Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/ggqNtrqeS2IOWX9bPMXG1Y1Ek4A.roa
File: ggqNtrqeS2IOWX9bPMXG1Y1Ek4A.roa (raw, json)
Hash identifier: NTNQkNalO5nI7QDdKQOkbdOO2SH6OxJMuEfMrw4qYOE=
Subject key identifier: 82:0A:8D:B6:BA:9E:4B:62:0E:59:7F:5B:3C:C5:C6:D5:8D:44:93:80
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 018CF2E544C14351589A9E2851F02EEDF9D7
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/ggqNtrqeS2IOWX9bPMXG1Y1Ek4A.roa
Signing time: Wed 10 Jan 2024 10:22:40 +0000
ROA not before: Wed 10 Jan 2024 10:22:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33845
IP address blocks: 149.126.48.0/21 maxlen: 21
162.23.0.0/16 maxlen: 16
193.5.216.0/21 maxlen: 21
131.102.0.0/16 maxlen: 16
2a07:2900::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jan 2024 13:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:e5:44:c1:43:51:58:9a:9e:28:51:f0:2e:ed:f9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 10 10:22:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=820a8db6ba9e4b620e597f5b3cc5c6d58d449380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:77:06:7d:b8:70:5c:72:00:30:b2:ad:83:
ca:4d:8e:2d:2f:de:4f:99:dc:50:b5:49:da:77:af:
84:d2:e0:9f:c5:94:28:12:89:fb:f7:18:27:ee:07:
f8:96:78:16:f8:7a:b5:bb:8a:7a:79:66:e8:9a:f8:
c1:eb:b5:42:40:f5:c2:94:c7:2f:28:fb:4e:b4:6f:
1b:94:7c:7f:97:ce:c1:c9:5c:44:14:78:01:30:2f:
ba:49:43:50:48:53:7d:5e:82:cd:c2:d2:49:78:23:
20:a9:34:71:9a:a8:e8:fe:99:e4:ad:c6:a6:17:31:
c6:a4:61:ac:d7:e1:7b:0d:73:e4:36:f3:76:42:a2:
0c:4b:c5:b2:b8:ef:89:10:a5:8a:f4:de:8a:4e:9e:
aa:b9:0d:bf:d9:83:b5:6e:74:95:98:10:30:c2:e0:
86:1c:53:4b:f6:43:f2:96:1f:c8:bd:47:4f:aa:26:
ea:bb:40:df:0d:a7:30:7e:04:06:95:01:d4:a7:7f:
fa:e4:6d:68:85:a9:60:8a:66:35:db:e4:79:22:a4:
a9:07:2c:ea:b1:a6:8b:36:1a:db:32:e2:af:b1:a0:
c4:99:2f:04:63:89:92:d0:76:5b:5c:48:89:54:b5:
af:98:70:e4:92:24:4f:21:b6:4f:05:6d:66:21:f2:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:8D:B6:BA:9E:4B:62:0E:59:7F:5B:3C:C5:C6:D5:8D:44:93:80
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/ggqNtrqeS2IOWX9bPMXG1Y1Ek4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.102.0.0/16
149.126.48.0/21
162.23.0.0/16
193.5.216.0/21
IPv6:
2a07:2900::/32
Signature Algorithm: sha256WithRSAEncryption
22:bb:84:5e:d8:14:b7:03:ce:15:a4:1f:75:22:89:71:46:a5:
19:50:2e:d0:d8:31:34:d7:5c:12:8f:d1:b1:f6:4b:f8:89:69:
e1:a0:2d:f3:de:08:73:fb:8f:e8:66:66:55:c0:9f:94:fb:40:
41:a3:51:da:77:17:cf:95:f8:b7:ef:3b:c6:da:be:a9:19:1d:
ed:c2:b9:d8:4a:e3:8a:1b:6b:d3:5e:b0:9a:b5:1a:f8:d1:66:
e5:64:92:d7:8c:60:02:07:5c:22:ae:9a:55:29:97:b8:96:40:
54:0f:40:8b:e7:3a:fd:08:33:ca:bd:3c:b3:a7:c9:29:ab:3e:
74:83:e1:0e:8c:55:d3:ee:ed:a3:c8:6d:27:d8:26:00:b0:42:
d2:8a:85:10:0a:9f:57:7e:7c:84:e9:7a:b2:b1:5e:a4:a4:de:
43:9e:40:94:5c:84:c5:77:7e:b1:d0:f8:a2:26:9d:74:de:77:
eb:00:99:e1:2f:12:d7:1d:ba:55:59:0e:00:a1:91:35:4c:de:
ea:5d:f6:ca:1f:d7:fa:06:36:a6:d9:6b:85:6d:01:2d:16:e6:
0f:c6:68:be:40:0c:1b:26:35:42:a9:91:a0:10:14:b7:bd:15:
f8:d9:b8:e4:56:d8:66:53:95:06:0e:51:fe:7f:64:75:24:d1:
6b:0f:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:10:24 2024 by rpki-client on console-fra.rpki-client.org