e:0b:b4:16:d7:4c:
cf:ee:14:02:27:10:16:e5:08:9f:3b:6e:78:cc:30:
7d:2e:05:36:e7:04:17:b4:95:1d:c1:26:1a:97:ab:
f4:32:41:db:3d:3e:f6:30:99:1f:9e:ba:d1:e3:1c:
94:1f:e0:ee:bc:84:df:61:8a:2c:d9:ac:2d:94:30:
06:49:7e:37:e0:34:52:e9:e3:6f:7c:28:a5:ce:f2:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:6B:F4:3A:47:51:F3:94:D7:FE:9B:C4:AB:2E:C9:97:EF:15:38
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/j6Fr9DpHUfOU1_6bxKsuyZfvFTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.160.0.0/11
81.212.0.0/14
85.96.0.0/12
88.224.0.0/11
95.0.0.0/12
212.156.0.0/16
212.174.0.0/15
IPv6:
2a01:358::/29
Signature Algorithm: sha256WithRSAEncryption
a5:96:7e:ea:f4:a7:53:49:7f:3d:68:e4:2c:fc:58:fb:21:81:
ec:28:50:28:cc:2a:ba:7f:9c:2b:1d:a4:59:3d:35:e8:e8:ff:
04:43:83:e2:9e:ee:44:37:61:70:99:42:b3:f0:e7:f3:d3:2e:
98:71:e5:38:40:7f:94:91:95:7c:b4:ee:b7:a8:2e:a7:b3:04:
ac:8b:cf:f0:9f:3c:f5:7f:91:66:95:0d:9e:5a:fb:b7:3f:f4:
38:42:6c:e0:b4:fd:58:1c:f6:c2:95:52:20:c4:fa:48:b3:18:
83:6d:1c:16:bf:a7:42:65:05:0d:38:23:42:23:a1:e8:1e:ed:
be:47:f3:f5:92:dd:8b:61:62:11:20:77:1c:03:28:49:01:ed:
d0:42:79:19:67:b8:77:e5:3c:ef:6d:f0:40:81:4b:d0:b6:99:
d5:1c:01:e0:ab:e3:70:d1:17:8a:9d:f7:74:69:fb:68:75:12:
2b:5a:d8:67:e5:68:85:a1:f2:32:fc:a4:c1:a7:5d:b4:1e:c3:
83:70:69:1d:5a:3d:9c:a6:05:cb:1c:90:1e:7c:9e:42:ab:50:
47:c6:24:d5:2a:a5:80:e6:e4:35:a5:0a:17:cb:f2:7e:9d:db:
d4:62:ed:5a:8e:15:cd:c4:11:d0:e6:c9:ca:ab:bc:c2:4d:9c:
2b:cd:17:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:01 2024 by rpki-client on console-fra.rpki-client.org