Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/A_srwzmbHxXktjxL2yjwv_3lkiM.roa
File: A_srwzmbHxXktjxL2yjwv_3lkiM.roa (raw, json)
Hash identifier: hPbJsre4CuQg/IsqgxrBPfWkqQ/D8a13GexZgMv1low=
Subject key identifier: 03:FB:2B:C3:39:9B:1F:15:E4:B6:3C:4B:DB:28:F0:BF:FD:E5:92:23
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 018C154269001BC294C53A5BC4D3F5D8BAD6
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/A_srwzmbHxXktjxL2yjwv_3lkiM.roa
Signing time: Tue 28 Nov 2023 09:28:42 +0000
ROA not before: Tue 28 Nov 2023 09:28:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 217.195.195.0/24 maxlen: 24
217.195.197.0/24 maxlen: 24
80.93.220.0/24 maxlen: 24
2a05:3040::/32 maxlen: 32
2a05:3046::/32 maxlen: 32
2a05:3045::/32 maxlen: 32
2a05:3042::/32 maxlen: 32
2a05:3041::/32 maxlen: 32
2a05:3040::/29 maxlen: 29
2a05:3043::/32 maxlen: 32
2a05:3044::/32 maxlen: 32
2a05:3047::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:42:69:00:1b:c2:94:c5:3a:5b:c4:d3:f5:d8:ba:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Nov 28 09:28:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03fb2bc3399b1f15e4b63c4bdb28f0bffde59223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:76:43:30:1e:0e:29:ec:6b:f3:21:53:93:
be:ab:88:e3:15:d2:10:af:93:4a:ca:c9:1e:5e:48:
81:fb:ae:38:dc:b0:1f:14:52:bb:2c:8b:12:cc:39:
38:35:2c:03:80:ef:f0:90:5d:82:58:d6:9b:67:46:
69:56:6b:0f:66:a8:18:a2:a2:4e:11:15:fc:ec:a2:
e7:d5:42:3c:27:56:68:cb:4c:54:e0:b6:6d:87:13:
0d:c2:bc:3e:4a:35:f9:c6:56:58:d0:ae:70:d7:71:
3b:1a:30:ad:ec:13:09:ea:67:8f:1e:c0:83:f1:34:
a5:02:53:26:82:3e:09:53:93:39:08:eb:50:de:d0:
7b:33:d0:86:a3:99:38:7c:3d:90:8b:68:13:f6:61:
b3:3e:08:b9:92:dc:8c:40:c5:9b:88:73:40:70:fa:
37:2b:04:fb:6f:f6:e9:ca:e5:dd:4d:52:ad:ca:e2:
86:66:c1:3c:ea:41:13:38:0d:00:38:44:48:17:08:
c6:53:6c:47:d8:9f:0d:f8:c4:43:32:7d:42:d1:1a:
0a:f9:4a:f4:b0:d0:ea:17:3d:ab:53:4f:e2:fa:10:
12:08:5a:2f:ec:e4:15:44:0b:00:6e:9a:15:51:0d:
56:4a:c6:e3:b1:92:3b:a0:03:e1:3d:39:1e:cf:22:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FB:2B:C3:39:9B:1F:15:E4:B6:3C:4B:DB:28:F0:BF:FD:E5:92:23
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/A_srwzmbHxXktjxL2yjwv_3lkiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
IPv6:
2a05:3040::/29
Signature Algorithm: sha256WithRSAEncryption
90:53:40:26:6e:c4:9b:6f:48:b4:65:36:8d:95:b4:9b:cf:3b:
63:40:e8:a0:0a:d6:0f:b0:eb:d6:41:7a:7a:98:7f:18:10:da:
2f:a3:07:b8:a5:c7:0a:9b:1a:e1:ec:29:a9:c4:b7:f0:6c:cc:
10:7b:3b:95:3f:b2:de:76:fd:bc:61:a8:0d:1f:8a:f6:21:e2:
ca:87:d5:53:0f:f8:82:1b:92:37:8f:ed:a4:1b:88:6e:aa:3b:
d3:ed:f5:26:0b:39:71:fb:e3:99:d1:da:03:3c:98:73:33:84:
ce:e1:c1:d7:b6:57:1f:90:05:5e:88:8f:37:b6:52:99:83:0b:
21:0f:db:77:15:7a:fd:b5:45:e8:85:56:1d:33:2d:c9:87:af:
9b:b1:f3:43:a8:cf:90:1b:98:99:37:47:f5:ed:4e:05:84:46:
48:c6:d2:82:1d:bd:d8:c1:58:a7:2c:e7:9b:5d:bb:9d:f8:3a:
0f:ab:f2:93:e5:ad:f0:08:4c:55:ac:b9:16:01:1c:40:3e:9f:
cd:59:b5:e7:9c:a4:30:ef:72:88:7e:10:98:2c:a1:33:01:67:
a0:84:7c:ce:04:b3:8b:41:3a:a1:78:31:12:09:c5:6b:77:0f:
d5:2f:6f:30:b8:d2:80:dc:cd:73:a5:85:34:6e:67:f5:ea:7a:
19:20:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:33 2024 by rpki-client on console-ams.rpki-client.org