Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/d5sO5fN2dQPRyCxcMfbvfgZ9aOI.roa
File: d5sO5fN2dQPRyCxcMfbvfgZ9aOI.roa (raw, json)
Hash identifier: hmd+Hn6tu0gfsT+LZ8cjZKDM3EhT74g/6POcGxEi5ms=
Subject key identifier: 77:9B:0E:E5:F3:76:75:03:D1:C8:2C:5C:31:F6:EF:7E:06:7D:68:E2
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018A8493C1C128EEBF5E9EEECA963BE61DE9
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/d5sO5fN2dQPRyCxcMfbvfgZ9aOI.roa
Signing time: Mon 11 Sep 2023 14:09:50 +0000
ROA not before: Mon 11 Sep 2023 14:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208022
IP address blocks: 195.93.226.0/24 maxlen: 24
2a11:3786::/32 maxlen: 48
2a11:3784::/32 maxlen: 48
2a11:3782::/32 maxlen: 48
2a11:3780::/32 maxlen: 48
2a0a:281::/32 maxlen: 48
2a11:3783::/32 maxlen: 48
2a11:3785::/32 maxlen: 48
2a12:ef40::/29 maxlen: 48
2a0a:282::/32 maxlen: 48
2a11:3787::/32 maxlen: 48
2a11:3781::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Dec 2023 07:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:93:c1:c1:28:ee:bf:5e:9e:ee:ca:96:3b:e6:1d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Sep 11 14:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=779b0ee5f3767503d1c82c5c31f6ef7e067d68e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:ff:bf:fe:a0:50:5a:84:8b:b9:da:ad:c7:
99:79:aa:8f:2e:9e:33:38:f3:96:78:c3:44:ba:f2:
2b:70:0c:b1:2b:33:5b:a5:f2:4f:65:28:1c:fa:2a:
88:97:14:29:d2:a9:4f:0c:5b:d1:be:23:d2:60:09:
04:45:59:e9:0f:03:0a:9a:42:86:aa:31:f4:39:8f:
67:95:3f:3f:13:e6:ce:1e:fe:84:90:53:1a:89:d2:
dc:04:d3:09:73:73:3b:c8:2e:e2:0d:08:ba:13:41:
e2:8f:f9:36:42:d3:ce:77:11:24:61:ba:e9:d1:30:
b3:b7:bd:7c:70:7f:dc:a8:2c:ef:45:c1:48:50:4f:
fc:4e:6c:0b:c5:4d:f0:62:5a:7b:95:b4:21:76:32:
9f:f8:7c:cb:bd:1f:b8:5b:66:42:a1:26:6f:7b:42:
ac:2b:91:92:56:14:33:9c:34:96:96:e3:b1:57:02:
7b:1b:f8:9e:37:e6:3f:41:a4:23:38:40:07:b8:cc:
ba:67:63:8b:d7:0e:11:26:1f:cd:c1:fd:28:ac:2a:
75:56:eb:35:ea:e4:b9:54:b1:3b:c8:ca:fe:d6:2f:
44:fb:0d:1c:fb:5b:38:93:4d:e6:00:8d:f8:c8:87:
dd:c9:7e:2b:dd:88:47:fd:ef:bb:12:4d:ee:73:16:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9B:0E:E5:F3:76:75:03:D1:C8:2C:5C:31:F6:EF:7E:06:7D:68:E2
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/d5sO5fN2dQPRyCxcMfbvfgZ9aOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.226.0/24
IPv6:
2a0a:281::-2a0a:282:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3780::/29
2a12:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
61:f6:8a:ef:60:fc:fe:77:f7:8d:46:1b:80:70:60:5f:5a:f4:
36:ea:ce:cb:78:90:dd:a8:71:36:92:63:d7:84:f1:e8:01:24:
05:c0:e4:26:ec:62:e6:ae:74:69:61:f8:c4:49:38:c0:b0:41:
57:86:d4:f5:cd:d0:ae:b5:37:3c:04:d1:e4:f9:aa:19:dc:5d:
40:8f:dd:e3:82:6c:f5:ca:a2:67:83:01:90:40:3c:50:1b:87:
5a:fa:83:e7:2b:c4:3f:f0:6b:ef:22:1c:fb:66:c0:4a:1e:af:
7e:57:f1:b1:61:a7:b9:c1:81:0b:ba:29:37:73:e8:e6:8d:c3:
03:98:85:1c:d8:e2:3e:76:46:32:f5:64:b1:9b:53:c6:12:01:
e2:f1:6f:e2:10:86:02:05:be:c9:48:0e:0e:1b:07:b0:a7:b2:
ec:6f:79:50:7b:da:ed:38:b1:1b:01:3a:d0:8c:e2:75:3b:c0:
32:8f:59:60:89:ed:ac:05:9e:bb:e7:b0:a0:27:8c:1c:e7:bc:
83:e6:0a:6d:4e:ff:cf:39:3c:9a:f0:82:da:cf:b1:88:70:43:
5b:8e:44:ee:17:f6:93:ad:cb:fa:cd:9a:32:ac:a0:5a:99:a0:
36:83:e5:c3:76:d6:dd:ff:6b:21:25:39:0c:18:eb:ee:7d:df:
87:3b:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:22 2024 by rpki-client on console-fra.rpki-client.org