Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/i6RbVtR0CM_2kTnHsIDdHokd9Wo.roa
File: i6RbVtR0CM_2kTnHsIDdHokd9Wo.roa (raw, json)
Hash identifier: yEy3geDJTfPHYi7tb5+kKQIZ4yOUKbCq1RER9fqY5ko=
Subject key identifier: 8B:A4:5B:56:D4:74:08:CF:F6:91:39:C7:B0:80:DD:1E:89:1D:F5:6A
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018B337A9ED77428F35208D1B6438033B5FD
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/i6RbVtR0CM_2kTnHsIDdHokd9Wo.roa
Signing time: Sun 15 Oct 2023 13:15:55 +0000
ROA not before: Sun 15 Oct 2023 13:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 213.145.72.0/21 maxlen: 24
85.115.208.0/23 maxlen: 24
213.145.91.0/24 maxlen: 24
213.145.88.0/21 maxlen: 24
213.145.88.0/24 maxlen: 24
213.145.89.0/24 maxlen: 24
213.145.90.0/24 maxlen: 24
213.145.92.0/24 maxlen: 24
213.145.93.0/24 maxlen: 24
213.145.94.0/24 maxlen: 24
213.145.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:7a:9e:d7:74:28:f3:52:08:d1:b6:43:80:33:b5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 15 13:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ba45b56d47408cff69139c7b080dd1e891df56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:e5:0a:02:b9:2f:22:32:89:14:af:20:8e:
63:59:ef:16:7d:5d:79:61:1e:42:85:8e:73:60:17:
db:4e:2a:c3:8d:90:04:e2:be:c6:de:70:4f:83:5c:
08:56:5d:d8:fd:d1:c3:be:59:31:68:b8:c9:c2:de:
82:4c:1b:9a:b4:a2:f4:22:cb:aa:09:3f:e9:74:bb:
5d:88:fe:40:96:fd:2f:31:cb:d2:ce:5e:f8:05:93:
bb:33:c3:dc:f6:48:ad:ea:d2:6b:f5:27:ce:4c:2e:
68:2f:e8:00:e8:3f:bd:e7:88:86:0c:f4:c6:af:dd:
b3:d6:8c:93:05:71:8f:e5:5e:66:d8:93:2d:8a:05:
c4:32:0e:cd:ac:d7:ef:a3:e0:fc:c9:6a:9a:bb:c3:
94:64:ac:ce:be:29:e9:0c:d0:38:3f:ad:ab:67:0b:
5b:97:5d:2e:2d:37:58:71:c9:61:2f:6f:b8:33:d8:
d9:1c:95:8b:1a:e0:27:61:1a:e9:9d:fd:75:86:d1:
a7:87:50:0e:22:57:92:a8:e4:d6:e4:2f:28:7e:62:
0c:eb:44:71:0d:cd:bb:5a:9f:4b:eb:c7:95:4f:cc:
8e:a4:37:5a:85:d1:c1:62:c5:d1:6d:5d:64:70:51:
b3:ea:20:42:d5:17:e5:32:07:8a:8b:f5:99:80:e6:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:5B:56:D4:74:08:CF:F6:91:39:C7:B0:80:DD:1E:89:1D:F5:6A
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/i6RbVtR0CM_2kTnHsIDdHokd9Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.72.0/21
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
e4:bc:ca:fd:59:6f:67:01:a7:d8:b7:7a:3e:a6:3d:94:f6:03:
f9:59:cc:4d:17:5a:27:57:45:15:bc:67:51:ff:54:e7:e5:f1:
33:db:66:8e:c4:3b:c6:58:19:b8:ff:60:8c:79:95:db:49:0a:
6d:41:73:54:3b:fc:72:a9:28:c7:ce:7d:be:ec:90:3f:f1:15:
35:62:cd:8d:64:e8:ea:70:90:67:af:9d:e7:b0:28:dc:1d:21:
f5:f1:31:c4:e7:cc:a7:20:95:f0:34:ec:33:89:fe:c9:4f:bd:
f0:a7:b3:b5:51:90:3c:da:0b:ce:94:9e:2c:bf:92:28:5a:e8:
13:1c:c6:cb:86:f6:b1:34:05:62:1a:6d:8a:b5:1b:1e:49:b9:
08:06:c4:a2:26:b9:46:1b:0d:10:c0:21:b6:6f:11:86:fe:1d:
78:81:5b:09:27:9b:93:74:13:c4:89:30:e1:3d:69:e7:28:68:
48:80:de:b0:46:17:0f:80:98:ad:f9:76:09:df:de:af:06:f8:
06:bb:fa:cb:b7:f1:ec:15:81:69:0b:6c:7f:ba:5a:8e:80:95:
d5:5f:8f:71:cf:5d:3c:cd:3f:c1:c3:44:46:90:8e:58:cb:ae:
1c:7c:5e:70:a2:78:57:82:68:42:bb:74:aa:53:12:5e:b6:99:
47:ab:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org