Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pwKfNqhkWsffUQdUutvtdxl-VUU.roa
File: pwKfNqhkWsffUQdUutvtdxl-VUU.roa (raw, json)
Hash identifier: EZZowOuRod/5OfX8T65M3JuV6G+Vi1VB51DNxzesL0Y=
Subject key identifier: A7:02:9F:36:A8:64:5A:C7:DF:51:07:54:BA:DB:ED:77:19:7E:55:45
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018B4691DDAE43908701A08901C6D9E059F1
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pwKfNqhkWsffUQdUutvtdxl-VUU.roa
Signing time: Thu 19 Oct 2023 06:14:06 +0000
ROA not before: Thu 19 Oct 2023 06:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 213.145.72.0/21 maxlen: 24
85.115.208.0/23 maxlen: 24
85.115.208.0/24 maxlen: 24
213.145.91.0/24 maxlen: 24
213.145.88.0/21 maxlen: 24
213.145.90.0/24 maxlen: 24
213.145.92.0/24 maxlen: 24
213.145.93.0/24 maxlen: 24
213.145.94.0/24 maxlen: 24
213.145.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Oct 2023 08:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:91:dd:ae:43:90:87:01:a0:89:01:c6:d9:e0:59:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 19 06:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7029f36a8645ac7df510754badbed77197e5545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:a6:70:a9:65:66:f0:30:f2:66:87:6b:42:
0a:06:6d:df:a6:f3:79:e0:44:e3:42:c0:bd:cb:0f:
42:5c:05:1a:c2:ea:88:ac:87:8f:e6:1e:a4:91:03:
28:bd:42:27:74:43:6d:c1:c0:9a:d7:b2:04:c1:3b:
3d:24:99:73:50:ab:b6:3a:d6:78:db:08:fe:c3:2d:
e4:35:13:68:69:8a:6b:43:53:a8:c5:4e:c9:a0:ae:
2c:98:d8:e3:a2:4c:3f:b4:f3:80:19:63:98:02:1e:
27:8c:9d:89:0d:6f:9d:f9:58:80:43:9b:b8:85:99:
73:6f:70:3e:b2:79:bc:43:a6:60:5f:60:68:5a:f7:
c5:3e:80:90:d4:2a:36:c6:d3:a6:d2:09:a5:4e:f3:
e6:99:b8:1e:49:c8:92:55:78:6b:e5:3d:69:dd:be:
25:d8:da:1f:f2:52:bc:53:30:4e:97:4d:b8:d3:3a:
6f:d9:64:c1:6a:14:d1:2e:be:ac:52:2d:37:dd:1b:
23:af:87:4f:75:6f:36:32:d6:6b:be:95:6a:99:43:
d5:fb:40:02:df:a8:88:e9:bc:78:90:e5:0f:c8:a4:
37:8f:b7:9c:ef:ce:8a:58:4c:a9:d5:8f:95:a4:1e:
16:e7:e4:1f:18:56:51:c2:26:b1:36:c2:5f:2d:09:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:02:9F:36:A8:64:5A:C7:DF:51:07:54:BA:DB:ED:77:19:7E:55:45
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pwKfNqhkWsffUQdUutvtdxl-VUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.72.0/21
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:d2:f8:c9:38:99:bc:09:30:c5:d5:11:31:ec:f6:54:e3:70:
09:3b:30:91:91:d0:37:f7:96:a3:3d:82:ff:2d:e0:66:fc:26:
39:c0:c0:c1:53:e4:b1:1e:2d:df:46:5a:6b:eb:1f:60:03:f7:
b1:ed:04:58:d3:6b:6a:50:0d:16:f0:e0:5e:4f:2c:02:50:f0:
47:b3:8a:3a:17:d8:c2:74:9b:ba:88:4c:59:5f:80:4c:64:97:
da:2f:95:1e:27:f1:98:63:8e:80:45:b9:03:19:0d:36:25:22:
cc:31:10:60:0f:22:14:44:91:55:5f:d1:a0:25:a2:4f:60:de:
43:6e:a4:c8:80:09:01:9c:f0:65:ce:7d:86:c0:12:0c:81:d0:
45:a8:01:6e:02:ed:78:0b:f5:5a:ef:46:16:ce:9d:ef:b8:d0:
95:42:af:76:99:2c:5d:e3:53:5f:94:fe:6a:29:ef:5b:8c:58:
62:0e:36:cd:6b:04:a9:22:79:2c:6f:a6:04:cb:2a:02:2a:fe:
6b:64:b3:58:a3:10:0e:af:b7:92:96:39:99:3d:b8:a4:39:16:
1e:5d:45:f2:7d:c8:ab:1a:6f:ab:d6:d9:8a:00:17:a3:0a:ab:
54:53:f1:be:16:34:87:e3:a3:cb:19:07:bb:19:24:9e:cb:65:
43:f6:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org