Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/g01zBs2sB8xtn6B4qL3h52Cdh0U.roa
File: g01zBs2sB8xtn6B4qL3h52Cdh0U.roa (raw, json)
Hash identifier: KW696InSMVWX+tFniCLHwYq0rwS6HTqc65pDwO2+iCY=
Subject key identifier: 83:4D:73:06:CD:AC:07:CC:6D:9F:A0:78:A8:BD:E1:E7:60:9D:87:45
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018577A7C7C6C925A4968D5AB7020B629BCF
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/g01zBs2sB8xtn6B4qL3h52Cdh0U.roa
Signing time: Tue 03 Jan 2023 12:42:42 +0000
ROA not before: Tue 03 Jan 2023 12:42:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 212.111.207.0/24 maxlen: 24
212.111.211.0/24 maxlen: 24
212.111.218.0/23 maxlen: 24
195.178.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 11:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:a7:c7:c6:c9:25:a4:96:8d:5a:b7:02:0b:62:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 3 12:42:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=834d7306cdac07cc6d9fa078a8bde1e7609d8745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:e3:e8:91:4a:b1:43:73:fb:ec:56:21:20:
9b:f8:a2:bb:52:7c:6c:a1:66:a1:aa:64:aa:cd:26:
e9:94:50:8f:56:06:55:c1:cc:99:e3:ba:db:7d:03:
84:e5:af:e0:bf:26:07:33:e0:e4:89:6f:a6:66:f9:
ee:b2:70:ab:9e:84:9e:d6:b9:4f:a8:c7:aa:3c:c6:
a5:8b:07:e7:64:9f:3d:6b:25:13:d5:74:03:47:41:
bc:84:72:6d:c0:d3:ea:9f:77:a2:5f:fb:c5:d3:45:
eb:40:e3:33:a7:66:eb:ca:36:7d:20:c4:c2:cc:64:
8f:32:e8:92:ff:6c:22:f2:eb:fd:fd:4b:85:78:b2:
4d:1b:4e:43:d0:d7:8c:a4:dc:53:f1:5e:44:5a:3f:
a0:16:de:2e:17:c7:ee:01:4a:c7:54:e5:e0:20:7b:
1b:30:61:51:6a:d8:29:e9:ca:db:03:2c:5a:01:78:
1f:17:fc:06:47:c6:12:ea:65:60:aa:c5:e1:00:84:
83:4c:88:d3:19:d5:44:a0:b4:b4:9a:4e:35:b2:8e:
6d:55:7b:d4:02:4c:a0:f8:d1:83:ce:6d:a6:95:02:
05:d9:39:d9:62:dd:51:a2:ff:3f:8c:78:19:69:7b:
5b:31:47:68:9d:96:48:15:51:22:8e:9e:8c:46:e6:
05:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4D:73:06:CD:AC:07:CC:6D:9F:A0:78:A8:BD:E1:E7:60:9D:87:45
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/g01zBs2sB8xtn6B4qL3h52Cdh0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.141.0/24
212.111.207.0/24
212.111.211.0/24
212.111.218.0/23
Signature Algorithm: sha256WithRSAEncryption
02:18:4e:fc:08:bf:2b:dd:37:c5:df:78:c7:a1:8d:1d:79:1a:
9e:57:8b:f6:91:f5:d0:c4:54:b1:da:1b:3d:c6:07:70:0b:24:
c0:79:41:08:fc:d9:b5:3e:0c:2d:9c:19:d9:d2:87:04:05:06:
7f:0f:0f:ba:84:0c:f6:7c:2b:e4:ce:6f:2d:4c:86:ce:f7:21:
62:03:71:6d:af:93:a3:d5:c8:27:14:e6:86:f8:79:c8:8a:54:
d8:37:9d:80:0e:fc:ea:a5:e5:7d:0d:1d:a1:4e:68:a4:4d:18:
46:52:2a:1d:ee:71:fd:4b:cb:9b:09:28:62:b3:d2:0f:36:a9:
84:86:d3:f2:88:77:f5:63:c0:a9:1e:b2:01:16:50:39:5f:66:
8b:80:b8:d1:56:99:f4:6f:bd:5c:9e:59:47:cf:c7:de:9a:97:
82:17:41:4e:ef:ab:bf:1e:8e:fe:9d:ef:76:7a:2b:4f:f4:a6:
9b:d3:e5:d8:83:c5:1e:bc:68:cd:80:9c:a9:ff:24:21:65:dd:
29:95:f7:ea:e0:20:44:eb:47:00:50:69:4c:cc:60:99:3a:f7:
cd:bd:96:ab:ad:f2:62:2d:e0:fd:bd:0e:6e:7a:76:7d:bd:2d:
50:80:c1:4e:8f:f8:64:71:13:d6:8e:19:f6:6d:13:1e:08:ef:
4f:f1:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org