Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/gF7nrBU3t_Am4xFatH-pkyG5LHA.roa
File: gF7nrBU3t_Am4xFatH-pkyG5LHA.roa (raw, json)
Hash identifier: 26nfqWRofpmsuMPd5/vHfVNwtKX9Rmxl5rh8twP6ZYI=
Subject key identifier: 80:5E:E7:AC:15:37:B7:F0:26:E3:11:5A:B4:7F:A9:93:21:B9:2C:70
Certificate issuer: /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial: 01856F9DE42E0AF35A1970FFC8C0C0BB1D2E
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/gF7nrBU3t_Am4xFatH-pkyG5LHA.roa
Signing time: Sun 01 Jan 2023 23:14:56 +0000
ROA not before: Sun 01 Jan 2023 23:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50630
IP address blocks: 195.8.194.0/24 maxlen: 24
109.95.57.0/24 maxlen: 24
109.95.58.0/24 maxlen: 24
2.56.4.0/24 maxlen: 24
2.56.6.0/24 maxlen: 24
2.56.5.0/24 maxlen: 24
2.56.7.0/24 maxlen: 24
2a0d:4d40::/44 maxlen: 48
2a0d:4d40:18::/48 maxlen: 48
2a0d:4d40:13::/48 maxlen: 48
2a0d:4d40:11::/48 maxlen: 48
2a0d:4d40:17::/48 maxlen: 48
2a0d:4d40:12::/48 maxlen: 48
2a0d:4d40:15::/48 maxlen: 48
2a0d:4d40:10::/48 maxlen: 48
2a0d:4d40:16::/48 maxlen: 48
2a0d:4d40:14::/48 maxlen: 48
2a0d:4d40:1a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:e4:2e:0a:f3:5a:19:70:ff:c8:c0:c0:bb:1d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
Validity
Not Before: Jan 1 23:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=805ee7ac1537b7f026e3115ab47fa99321b92c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:4a:4f:ac:03:c8:e5:7d:11:32:30:59:d5:
77:d2:3f:ea:81:0e:2e:3a:6a:41:56:96:b1:36:7a:
12:ea:3b:67:c6:65:d3:4a:22:1c:b2:4c:02:90:58:
a3:42:02:a1:fa:e4:f6:98:b6:d7:af:d9:9d:7b:14:
0f:69:15:f5:1d:d8:9a:9e:9d:de:5b:81:20:3a:8e:
fe:5a:09:3f:84:9a:67:99:23:21:57:d4:02:7d:a0:
4a:d3:ee:66:43:07:55:19:28:e7:17:fe:bb:98:b0:
e1:e1:28:66:15:b8:e1:10:26:1f:96:66:37:d6:de:
78:e0:37:cb:f2:30:3d:d1:c3:22:f7:bd:2a:5f:10:
ac:37:dd:68:68:0b:d2:74:eb:3c:e0:b2:90:40:fb:
d3:cd:80:3d:f7:6f:ea:c1:7e:9a:53:bc:22:3b:a2:
39:39:85:58:d8:37:08:bf:d0:69:ae:ec:1a:73:f2:
34:c3:3f:40:89:aa:75:e7:9c:93:71:17:d1:e8:ef:
84:2f:05:3b:8b:1e:62:b2:b9:97:86:fa:00:aa:71:
96:d6:e0:5e:08:e7:f5:d1:16:f3:2f:20:ce:95:08:
0a:fc:15:cb:b5:e1:17:df:05:cd:0e:ca:d3:7b:9c:
0c:37:ed:16:6e:30:ad:e3:38:a1:ab:d5:5e:b1:94:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5E:E7:AC:15:37:B7:F0:26:E3:11:5A:B4:7F:A9:93:21:B9:2C:70
X509v3 Authority Key Identifier:
keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/gF7nrBU3t_Am4xFatH-pkyG5LHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.4.0/22
109.95.57.0-109.95.58.255
195.8.194.0/24
IPv6:
2a0d:4d40::-2a0d:4d40:18:ffff:ffff:ffff:ffff:ffff
2a0d:4d40:1a::/48
Signature Algorithm: sha256WithRSAEncryption
0e:2b:6d:70:2b:60:fc:e0:72:cd:9e:54:37:d2:8c:88:ec:b9:
ad:f2:ab:fc:fa:8d:a1:ab:e5:f7:42:80:92:a9:54:cb:e5:30:
db:91:8e:2f:3d:42:35:a0:73:1c:36:bb:6f:d7:d9:ba:cd:21:
ef:d9:3c:c6:85:29:4b:9e:c9:98:e9:41:66:60:58:90:d2:26:
e2:c9:9a:83:ba:59:59:e5:07:0e:db:df:f7:6e:c9:7d:ab:2f:
1b:6c:1d:d8:fc:7f:2b:12:96:17:07:9d:06:16:05:1c:4a:ef:
7c:b8:1a:c5:79:f0:39:ec:33:89:b9:c5:a1:30:4d:76:4e:68:
42:c4:a9:e7:5a:04:13:c3:2a:b3:3e:a3:83:c8:dd:27:d5:cf:
19:14:ac:71:75:37:87:df:6d:3b:57:40:11:c1:8c:a9:b8:08:
b2:37:17:b6:7b:64:64:8a:77:58:86:33:69:d8:95:23:d4:62:
18:ec:af:64:52:f1:9d:de:f4:37:00:0f:15:47:b0:0e:05:21:
07:b4:18:1b:fb:20:2a:5a:8a:2d:6c:a7:6f:fd:0a:4b:66:92:
5b:f3:87:bf:64:84:05:02:a2:ed:dc:22:5b:9c:25:1f:80:e9:
7d:1b:02:a1:03:3e:7d:ca:a1:5d:30:cb:7a:bd:5e:42:42:49:
9e:9e:81:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org