Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/wOkTHCBgJqQYE8hLc4O18sq0OoI.roa
File: wOkTHCBgJqQYE8hLc4O18sq0OoI.roa (raw, json)
Hash identifier: UG/YyMELGIJUlW1RiW1k/NneiYAnvuH825CibDResIk=
Subject key identifier: C0:E9:13:1C:20:60:26:A4:18:13:C8:4B:73:83:B5:F2:CA:B4:3A:82
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 0187E632F5CBDB344F39F59B39D21481CC2A
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/wOkTHCBgJqQYE8hLc4O18sq0OoI.roa
Signing time: Thu 04 May 2023 09:58:32 +0000
ROA not before: Thu 04 May 2023 09:58:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 195.36.17.0/24 maxlen: 24
195.36.16.0/24 maxlen: 24
195.36.24.0/24 maxlen: 24
195.36.18.0/24 maxlen: 24
195.36.23.0/24 maxlen: 24
195.36.21.0/24 maxlen: 24
195.36.22.0/24 maxlen: 24
195.36.19.0/24 maxlen: 24
195.36.20.0/24 maxlen: 24
195.36.31.0/24 maxlen: 24
195.36.25.0/24 maxlen: 24
195.36.30.0/24 maxlen: 24
195.36.28.0/24 maxlen: 24
195.36.29.0/24 maxlen: 24
195.36.26.0/24 maxlen: 24
195.36.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:32:f5:cb:db:34:4f:39:f5:9b:39:d2:14:81:cc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: May 4 09:58:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0e9131c206026a41813c84b7383b5f2cab43a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cc:65:dc:92:ae:b4:67:15:10:60:29:1a:be:
3c:8e:dc:cd:54:47:0a:5b:43:39:ff:ac:15:79:40:
fd:b0:c5:3b:64:1b:e3:a7:ee:d0:e6:08:c2:32:c1:
24:e2:7a:02:3f:ee:b6:50:db:0d:7b:eb:eb:b8:0b:
33:0b:58:46:01:68:73:8b:9c:3e:31:2a:06:f6:fd:
77:74:cb:cd:fc:0d:ba:55:bc:92:76:0f:2e:64:3e:
4b:be:68:12:ff:5b:35:b6:7c:8b:e3:eb:16:ec:a9:
0b:ef:fb:a5:0e:ff:2c:2d:51:93:03:ea:d6:d1:72:
b3:c1:21:b8:a1:82:7f:fb:c3:9c:80:c3:6a:f9:3c:
f3:6c:28:0f:3c:04:3a:75:df:8b:18:ec:13:a4:0d:
30:66:15:9c:f3:08:cf:a0:97:e2:f8:26:2a:59:c2:
a7:42:f3:fb:ee:23:c5:c8:8a:1f:25:67:44:61:e8:
94:b7:d4:a0:7d:f2:2e:ba:6b:ad:22:1d:b7:60:2f:
d4:6c:84:19:1a:f3:5f:3a:8d:b5:e7:02:c0:3c:0c:
10:f3:30:37:2c:bb:47:9b:92:23:aa:74:7f:73:0a:
95:c5:fb:a5:6a:9b:5f:a7:67:bf:b4:5b:a2:87:1a:
9e:97:69:9c:61:cb:33:e4:c9:23:6c:94:21:c1:60:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E9:13:1C:20:60:26:A4:18:13:C8:4B:73:83:B5:F2:CA:B4:3A:82
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/wOkTHCBgJqQYE8hLc4O18sq0OoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.36.16.0/20
Signature Algorithm: sha256WithRSAEncryption
92:b6:52:62:d9:80:c6:fa:93:24:38:8a:46:a7:ff:eb:4c:92:
4c:ca:34:c8:94:f3:98:03:5c:7b:d5:db:1d:ab:5a:2f:bc:a3:
20:17:6d:8a:fd:e3:c7:b1:89:0d:7b:8c:96:e7:be:0c:f5:98:
c8:1a:6e:90:2d:ea:e8:4e:39:9f:15:53:9c:04:65:b4:23:51:
ee:69:fe:3e:46:f2:46:9a:3c:db:ca:3d:2d:5a:9f:94:1c:52:
be:73:d2:3f:75:52:94:3b:51:e4:84:af:5f:6f:c6:89:94:e8:
c5:5a:02:f0:02:a1:85:af:a2:d9:d2:bb:16:db:9f:63:01:f1:
62:a4:1b:a8:5f:16:8f:31:e2:57:93:17:40:72:6a:ab:e7:5b:
36:22:03:8f:ca:c0:34:68:ff:c9:f7:ba:52:f9:da:27:3e:de:
1a:7b:92:b8:4f:70:53:34:b1:9a:c7:5d:69:6d:64:b0:71:39:
78:c7:00:ec:fd:e9:9f:8b:e7:e9:4c:b1:28:ec:8b:24:2c:63:
9b:1e:c9:9b:bd:d7:f4:8f:27:c6:79:a0:37:8a:14:6b:b7:b3:
d5:ad:a9:69:d3:bc:dc:5f:59:d1:7f:e5:d1:c6:8c:ec:7a:5a:
64:7c:66:d2:7e:5f:84:98:3a:e3:d4:d6:42:81:79:2c:37:4a:
b3:fa:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:39 2024 by rpki-client on console-ams.rpki-client.org