Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/SdLYgSDc2WnqOYudhTNG_On0-TY.roa
File: SdLYgSDc2WnqOYudhTNG_On0-TY.roa (raw, json)
Hash identifier: /4syaqIEKCfcfb0c82Cgszv4z2nsURyPitVfywH9Kww=
Subject key identifier: 49:D2:D8:81:20:DC:D9:69:EA:39:8B:9D:85:33:46:FC:E9:F4:F9:36
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA95A950B9F06658CE2B9AB69D2E3
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/SdLYgSDc2WnqOYudhTNG_On0-TY.roa
Signing time: Sun 01 Jan 2023 11:14:53 +0000
ROA not before: Sun 01 Jan 2023 11:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211249
IP address blocks: 193.140.4.0/22 maxlen: 22
193.140.2.0/23 maxlen: 23
193.140.1.0/24 maxlen: 24
193.255.112.0/21 maxlen: 21
95.183.138.0/23 maxlen: 23
194.27.96.0/22 maxlen: 22
194.27.92.0/22 maxlen: 22
194.27.100.0/23 maxlen: 23
95.183.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a9:5a:95:0b:9f:06:65:8c:e2:b9:ab:69:d2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49d2d88120dcd969ea398b9d853346fce9f4f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3c:f9:91:f1:2e:ef:e5:51:8b:48:70:83:ff:
d5:d4:ee:52:ac:2a:6c:60:95:57:50:68:2d:c6:92:
a8:eb:f9:0d:e2:ed:97:b7:fa:8d:30:a8:34:f0:14:
93:cf:1c:61:2e:47:2e:b8:06:a5:d5:b4:7f:9b:5b:
cd:4f:b4:3f:47:c1:6c:44:12:1d:f0:bd:03:fe:80:
80:ce:35:b5:2f:fa:ff:58:7f:b4:18:9e:ec:63:df:
70:69:db:37:73:88:9c:df:31:37:95:a5:52:2f:36:
db:12:8a:9d:da:fa:bd:3c:8d:5b:f4:d2:2a:15:b6:
19:84:c1:51:b1:4f:67:03:d3:ab:51:9c:94:9a:66:
f3:03:17:99:3b:3f:10:8a:cb:99:f4:62:77:30:1e:
bb:6f:f8:2d:c0:79:c0:dc:37:0f:55:ce:2a:33:a8:
b8:1b:92:7d:be:c0:71:98:32:ae:18:03:45:ec:c9:
43:34:70:eb:fc:08:cc:57:9f:27:df:e9:02:04:c1:
96:86:56:a8:34:92:66:d9:65:4f:ad:36:96:00:a5:
16:d0:32:de:62:ae:75:b6:56:09:aa:07:ad:b4:70:
ce:da:9c:e5:94:df:42:e6:04:05:b3:73:c7:6c:00:
16:ae:e3:6f:1e:cb:b1:d0:c3:12:ca:a5:89:43:92:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D2:D8:81:20:DC:D9:69:EA:39:8B:9D:85:33:46:FC:E9:F4:F9:36
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/SdLYgSDc2WnqOYudhTNG_On0-TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.138.0/23
95.183.192.0/22
193.140.1.0-193.140.7.255
193.255.112.0/21
194.27.92.0-194.27.101.255
Signature Algorithm: sha256WithRSAEncryption
2f:38:aa:9e:3b:08:32:cf:b7:d3:0b:02:3c:03:9b:33:aa:63:
af:e1:0e:31:b5:fe:ec:49:27:30:7a:b4:53:c1:64:33:3e:2f:
9f:fe:e5:01:68:30:d1:d7:6e:3a:f6:31:e8:33:63:ad:5f:89:
53:69:ce:a0:73:ae:26:16:c3:e5:9b:5a:f0:12:35:85:e6:47:
70:10:ba:36:32:55:4e:13:23:3a:41:3c:a8:24:62:39:3f:35:
0f:de:be:64:49:c5:8f:e4:3c:ab:71:07:ae:c9:3e:df:b2:fc:
09:b1:a9:a1:c2:9b:64:d5:c8:2e:fc:97:30:78:77:8e:31:94:
37:c5:43:e5:db:a1:ec:6f:f3:b7:51:be:0b:ab:02:bc:63:2a:
27:56:91:c3:e6:02:b9:3b:64:79:a5:07:d5:89:d1:ac:f8:e8:
66:f6:ad:40:54:98:81:56:82:a3:56:f0:7b:d1:72:ec:54:ae:
70:cd:86:46:80:fa:9e:62:64:a1:ad:58:4f:e2:30:eb:11:1b:
40:7f:ad:d1:77:f6:1f:e8:54:19:f9:e4:3f:e2:53:15:fc:aa:
f1:bb:75:18:5c:e3:44:1d:ed:19:03:8c:f8:a6:d8:0d:1f:34:
9a:35:fb:6b:c1:9d:5e:47:64:9c:c4:8a:f8:ee:5e:2d:93:66:
70:c4:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org