Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/GtEKBFCl0csG9P-25kcEbdXgd4E.roa
File: GtEKBFCl0csG9P-25kcEbdXgd4E.roa (raw, json)
Hash identifier: d5dRum74mGuDO9XSLg4N8ZOBMcw3Tk5K2Ptk6saS3gM=
Subject key identifier: 1A:D1:0A:04:50:A5:D1:CB:06:F4:FF:B6:E6:47:04:6D:D5:E0:77:81
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018E67A4010BEA7CDE6D6C5C5917C4947D49
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/GtEKBFCl0csG9P-25kcEbdXgd4E.roa
Signing time: Fri 22 Mar 2024 19:29:45 +0000
ROA not before: Fri 22 Mar 2024 19:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 23 Apr 2024 11:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:67:a4:01:0b:ea:7c:de:6d:6c:5c:59:17:c4:94:7d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 22 19:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ad10a0450a5d1cb06f4ffb6e647046dd5e07781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:ea:3c:c3:ff:ab:10:90:98:83:e9:14:01:
d1:57:d1:65:1a:3e:31:69:65:1c:d8:91:f4:ba:0d:
71:39:03:07:40:ab:dd:3b:ef:f9:50:04:45:31:d5:
79:87:d1:8e:46:f8:66:a2:dd:61:ec:e1:13:92:c9:
1d:f0:74:a0:19:f2:c8:9a:b6:4a:a1:4a:db:44:ee:
33:8e:5a:91:3c:2c:0d:0b:5e:56:ed:ab:12:2c:8d:
ac:5b:cc:3d:52:ce:42:19:13:a4:fa:d9:87:4b:4a:
36:79:2a:88:65:08:1e:4d:5f:39:5c:23:2d:35:0d:
4e:0b:3d:78:89:a7:c9:41:13:90:b1:2d:18:13:2b:
64:37:55:33:46:68:69:36:85:e6:42:9a:71:61:e9:
28:18:23:83:0e:30:02:15:f5:f9:96:4d:8f:c5:9c:
14:22:84:ff:c7:36:54:a3:c4:a5:ce:e5:b8:d8:43:
e6:2d:27:7b:21:63:f5:1c:66:10:30:f6:66:28:70:
5b:64:24:67:4b:09:33:fd:03:3b:2e:58:a7:17:28:
35:6b:6f:e9:f9:0b:da:6e:88:98:6f:4e:be:a3:44:
b2:ba:9f:d0:dc:c7:89:46:e0:0e:24:a2:5d:71:e4:
f2:91:f9:5a:ed:e0:8a:91:72:eb:4a:91:84:a8:9a:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D1:0A:04:50:A5:D1:CB:06:F4:FF:B6:E6:47:04:6D:D5:E0:77:81
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/GtEKBFCl0csG9P-25kcEbdXgd4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.45.0-89.43.46.255
89.43.73.0/24
89.44.209.0/24
89.45.34.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
b5:47:a9:f8:30:89:43:e5:87:cf:04:2f:63:2a:4d:fb:b1:71:
d7:36:71:40:22:47:56:65:14:35:90:df:8f:f5:a0:6b:6a:fd:
84:da:cf:3f:23:fd:a3:95:59:bf:0e:cb:e8:ce:d7:b7:a8:83:
52:94:e4:e1:9d:5e:c4:a5:22:b6:77:3d:b7:51:95:ee:b9:b5:
d0:7f:27:c6:a8:63:a7:3f:dd:95:ab:cb:a7:dd:b9:7e:2d:80:
42:54:e8:f8:f1:d4:be:ba:08:45:c9:9e:95:32:d1:e6:23:68:
8e:45:66:c6:1b:68:4e:82:c3:35:4a:b6:f5:f0:58:d8:2d:28:
81:a8:1f:c2:0b:95:be:3b:b0:ab:e8:e0:fc:8a:73:d7:e1:71:
7f:88:a9:dc:9a:5c:61:8f:43:df:85:0a:6b:85:99:c0:75:34:
2a:13:e0:14:0d:64:7b:2b:98:de:b0:d3:be:45:92:e0:7d:e6:
a6:76:df:cb:80:19:85:3d:cf:66:fc:7c:ad:a1:ae:59:48:7f:
a9:dd:a0:13:21:56:71:78:89:b9:fa:19:8b:5d:93:44:86:df:
91:1f:c1:13:dc:97:d5:ca:1e:f0:83:6c:9b:1a:32:24:92:3c:
9d:9c:a1:9d:44:db:2a:d7:18:1a:07:98:2f:37:fd:37:e4:1f:
1c:57:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org