Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/gi75Np2wGEZCF76rps0awCc-ELE.roa
File: gi75Np2wGEZCF76rps0awCc-ELE.roa (raw, json)
Hash identifier: HsURfr7tav6enAJd+tLgTAyUG/n4RYVG9yf9pT3i6KE=
Subject key identifier: 82:2E:F9:36:9D:B0:18:46:42:17:BE:AB:A6:CD:1A:C0:27:3E:10:B1
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 0188AFC527F7E00A2DA904DBBC8281BCBCA1
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/gi75Np2wGEZCF76rps0awCc-ELE.roa
Signing time: Mon 12 Jun 2023 13:21:53 +0000
ROA not before: Mon 12 Jun 2023 13:21:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34393
IP address blocks: 95.215.24.0/21 maxlen: 21
95.215.20.0/22 maxlen: 22
195.177.64.0/22 maxlen: 22
195.177.84.0/22 maxlen: 22
2001:67c:2f64::/48 maxlen: 48
2a0e:c980::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:c5:27:f7:e0:0a:2d:a9:04:db:bc:82:81:bc:bc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jun 12 13:21:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=822ef9369db018464217beaba6cd1ac0273e10b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:6c:58:79:26:44:d9:fb:c8:7a:84:e9:cc:
f8:c0:50:f7:ab:97:d6:64:85:04:4b:ee:f8:ea:9a:
6a:bd:59:b4:c2:54:16:b4:8e:2b:49:3e:f4:b7:55:
d6:45:28:ee:ee:08:1e:ec:50:40:fa:fe:dd:94:82:
db:1b:61:d4:d8:58:50:f2:c9:9d:69:2f:f0:4f:15:
09:fb:ce:2e:e8:66:30:6a:a0:d5:3f:58:14:79:5a:
91:c7:8e:87:40:4a:42:8c:9e:bc:29:27:2e:0d:dc:
26:3a:38:57:40:84:03:8a:0a:34:8a:cb:17:24:ce:
6f:8f:d0:f8:20:f0:33:26:96:cd:49:ec:ac:01:52:
d6:a2:37:8d:ca:32:48:1b:9e:32:f6:ba:b3:50:64:
6b:c7:b6:63:52:45:56:66:50:6a:98:41:ef:90:6f:
91:63:29:62:db:aa:3c:61:d0:5a:50:2c:25:cd:52:
26:66:ab:4e:6c:57:76:28:22:23:a0:7a:a1:a7:86:
d0:15:a6:6f:fa:b0:1c:c0:a5:b5:a4:01:2e:b3:48:
86:93:3b:d4:d3:fb:b3:60:00:26:8b:33:02:db:0f:
bd:2b:79:4c:b7:4d:16:08:1c:5e:08:54:44:28:b6:
5c:d9:23:a7:c1:0a:8b:00:e7:f6:03:63:ad:31:68:
26:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2E:F9:36:9D:B0:18:46:42:17:BE:AB:A6:CD:1A:C0:27:3E:10:B1
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/gi75Np2wGEZCF76rps0awCc-ELE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.20.0-95.215.31.255
195.177.64.0/22
195.177.84.0/22
IPv6:
2001:67c:2f64::/48
2a0e:c980::/29
Signature Algorithm: sha256WithRSAEncryption
2e:66:3e:78:aa:b0:55:fd:b2:ab:e8:c3:c7:32:52:c8:1e:05:
0a:04:63:72:71:dd:3a:ec:3c:25:06:d0:f1:f8:af:0f:c5:b1:
a2:bc:91:76:2c:02:fe:79:48:cb:5d:22:37:67:3f:ad:88:bf:
70:0c:66:a2:04:09:77:fe:c4:e8:b7:41:a5:4b:0a:1b:c4:eb:
47:76:1e:a0:fe:0c:1c:bf:b0:0c:a0:7d:4c:1e:26:6a:a1:4b:
44:7a:c9:82:cf:2c:b0:c1:1f:01:91:52:65:91:1f:94:06:26:
cd:e7:f2:c4:9b:57:7a:6c:9a:42:6e:91:f3:59:18:dd:cf:ed:
16:f9:14:b8:b1:29:bc:1b:7f:b7:85:3b:57:d9:06:d9:88:b5:
0d:de:51:6f:68:99:2a:2a:64:b6:57:01:2a:8f:c4:8e:f8:a4:
09:04:d0:49:d3:a8:80:61:94:b9:87:95:6b:fd:bc:64:87:c0:
1f:e3:3d:52:29:4b:77:cb:70:80:dc:1c:bd:11:62:65:31:22:
d1:58:ef:56:8f:34:00:88:13:27:d5:14:5b:2a:4d:65:9e:16:
91:ac:b9:06:90:18:f4:bd:31:04:be:35:79:72:27:dc:8e:09:
9b:49:45:7a:c0:92:7d:e1:7b:0b:05:bb:3f:23:e3:f3:70:d8:
bb:79:83:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-fra.rpki-client.org