Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G1rW1F5bD95rO3z3wNW0BiDd_6c.roa
File: G1rW1F5bD95rO3z3wNW0BiDd_6c.roa (raw, json)
Hash identifier: 8KAvZkfZZbtTmVuVya1WwvRiAq3gqaWPr29ikwRGa1Y=
Subject key identifier: 1B:5A:D6:D4:5E:5B:0F:DE:6B:3B:7C:F7:C0:D5:B4:06:20:DD:FF:A7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B08C535BB13033561070E6E20262F14FC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G1rW1F5bD95rO3z3wNW0BiDd_6c.roa
Signing time: Sat 07 Oct 2023 06:13:43 +0000
ROA not before: Sat 07 Oct 2023 06:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51659
IP address blocks: 193.124.7.0/24 maxlen: 24
194.87.106.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
195.133.5.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
195.133.23.0/24 maxlen: 24
195.58.48.0/23 maxlen: 23
194.87.70.0/24 maxlen: 24
194.87.68.0/23 maxlen: 23
194.87.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 11 Oct 2023 11:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:08:c5:35:bb:13:03:35:61:07:0e:6e:20:26:2f:14:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 7 06:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b5ad6d45e5b0fde6b3b7cf7c0d5b40620ddffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d0:7c:c3:17:56:b9:8b:ee:23:69:7d:77:64:
27:80:57:d3:e5:36:45:b9:69:c2:b4:8d:6a:0c:80:
15:3c:71:ef:f5:09:72:86:0a:7b:07:32:ab:f5:c0:
a2:8b:de:e9:0f:91:65:17:3f:15:7e:13:e7:91:24:
8a:71:24:f0:c8:d2:a1:ba:79:fc:c4:41:49:ce:e8:
ce:3d:9d:11:54:22:1f:dd:97:37:c2:2c:e7:f6:0a:
5b:05:6b:4d:06:6d:bb:27:c3:f7:c3:68:2e:de:22:
77:26:3a:25:8d:b0:a6:8b:48:4d:a1:38:75:d0:ec:
7b:14:e7:a2:a2:fb:11:70:76:4f:ee:de:16:c6:a7:
0f:c6:c7:0f:25:f0:b3:58:e0:ff:80:99:b2:55:60:
fc:66:0e:d9:a1:01:bc:d2:79:8e:92:02:3a:a0:a5:
02:3c:97:31:51:f2:cd:62:c5:5f:28:92:2c:0a:cd:
03:89:37:b5:34:4d:0b:46:d5:65:f2:0a:2a:4c:ef:
16:5b:9e:ee:5c:8c:a3:f5:e8:38:21:22:c3:2f:c0:
cc:ad:d0:e4:ff:3f:fb:e0:8a:f7:de:18:a2:35:d8:
ac:aa:05:62:21:35:ba:72:e3:7b:81:9c:c2:96:90:
6f:c7:74:98:98:03:14:b7:fb:e2:3f:6d:50:d7:53:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5A:D6:D4:5E:5B:0F:DE:6B:3B:7C:F7:C0:D5:B4:06:20:DD:FF:A7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G1rW1F5bD95rO3z3wNW0BiDd_6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
194.87.48.0/24
194.87.68.0-194.87.70.255
194.87.106.0/24
194.87.196.0/23
194.87.215.0/24
195.58.48.0/23
195.133.5.0/24
195.133.9.0/24
195.133.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:18:0b:08:ef:7d:78:6c:88:51:31:be:69:1f:d9:7b:d0:43:
cd:f2:d3:54:4f:a7:6e:a6:49:85:0c:60:71:f5:c1:0e:59:bd:
d2:21:82:97:b7:18:b4:3b:fc:db:3a:75:f3:9f:4c:38:5c:12:
7e:86:d3:7c:96:5c:3a:6f:15:f7:cd:0a:dd:90:a8:02:62:75:
58:6c:90:33:4c:dd:68:dc:ff:f1:23:75:21:ff:bd:29:c1:a1:
d6:97:1f:f6:b9:c1:cc:a1:a3:6a:e4:31:f5:6a:43:6f:7f:62:
66:fa:9e:91:56:fd:ca:dc:04:25:da:91:22:f7:1a:f1:0e:7a:
72:8f:4d:cc:eb:48:2a:06:86:4f:df:f0:fc:0e:eb:de:55:0f:
dc:ae:8b:58:b7:2a:45:57:07:e8:ef:f1:a6:35:a7:4c:dd:bb:
33:2d:28:f4:b0:30:33:ae:3e:7c:df:60:3d:a9:e1:50:8e:3c:
d7:98:e0:53:4a:1c:89:da:3f:00:44:b4:34:fa:ca:1a:d3:b9:
a7:76:75:3e:e7:fa:0c:5f:d6:bf:7c:08:27:e5:3d:31:a8:8c:
db:9b:33:50:e9:ca:4b:27:9c:a0:61:85:30:4d:aa:cd:db:90:
6b:7b:3d:c3:d8:4b:d6:2c:16:37:7c:d3:e3:b1:c2:cd:eb:6e:
8c:9d:c9:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:11 2024 by rpki-client on console-fra.rpki-client.org