Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/1xFjh6neb0LLyA5hraO_m1t2x28.roa
File: 1xFjh6neb0LLyA5hraO_m1t2x28.roa (raw, json)
Hash identifier: MDs52aX6feyb4Civh6V5B/Z+NrxRQAvC/hHwTnmzf7I=
Subject key identifier: D7:11:63:87:A9:DE:6F:42:CB:C8:0E:61:AD:A3:BF:9B:5B:76:C7:6F
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 01877A33182E92FCF0669A5CCEFFDA96E94C
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/1xFjh6neb0LLyA5hraO_m1t2x28.roa
Signing time: Thu 13 Apr 2023 10:39:41 +0000
ROA not before: Thu 13 Apr 2023 10:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2586
IP address blocks: 194.204.0.0/18 maxlen: 20
194.55.8.0/22 maxlen: 22
81.90.112.0/20 maxlen: 23
194.150.64.0/22 maxlen: 24
85.253.0.0/16 maxlen: 16
87.119.160.0/19 maxlen: 21
95.129.192.0/21 maxlen: 23
62.65.192.0/18 maxlen: 18
91.213.43.0/24 maxlen: 24
94.246.216.0/21 maxlen: 22
94.246.224.0/19 maxlen: 19
145.14.32.0/20 maxlen: 20
178.23.112.0/21 maxlen: 23
185.13.16.0/22 maxlen: 24
82.131.0.0/17 maxlen: 17
146.255.176.0/21 maxlen: 23
145.14.16.0/20 maxlen: 20
2001:1bf0::/29 maxlen: 29
2001:1530::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:33:18:2e:92:fc:f0:66:9a:5c:ce:ff:da:96:e9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Apr 13 10:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7116387a9de6f42cbc80e61ada3bf9b5b76c76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:8c:0f:ee:c3:45:47:62:4c:9b:54:fa:c1:
fd:9e:82:c5:2b:5c:9f:73:41:77:f7:2e:16:4a:5d:
4c:fc:72:78:81:0e:bc:b2:84:f0:2c:f8:b2:64:7f:
1f:a7:97:60:4b:35:03:4b:fa:44:5f:08:83:49:bb:
c6:83:45:6f:3f:d5:4d:24:39:30:d8:9f:04:86:09:
7d:a0:30:7d:21:67:c5:69:f6:ef:c2:98:f8:e2:8f:
32:70:6c:f7:db:ca:68:ec:8d:b5:9d:96:ac:cb:ad:
10:00:6d:d6:3e:31:f8:a7:ef:c7:07:1e:5f:c3:33:
70:40:9b:e1:d9:5b:ee:71:8d:1c:e1:46:f2:2e:d5:
5b:33:1c:9f:10:80:da:05:0f:9a:95:fb:59:0d:85:
96:de:03:e2:01:14:f3:f5:5e:b7:08:25:7c:c8:79:
5b:c9:b8:c9:d5:65:73:34:d4:9d:a4:df:12:93:c8:
ef:75:c7:a8:00:4b:ca:fb:2e:a8:a2:43:2f:4a:d2:
92:be:35:6f:3f:06:4c:07:a5:1c:ca:83:57:68:49:
56:68:d0:1c:b2:fd:6b:ae:11:f5:92:84:aa:5e:27:
04:8f:37:f6:34:8a:a8:a3:22:49:fb:30:42:24:1b:
76:17:43:a8:44:fc:01:a1:8a:f7:92:24:0c:43:07:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:63:87:A9:DE:6F:42:CB:C8:0E:61:AD:A3:BF:9B:5B:76:C7:6F
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/1xFjh6neb0LLyA5hraO_m1t2x28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.192.0/18
81.90.112.0/20
82.131.0.0/17
85.253.0.0/16
87.119.160.0/19
91.213.43.0/24
94.246.216.0-94.246.255.255
95.129.192.0/21
145.14.16.0-145.14.47.255
146.255.176.0/21
178.23.112.0/21
185.13.16.0/22
194.55.8.0/22
194.150.64.0/22
194.204.0.0/18
IPv6:
2001:1530::/32
2001:1bf0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:70:81:6f:b2:a1:c7:a2:b4:04:88:bb:4c:81:60:e7:1c:6a:
4e:23:10:4e:6c:59:8e:35:66:03:a8:ca:da:71:dd:5f:1c:ae:
19:af:93:c5:e3:69:23:21:48:ea:71:bf:8a:83:03:d3:65:98:
49:38:17:92:92:56:37:06:e2:92:39:91:d1:b9:3a:0a:1a:ea:
72:e9:60:02:fc:ff:00:3a:bc:3e:f1:52:d0:33:5a:6f:cb:08:
b5:2c:11:a9:a5:30:93:23:bc:8d:3c:8a:b6:5e:2f:fe:bb:7c:
6f:cd:03:d4:9a:f2:dd:1c:73:86:8c:fe:31:c7:77:e7:ed:e4:
cb:ec:79:63:97:6c:b7:ba:4c:94:4d:ac:47:d8:31:84:5b:a6:
20:0b:3a:c6:2b:2c:6c:d4:02:d7:3d:a5:84:15:f2:a1:5e:80:
fb:06:1a:26:99:34:23:fb:21:d1:02:a0:28:bb:2c:a8:79:9c:
0f:da:85:7a:6f:27:0b:10:f9:97:55:b1:11:e8:70:1b:b1:04:
98:df:2b:fc:94:e7:3f:e1:be:65:59:97:3d:14:72:69:3b:ce:
1e:c5:7b:14:f3:a8:f7:17:48:f5:66:b4:ec:5e:19:42:75:9e:
84:62:7c:ad:fb:84:99:c2:ad:5a:c8:02:f6:4c:5f:ae:8b:a2:
0b:d2:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:39 2024 by rpki-client on console-ams.rpki-client.org