Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/G2MlzyJugrj_tRZQpJMrQnms-As.roa
File: G2MlzyJugrj_tRZQpJMrQnms-As.roa (raw, json)
Hash identifier: hwi/y50TSXPah3RqULrMQYHMSQF/drXUDtUDkJ3SoCc=
Subject key identifier: 1B:63:25:CF:22:6E:82:B8:FF:B5:16:50:A4:93:2B:42:79:AC:F8:0B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C623BA902764E702AD2B30A6D6DA36890
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/G2MlzyJugrj_tRZQpJMrQnms-As.roa
Signing time: Wed 13 Dec 2023 08:12:06 +0000
ROA not before: Wed 13 Dec 2023 08:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 17:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:3b:a9:02:76:4e:70:2a:d2:b3:0a:6d:6d:a3:68:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 13 08:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b6325cf226e82b8ffb51650a4932b4279acf80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:41:72:4c:cc:74:e7:74:3d:af:9c:d7:59:
1e:2d:04:0f:16:d2:4c:84:6b:f2:9e:29:ea:85:12:
db:ff:c4:96:13:8b:00:ae:65:59:58:aa:7b:8a:93:
5a:a5:5b:ff:ed:3b:a0:fd:f9:fd:74:72:07:87:e9:
e6:4c:07:67:d8:8c:b0:52:68:a6:f0:95:7e:82:ba:
d0:2f:85:d4:d8:a2:29:01:d2:fa:31:0e:13:67:2c:
d5:bb:29:62:bc:f9:13:a4:d6:c5:b3:18:1c:3b:81:
e1:bd:89:2d:78:9e:46:05:cf:5d:8d:3a:6f:07:19:
eb:ab:7b:02:72:b2:ef:81:9c:5c:5b:f0:55:00:0c:
9f:3a:2c:2c:2d:db:6e:f8:12:15:e2:00:32:b6:c3:
04:94:e7:e7:28:3a:dc:dd:a8:da:4b:84:b5:46:a6:
f9:db:bb:5e:ff:a4:38:3c:bc:c9:14:2e:b5:5c:56:
b1:e1:35:2a:44:57:99:3b:ac:7c:3d:f4:2a:6e:52:
4f:bd:a0:d8:12:f6:47:d2:f4:ba:a2:60:30:f6:88:
08:40:d5:17:d1:a4:4d:34:ca:8e:9d:24:04:89:cd:
c8:52:00:f8:d8:35:4e:08:a3:b3:6f:eb:d0:90:45:
1e:03:55:3d:a4:8a:0b:7e:c6:ea:12:54:96:e4:a6:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:63:25:CF:22:6E:82:B8:FF:B5:16:50:A4:93:2B:42:79:AC:F8:0B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/G2MlzyJugrj_tRZQpJMrQnms-As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.115.0/24
45.94.171.0/24
77.83.39.0/24
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7a:00:36:dd:ea:6e:48:a3:40:d8:c5:cb:74:14:7b:d5:fd:
1d:dd:00:64:67:69:8f:62:f2:19:9d:11:69:f0:3c:3c:f1:a4:
18:b6:9c:4e:85:26:51:1f:73:86:e6:60:03:96:99:c0:2e:54:
70:46:72:bd:28:02:41:08:86:fc:5c:a0:90:a8:c3:22:57:1a:
b6:4c:a2:b9:ef:cd:d5:93:af:86:20:a1:16:9f:c9:34:ac:13:
b3:48:46:60:f8:24:59:1a:7f:7d:48:5b:a6:00:f0:94:ea:e5:
40:7b:34:76:a4:21:bd:4f:e7:df:fb:59:5d:29:5b:9a:28:93:
a3:58:c9:a8:9f:25:f0:bc:28:69:7c:e7:bb:5d:8b:ac:d1:3e:
8f:6c:67:52:c8:bf:b8:d7:79:b0:76:7c:20:dd:a4:ac:10:0c:
0f:bc:17:41:c3:82:db:94:2a:60:c5:43:68:01:25:7c:68:17:
b9:65:26:fb:0a:54:02:5a:e6:d4:4a:e0:ba:db:5d:5d:f0:8b:
1a:e8:c9:6d:ed:0b:3e:bf:96:a2:d9:c2:df:f3:3d:55:47:d5:
7a:ac:d6:c2:bb:c4:37:3d:63:df:e6:67:47:f5:b6:aa:43:b4:
16:5f:5e:47:59:33:54:a9:2a:2a:c1:87:97:30:d3:ab:99:13:
35:02:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org