Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/63GmGKaBWbHEXMALKv2T6FpkjFw.roa
File: 63GmGKaBWbHEXMALKv2T6FpkjFw.roa (raw, json)
Hash identifier: 5EbImmXHpf4RgZ/7w4vswobz4fnnpvdn6OVBX08buTI=
Subject key identifier: EB:71:A6:18:A6:81:59:B1:C4:5C:C0:0B:2A:FD:93:E8:5A:64:8C:5C
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 018CCA976EDFBBBF150091FDC77809524CC5
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/63GmGKaBWbHEXMALKv2T6FpkjFw.roa
Signing time: Tue 02 Jan 2024 14:32:50 +0000
ROA not before: Tue 02 Jan 2024 14:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202316
IP address blocks: 195.69.231.0/24 maxlen: 24
195.69.228.0/24 maxlen: 24
195.69.229.0/24 maxlen: 24
195.69.230.0/24 maxlen: 24
2a09:2883::/48 maxlen: 48
2a09:2881::/48 maxlen: 48
2a09:2885::/48 maxlen: 48
2a09:2884::/48 maxlen: 48
2a09:2882::/48 maxlen: 48
2a09:2880::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 May 2024 13:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:97:6e:df:bb:bf:15:00:91:fd:c7:78:09:52:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Jan 2 14:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb71a618a68159b1c45cc00b2afd93e85a648c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:9a:d3:3b:6f:d5:73:1c:12:2a:81:cb:13:
16:7b:b6:ee:9a:fa:ac:c0:20:4d:b3:83:ac:62:44:
dd:95:0d:4f:92:ce:d6:2e:6e:27:06:df:c9:1d:e9:
48:d9:0e:1c:0b:22:85:84:4e:a0:d3:b6:17:10:fc:
aa:37:f9:0f:cc:85:fa:e5:7d:23:d4:a0:39:30:aa:
ad:0a:b9:3c:69:77:92:ed:c4:e0:b0:6b:76:e7:34:
c9:d5:a9:6a:58:92:6d:02:78:01:3d:08:b1:2e:be:
74:79:e5:b3:66:35:30:98:79:24:39:b4:c8:79:4f:
3d:f1:25:11:3c:8b:fd:e2:be:5b:5c:d2:23:7d:e1:
aa:1e:06:2b:e5:46:9b:4b:65:d2:c1:68:27:ba:f8:
77:3b:c3:04:04:b7:e7:35:19:95:f7:ef:ac:70:be:
99:f2:1c:1f:a5:e3:d4:54:d7:ae:b3:94:2b:10:a5:
08:13:73:64:b0:4b:67:77:e0:95:3e:c1:7a:5e:be:
66:3c:ea:78:86:d3:21:43:de:21:d3:3d:8d:78:0d:
75:8a:96:2a:c4:07:46:3c:48:ae:69:66:b4:b0:3f:
8b:b4:4c:87:47:91:d1:94:e5:f2:52:d6:c1:23:3a:
7f:d7:3a:37:b0:3c:f9:f7:58:72:97:38:9d:c6:25:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:A6:18:A6:81:59:B1:C4:5C:C0:0B:2A:FD:93:E8:5A:64:8C:5C
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/63GmGKaBWbHEXMALKv2T6FpkjFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.228.0/22
IPv6:
2a09:2880::/48
2a09:2881::/48
2a09:2882::/48
2a09:2883::/48
2a09:2884::/48
2a09:2885::/48
Signature Algorithm: sha256WithRSAEncryption
31:1c:a2:b1:4c:98:73:e2:41:9f:0d:17:10:a6:b0:6b:3b:b8:
2a:b9:90:4a:2b:64:52:1c:61:ae:96:48:5d:23:61:9e:07:a1:
12:f4:1e:c3:33:1f:0e:f0:0d:d3:a9:b2:bf:1a:55:b0:19:1e:
b1:c6:da:b5:9c:e8:cb:39:25:f6:79:bf:42:e4:0d:94:99:3d:
55:ea:5a:5d:e7:a6:95:4e:ee:e8:ed:44:54:1d:36:6f:40:8a:
47:5d:32:48:4f:9f:2e:ad:4e:66:98:57:d4:1f:86:d6:7b:b6:
90:e8:5a:8d:92:53:ac:bb:58:fc:50:e9:6e:aa:ce:8d:e9:df:
da:8f:9c:fe:64:88:36:92:7f:85:fe:19:55:f2:2c:37:b7:cb:
f7:56:70:fb:73:35:e4:3c:a4:42:b2:99:07:ff:f5:b9:76:63:
36:70:03:e2:52:5d:6d:56:45:be:da:ed:60:af:a1:74:08:11:
a7:71:09:f4:82:69:71:89:1b:fa:72:1c:58:55:4b:1c:7c:80:
e3:0c:ad:b0:7d:d1:bd:9d:0e:36:07:0c:02:ce:13:8d:46:0f:
da:7d:02:ea:24:1e:d4:a8:5e:0e:16:8a:f8:c5:86:cd:c9:7f:
86:6f:16:7a:8d:b0:32:7e:62:4c:f7:df:c5:8c:4e:cb:83:35:
14:35:bc:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:32 2024 by rpki-client on console-ams.rpki-client.org