Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/SDBd8jEfWg4sbjmbug2nyWo_564.roa
File: SDBd8jEfWg4sbjmbug2nyWo_564.roa (raw, json)
Hash identifier: crt9uTPqzhZY9sBOsBaCGR5OxwJW39fQCK/O+XqE7lo=
Subject key identifier: 48:30:5D:F2:31:1F:5A:0E:2C:6E:39:9B:BA:0D:A7:C9:6A:3F:E7:AE
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01896EA531B63873A26005F90850E1BC2F4A
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/SDBd8jEfWg4sbjmbug2nyWo_564.roa
Signing time: Wed 19 Jul 2023 14:54:27 +0000
ROA not before: Wed 19 Jul 2023 14:54:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 195.208.52.0/24 maxlen: 24
195.208.55.0/24 maxlen: 24
195.208.54.0/24 maxlen: 24
195.208.53.0/24 maxlen: 24
195.209.179.0/24 maxlen: 24
195.209.178.0/24 maxlen: 24
194.226.142.0/24 maxlen: 24
194.226.160.0/24 maxlen: 24
195.208.169.0/24 maxlen: 24
195.208.168.0/24 maxlen: 24
212.193.136.0/21 maxlen: 24
195.208.181.0/24 maxlen: 24
195.208.189.0/24 maxlen: 24
195.208.127.0/24 maxlen: 24
195.208.126.0/24 maxlen: 24
193.232.42.0/24 maxlen: 24
193.232.41.0/24 maxlen: 24
193.232.40.0/24 maxlen: 24
193.232.43.0/24 maxlen: 24
212.192.36.0/22 maxlen: 24
195.209.132.0/24 maxlen: 24
195.209.133.0/24 maxlen: 24
212.192.201.0/24 maxlen: 24
212.192.200.0/24 maxlen: 24
195.19.1.0/24 maxlen: 24
195.19.0.0/24 maxlen: 24
195.19.2.0/24 maxlen: 24
195.209.102.0/24 maxlen: 24
195.209.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 06:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:a5:31:b6:38:73:a2:60:05:f9:08:50:e1:bc:2f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jul 19 14:54:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48305df2311f5a0e2c6e399bba0da7c96a3fe7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:f7:e6:97:c7:50:10:ec:6d:16:59:73:93:
64:44:97:03:b6:67:2e:3c:ee:3b:e2:37:81:f4:d8:
14:3c:32:1f:3e:9c:ea:14:02:f0:c3:71:8d:46:02:
09:8b:f0:c2:1f:a5:87:a4:eb:d7:43:52:32:b3:46:
37:38:20:9e:26:50:f7:97:ad:53:5a:dc:9c:80:b9:
9c:35:05:c1:52:eb:91:7b:3f:74:1f:bb:53:86:c2:
7d:b6:8a:1e:25:8e:d0:52:e4:16:63:ab:ca:b6:3a:
f6:cb:7e:50:82:bd:84:97:2d:93:f0:41:5e:0d:99:
09:0d:dc:57:93:8b:c7:c2:72:51:28:47:80:92:ce:
a5:cd:99:6f:f1:c4:73:ca:98:a8:bb:3f:f7:5a:4f:
9f:48:f1:3c:37:2e:8a:e1:14:1c:a8:b9:f2:b6:81:
a0:64:a4:65:9d:fd:7b:36:57:3a:84:de:f8:cd:b6:
fe:86:d0:47:17:4a:9f:ae:1a:1e:6c:29:d2:50:d5:
2c:11:18:4e:00:20:0c:1e:d4:78:82:21:ff:21:d2:
50:6b:c1:98:82:8c:44:98:18:c7:72:db:45:21:e4:
85:f2:82:b3:ce:57:c6:4d:be:e6:a1:fa:55:26:5f:
a3:a2:81:7e:f5:08:36:84:be:c3:d7:4c:13:fd:12:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:30:5D:F2:31:1F:5A:0E:2C:6E:39:9B:BA:0D:A7:C9:6A:3F:E7:AE
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/SDBd8jEfWg4sbjmbug2nyWo_564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.40.0/22
194.226.142.0/24
194.226.160.0/24
195.19.0.0-195.19.2.255
195.208.52.0/22
195.208.126.0/23
195.208.168.0/23
195.208.181.0/24
195.208.189.0/24
195.209.102.0/23
195.209.132.0/23
195.209.178.0/23
212.192.36.0/22
212.192.200.0/23
212.193.136.0/21
Signature Algorithm: sha256WithRSAEncryption
89:a9:6a:44:ba:9a:cb:8b:2e:9f:86:38:bd:d5:22:ca:34:b9:
f2:d9:e9:6b:b6:89:da:7f:f3:19:46:b7:1e:f8:87:7a:de:b6:
e1:9e:f5:22:cc:ba:d8:f6:77:a9:52:2e:bb:32:76:bc:38:8b:
a4:51:62:c3:da:d8:14:0a:4d:62:8a:59:71:72:a9:bc:5c:b3:
8d:31:ca:b7:14:30:ac:4f:b1:77:ac:a8:eb:d4:22:58:4d:38:
8b:d3:0d:f2:3f:e7:46:c6:55:80:06:10:51:f5:ae:40:83:07:
f6:12:d4:20:e6:4b:bf:a7:be:ec:30:2b:69:da:d0:d7:3c:2c:
ed:21:70:aa:6a:d4:bc:1d:11:03:6b:78:8a:86:13:95:af:e6:
cc:23:f8:26:66:14:78:87:43:6e:1d:e4:50:a8:96:1f:4c:97:
d0:b0:c0:9c:a1:e0:ea:9a:52:36:68:0a:12:ae:a8:c7:37:02:
02:f2:ac:5f:0f:27:07:70:a5:56:e0:4a:72:58:3f:df:00:3f:
57:3f:62:fb:5b:3b:7c:96:b4:94:39:0c:c7:09:cb:e8:7d:28:
20:11:53:a4:f6:a6:28:13:f6:a8:e6:fe:e9:55:82:7f:93:71:
08:f9:a4:37:92:fb:e3:fd:07:70:51:3f:14:a2:e0:fd:92:11:
53:3a:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org