Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/g98_eZN_ATtfoITM-D0cjpop2ek.roa
File: g98_eZN_ATtfoITM-D0cjpop2ek.roa (raw, json)
Hash identifier: C7YnMjCQ3dSzc1pShooh+BH274NKP6kYL/5UJZRu6oE=
Subject key identifier: 83:DF:3F:79:93:7F:01:3B:5F:A0:84:CC:F8:3D:1C:8E:9A:29:D9:E9
Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial: 01856CAEEF1FC46743C5DC9C848D675D2EF9
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/g98_eZN_ATtfoITM-D0cjpop2ek.roa
Signing time: Sun 01 Jan 2023 09:34:41 +0000
ROA not before: Sun 01 Jan 2023 09:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29222
IP address blocks: 193.134.250.0/24 maxlen: 24
84.16.64.0/19 maxlen: 24
185.143.100.0/22 maxlen: 24
45.157.188.0/22 maxlen: 24
37.156.40.0/21 maxlen: 24
185.177.60.0/22 maxlen: 24
185.176.224.0/22 maxlen: 24
193.128.7.0/24 maxlen: 24
128.65.192.0/21 maxlen: 24
185.74.68.0/22 maxlen: 24
193.111.233.0/24 maxlen: 24
185.125.24.0/22 maxlen: 24
193.134.93.0/24 maxlen: 24
93.88.240.0/20 maxlen: 24
185.181.160.0/22 maxlen: 24
185.172.100.0/22 maxlen: 24
195.15.192.0/18 maxlen: 24
83.166.128.0/19 maxlen: 24
2001:1600::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:ef:1f:c4:67:43:c5:dc:9c:84:8d:67:5d:2e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Validity
Not Before: Jan 1 09:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83df3f79937f013b5fa084ccf83d1c8e9a29d9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:f0:33:eb:00:34:1c:79:8c:69:e4:04:c1:
cc:7d:8d:54:85:6c:1f:c1:8c:4b:f2:8e:23:38:e9:
02:9d:55:63:ad:58:df:f0:ae:32:a1:77:26:8b:b6:
72:fb:5c:d3:0f:d9:2c:ec:c8:17:a4:36:d1:e1:38:
b6:a2:71:ef:a9:90:03:cb:79:bb:e6:70:3d:b0:8e:
03:5f:03:cc:5d:66:c7:e6:ba:54:14:db:60:64:ac:
82:a5:f6:71:be:bf:ae:0b:1b:c2:84:60:4f:c3:5a:
3d:46:56:ce:2e:ee:d4:d9:c4:a1:cb:73:51:14:9d:
80:8d:9e:ee:3b:96:ee:47:1d:86:ea:e2:cc:37:68:
98:de:c9:17:91:a5:49:26:e5:00:98:0f:93:50:dd:
ea:52:39:7e:65:1a:d7:c5:c5:43:6e:9b:5d:ad:e5:
c0:a9:99:e0:fe:d6:bc:76:e1:03:df:71:05:83:ab:
05:a4:e5:f7:f1:d5:e7:4b:da:42:a3:0a:71:27:c2:
c4:f2:19:79:bf:d2:ec:79:9b:f9:94:46:6d:e2:8d:
c6:c4:5e:90:a7:20:54:ec:b6:19:b1:ca:de:d4:c5:
fb:8c:5e:e9:8f:03:34:4f:1a:45:65:09:36:97:3c:
48:8a:61:73:fa:11:0d:0a:59:75:af:63:80:cd:e5:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:3F:79:93:7F:01:3B:5F:A0:84:CC:F8:3D:1C:8E:9A:29:D9:E9
X509v3 Authority Key Identifier:
keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/g98_eZN_ATtfoITM-D0cjpop2ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.40.0/21
45.157.188.0/22
83.166.128.0/19
84.16.64.0/19
93.88.240.0/20
128.65.192.0/21
185.74.68.0/22
185.125.24.0/22
185.143.100.0/22
185.172.100.0/22
185.176.224.0/22
185.177.60.0/22
185.181.160.0/22
193.111.233.0/24
193.128.7.0/24
193.134.93.0/24
193.134.250.0/24
195.15.192.0/18
IPv6:
2001:1600::/29
Signature Algorithm: sha256WithRSAEncryption
98:dc:dd:9e:9b:91:bb:39:f8:9d:c4:5c:7b:11:8a:a7:f0:05:
b0:f1:f8:8d:00:b5:de:f6:4c:8c:53:de:dd:71:32:d8:0b:74:
f6:42:a2:28:f1:de:e4:02:cd:6c:c4:80:66:44:57:c7:73:0f:
6f:40:65:c3:1a:ee:a5:bc:6f:98:bf:35:e1:9c:43:8c:1b:ba:
c4:69:d7:ee:9b:b4:6d:bf:07:74:0f:6e:74:ed:0f:54:80:9a:
ff:fc:19:da:b2:aa:f0:26:1b:17:ca:fc:80:08:0e:20:be:aa:
fb:ff:92:a9:4b:16:e1:ad:87:4e:e1:8d:57:d3:75:6a:46:d1:
6f:6d:43:8e:5b:e9:fc:12:66:c9:ca:f0:ff:d2:6b:fc:ee:05:
c6:63:20:0c:a8:2f:6f:38:43:a9:f5:81:73:ce:ff:70:49:bf:
a1:7b:d6:85:7d:ce:a7:82:8c:61:17:63:d5:f6:cb:71:b4:0b:
d7:f5:e7:ac:ad:e7:26:a2:30:d8:a1:02:e9:19:66:e2:8e:f6:
2b:f5:1e:0c:4e:36:73:80:74:6e:2c:de:3d:b5:2c:c4:9c:92:
5f:8e:d8:5c:e1:84:50:d4:e5:98:0c:63:14:ef:f2:90:d5:d0:
8b:b1:52:fe:45:34:25:d1:f2:3c:4d:9c:57:29:bd:04:51:f3:
99:32:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:40 2024 by rpki-client on console-ams.rpki-client.org