Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/G1L2mUZ9buGQ-bDojyjqpg7NuUA.roa
File: G1L2mUZ9buGQ-bDojyjqpg7NuUA.roa (raw, json)
Hash identifier: ZYK8STJTKs28rhU5DjckPhRcvHVG56y/Ry+DTP4RdsA=
Subject key identifier: 1B:52:F6:99:46:7D:6E:E1:90:F9:B0:E8:8F:28:EA:A6:0E:CD:B9:40
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 018DA1C252D49400FD0DE3BC929DC1F12091
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/G1L2mUZ9buGQ-bDojyjqpg7NuUA.roa
Signing time: Tue 13 Feb 2024 09:18:03 +0000
ROA not before: Tue 13 Feb 2024 09:18:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48135
IP address blocks: 94.127.80.0/22 maxlen: 22
94.127.81.0/24 maxlen: 24
94.127.83.0/24 maxlen: 24
94.127.84.0/22 maxlen: 22
94.127.85.0/24 maxlen: 24
94.127.86.0/23 maxlen: 23
94.127.86.0/24 maxlen: 24
94.127.87.0/24 maxlen: 24
151.89.0.0/16 maxlen: 16
151.89.0.0/17 maxlen: 17
151.89.54.0/24 maxlen: 24
151.89.55.0/24 maxlen: 24
151.89.56.0/24 maxlen: 24
151.89.128.0/17 maxlen: 17
151.89.232.0/22 maxlen: 22
185.51.12.0/24 maxlen: 24
185.51.13.0/24 maxlen: 24
185.51.14.0/24 maxlen: 24
185.51.15.0/24 maxlen: 24
193.111.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 12:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:c2:52:d4:94:00:fd:0d:e3:bc:92:9d:c1:f1:20:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Feb 13 09:18:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b52f699467d6ee190f9b0e88f28eaa60ecdb940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:91:49:b4:93:63:4e:91:f3:11:75:2c:8a:
28:dc:1d:ee:56:d8:15:5b:ce:6c:e2:69:4c:fb:08:
ea:eb:df:84:93:4d:f0:59:19:c9:ca:a4:9c:e2:89:
32:3e:0a:e8:e7:64:4d:74:ef:c4:cf:29:83:e6:30:
96:2b:76:95:a5:f0:d9:83:16:25:61:58:33:ff:e4:
37:0f:a6:7c:05:67:91:c6:46:47:fc:ae:d5:16:80:
73:f3:73:16:18:9e:3a:61:2d:ea:83:fa:00:19:e3:
86:9c:a7:be:f2:83:a1:c0:10:86:3f:0d:96:b6:3c:
20:69:3b:04:9f:74:a5:d5:8d:9a:77:e6:ff:aa:d7:
35:35:87:91:4d:f7:af:3a:df:96:fb:1b:f6:74:6e:
eb:cf:42:ba:d8:f8:f4:c8:ff:53:10:38:f5:50:6a:
5d:f2:1b:b3:a6:5f:b1:b8:89:09:62:cb:c1:c3:69:
93:ff:9c:29:98:10:2c:8c:57:f2:69:c6:95:29:69:
91:f4:d4:52:20:a8:dd:d6:97:15:19:e9:e6:db:0b:
90:2c:ca:6a:e5:05:f0:03:83:f2:0c:c0:32:03:cd:
02:8a:8b:7a:6b:7b:33:15:61:0e:40:cf:c8:fb:b3:
81:74:39:fa:dc:b3:40:19:b8:35:89:13:ce:a6:d6:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:52:F6:99:46:7D:6E:E1:90:F9:B0:E8:8F:28:EA:A6:0E:CD:B9:40
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/G1L2mUZ9buGQ-bDojyjqpg7NuUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.80.0/21
151.89.0.0/16
185.51.12.0/22
193.111.46.0/24
Signature Algorithm: sha256WithRSAEncryption
29:46:bb:a2:62:b6:6a:d0:58:2a:69:92:33:17:01:e4:1e:70:
6d:5e:d1:6e:e3:a0:84:ac:4f:0a:19:0d:16:56:33:c1:ff:02:
b1:a5:55:60:f9:fe:7f:94:1e:48:42:41:c0:e2:21:b5:9e:f8:
ce:41:49:d3:24:9e:cc:4e:f6:38:e5:a3:0d:f1:6b:b7:75:61:
35:11:11:e5:e3:ff:39:14:8b:cf:3a:2c:e2:12:1f:ff:51:d6:
c1:01:89:c5:58:ca:0c:bd:5e:73:33:07:71:a1:50:b1:4c:bd:
0c:62:a3:92:f7:84:fb:96:b7:96:a2:69:87:15:f4:9e:a9:e0:
fc:10:e2:28:de:80:9d:7a:ac:7d:0b:9a:1b:01:d4:63:56:00:
71:a8:0f:79:d9:c4:ba:fd:af:61:a3:54:da:c6:ed:18:f8:7c:
d8:b6:f0:48:2f:84:92:57:d2:2f:66:28:47:3e:fc:27:9f:b8:
c3:81:1b:70:f1:35:9c:b4:a3:19:fc:87:2d:77:62:64:82:a1:
45:98:64:be:12:4d:a9:fb:f2:c9:c1:44:d4:1f:86:77:a0:26:
72:64:de:bd:dd:98:9e:1e:28:65:ff:64:3e:4e:3c:19:fc:01:
42:0d:75:c2:4c:f7:25:5f:61:51:36:0f:53:e4:d9:59:46:48:
1a:35:f1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:00 2024 by rpki-client on console-ams.rpki-client.org