Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/GevYcVSJ8-BBlQzeDFXslA2jiNk.roa
File: GevYcVSJ8-BBlQzeDFXslA2jiNk.roa (raw, json)
Hash identifier: 8I7LhfiF4ZjOQaoexMRMKwDWKct8Wwb4wQQsFDwXf+s=
Subject key identifier: 19:EB:D8:71:54:89:F3:E0:41:95:0C:DE:0C:55:EC:94:0D:A3:88:D9
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 018CC2DABA743B4578133963FCB897C51EB2
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/GevYcVSJ8-BBlQzeDFXslA2jiNk.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30893
IP address blocks: 185.231.100.0/22 maxlen: 24
195.47.238.0/24 maxlen: 24
2a0c:5700:5353::/48 maxlen: 48
2a0c:5700:3133::/48 maxlen: 48
2a0c:5700::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jun 2024 16:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ba:74:3b:45:78:13:39:63:fc:b8:97:c5:1e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19ebd8715489f3e041950cde0c55ec940da388d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:6c:a0:49:07:9d:0e:7c:63:b7:9d:34:c4:
3e:91:2c:bf:97:45:0f:d7:cd:94:59:3d:1d:a7:e8:
69:4a:ae:b9:5e:65:2a:66:51:89:ff:3b:6e:46:9d:
dc:39:72:57:ca:7d:0f:bd:07:7a:11:30:ed:fc:84:
e9:11:93:6d:ba:7e:4e:52:de:48:c4:a2:07:ff:85:
da:68:c0:76:e3:9e:c4:2c:b9:8c:4f:36:37:5c:c9:
af:22:8e:43:bd:2a:e2:27:97:32:d9:8e:e8:f5:34:
fb:dd:db:a6:e8:1a:2b:20:67:15:d5:4d:e2:09:b0:
99:b2:52:03:93:e9:16:b0:36:97:9e:26:51:08:0f:
bd:7e:88:33:97:fa:b3:87:0c:59:2c:1f:75:42:74:
f9:0e:fa:f3:c5:de:53:a5:27:a4:f4:cb:94:21:cb:
14:f1:b2:ee:c0:39:23:64:a4:7d:f9:44:3a:d6:6e:
bf:17:ee:b8:23:3f:93:78:6a:57:3f:ae:24:9b:3b:
0f:a0:0f:b4:48:44:74:a8:ea:85:50:61:e9:9a:24:
15:7e:43:5f:09:2a:0b:58:9e:19:c0:86:36:ab:ad:
1c:9e:0a:e7:b9:55:40:18:b2:dc:53:78:e7:a0:d6:
12:ef:d2:7b:48:05:c4:83:a1:09:e8:45:dd:52:f4:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EB:D8:71:54:89:F3:E0:41:95:0C:DE:0C:55:EC:94:0D:A3:88:D9
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/GevYcVSJ8-BBlQzeDFXslA2jiNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.100.0/22
195.47.238.0/24
IPv6:
2a0c:5700::/29
Signature Algorithm: sha256WithRSAEncryption
6e:cc:9b:c8:a4:f1:5f:aa:10:66:d6:36:8e:a2:b8:aa:4b:64:
d3:c7:6e:63:95:e3:f6:36:5f:9d:c3:e2:57:8d:18:3e:ea:65:
fa:7b:b6:68:34:f4:f5:b7:1a:da:b8:0b:51:9c:3b:6c:0a:4e:
7c:ac:af:ed:71:82:b1:f4:74:e9:8b:8c:16:15:5f:8c:0d:37:
89:84:6b:53:84:2f:df:46:43:3c:42:0d:3f:65:99:d3:6c:5a:
30:fb:2e:52:a1:d3:aa:cc:f6:0d:1e:f2:f8:6e:46:e8:3a:d1:
18:fa:a4:6e:d5:28:e3:78:30:12:1c:01:8b:b4:5c:4a:c6:f8:
21:f2:ca:47:2a:87:b5:e4:fd:28:ea:79:36:31:e7:4a:d6:8f:
34:eb:f0:57:d2:36:be:0a:46:01:d1:a9:e3:a8:3a:d9:3f:d5:
1e:7c:bb:64:49:a4:e2:60:9c:3c:ec:a7:0c:6a:b1:c3:56:19:
eb:35:fc:12:05:e0:7f:77:e3:fc:c3:49:61:98:6a:fd:6e:e2:
b5:37:83:94:40:70:bb:e8:02:3e:fa:d6:46:21:7d:12:4b:91:
92:5b:90:24:1a:14:8e:21:2a:c9:15:6d:50:dc:12:f0:25:4a:
6a:92:24:6f:e1:b8:30:12:bc:8f:f1:37:47:09:a2:20:a0:c8:
82:4a:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:26 2024 by rpki-client on console-fra.rpki-client.org