Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/2GZGK6vGRSMjVLlOM6poUjEavHo.roa
File: 2GZGK6vGRSMjVLlOM6poUjEavHo.roa (raw, json)
Hash identifier: KyvTWcLwdRljU+eOAeJLlixtyFzUnEFkfpzFioOqGmA=
Subject key identifier: D8:66:46:2B:AB:C6:45:23:23:54:B9:4E:33:AA:68:52:31:1A:BC:7A
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 018AEFF830AAD11E0F1F39473AB5355D9BAF
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/2GZGK6vGRSMjVLlOM6poUjEavHo.roa
Signing time: Mon 02 Oct 2023 10:38:54 +0000
ROA not before: Mon 02 Oct 2023 10:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202973
IP address blocks: 195.10.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:f8:30:aa:d1:1e:0f:1f:39:47:3a:b5:35:5d:9b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Oct 2 10:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d866462babc645232354b94e33aa6852311abc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:77:dd:14:a7:ba:2d:53:85:63:f6:bc:78:
6d:fa:65:1c:25:06:0f:7e:fb:3a:ae:d3:e2:a0:17:
d5:84:8a:ea:07:d6:ae:49:e9:b9:6e:a4:57:3a:b7:
20:82:8c:dd:ea:f7:42:8f:a5:32:11:e8:0a:5e:3a:
8b:cb:4d:cb:79:16:62:cb:eb:3c:99:ba:94:f9:48:
d6:ce:45:f4:10:54:cc:8c:b4:86:65:25:86:6a:2c:
09:95:f3:db:7b:b9:fe:0b:a5:9d:00:83:59:bd:91:
54:0c:2b:c9:6c:07:24:76:2c:0a:0f:89:a6:12:6a:
79:99:4e:91:98:80:c3:e8:92:22:f6:5a:9e:20:fc:
1e:bc:9d:33:32:f0:ab:71:88:64:c8:3d:48:fc:c6:
4e:6d:16:42:0e:5b:58:c3:f7:77:73:31:37:cf:e1:
e7:34:55:9e:da:c0:64:d5:79:49:45:46:95:41:93:
6d:d3:44:eb:67:cd:b8:04:36:fe:43:45:14:83:a6:
f3:fa:e6:85:23:0a:39:0b:69:7b:24:6d:7b:4a:60:
3f:4d:23:6a:0a:28:05:c5:ea:44:55:49:d0:02:72:
92:7d:a2:db:d7:69:3a:e4:d3:05:44:38:e2:1c:a8:
7b:4b:55:bb:42:ae:22:57:d4:68:cd:a1:fe:16:49:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:46:2B:AB:C6:45:23:23:54:B9:4E:33:AA:68:52:31:1A:BC:7A
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/2GZGK6vGRSMjVLlOM6poUjEavHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8b:67:96:84:02:32:bb:36:6e:57:8b:67:21:a7:db:c4:0e:
75:5c:c6:f4:48:c0:8c:6e:02:64:54:1b:d4:5a:e0:ea:2d:f4:
ca:84:7f:22:89:58:b4:3a:ea:6a:85:c5:e8:b9:a8:ef:1c:38:
42:64:1e:03:0e:4a:68:0b:72:7d:f9:7c:15:30:56:2a:38:74:
e8:38:57:60:af:2a:db:fa:20:3a:06:de:98:25:e9:6b:13:21:
08:83:99:fb:65:60:99:a4:2c:7b:cc:51:2a:f5:9f:5d:4f:59:
87:e1:3c:1b:8a:d0:46:fd:db:ee:61:93:3e:18:0b:28:57:78:
05:f9:9d:68:9b:03:72:a1:9f:2c:dc:a1:b1:48:3a:33:60:ce:
2d:03:fb:68:d4:6e:d5:02:03:00:b6:13:f3:33:4c:ba:39:a6:
1a:54:e8:5b:21:ac:ac:04:2d:ec:47:00:c5:fa:90:8f:28:6c:
2e:fc:cb:4c:81:d9:be:6f:3f:33:77:82:e7:6a:36:9b:8f:81:
39:c6:8e:d4:f2:c5:17:e6:30:d7:30:86:8f:e9:96:c8:bb:be:
a3:ce:c1:f6:3e:7c:3d:ff:8e:ea:6a:2d:ad:ec:9f:ca:64:74:
a3:47:61:80:0a:7d:ec:2d:31:45:e2:17:53:79:6c:3c:cf:e6:
4e:8c:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org