Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/49D-dJ9nIuHqSXv9uve73Fm-1Yk.roa
File: 49D-dJ9nIuHqSXv9uve73Fm-1Yk.roa (raw, json)
Hash identifier: Kg9szo/N7SslL3Z2OCpIuH+JcJ79zNQDPVuW2TXaOO4=
Subject key identifier: E3:D0:FE:74:9F:67:22:E1:EA:49:7B:FD:BA:F7:BB:DC:59:BE:D5:89
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB83A5DEB6CC35E38574968F8616587
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/49D-dJ9nIuHqSXv9uve73Fm-1Yk.roa
Signing time: Sun 01 Jan 2023 09:44:50 +0000
ROA not before: Sun 01 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9180
IP address blocks: 195.101.188.0/24 maxlen: 24
195.101.189.0/24 maxlen: 24
194.250.118.0/24 maxlen: 24
194.3.190.0/24 maxlen: 24
217.109.127.0/24 maxlen: 24
194.206.120.0/24 maxlen: 24
195.101.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:3a:5d:eb:6c:c3:5e:38:57:49:68:f8:61:65:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3d0fe749f6722e1ea497bfdbaf7bbdc59bed589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:d2:53:1c:71:b6:ce:c2:c5:90:7f:14:9d:
2c:28:c2:d6:0e:d2:db:eb:d5:c8:e5:11:bd:12:09:
8f:f3:bf:08:b8:a8:b2:57:03:fa:22:f7:47:4e:6d:
cc:cb:65:1c:33:2a:c3:18:c0:2e:d9:ee:2e:d2:a0:
21:71:cc:00:f0:f7:4f:9b:1f:59:ab:35:74:26:7f:
81:89:33:ad:41:f3:6d:e8:4c:36:36:34:18:5e:05:
4f:e2:fb:28:72:a9:9c:9a:7c:43:05:67:4a:bd:0a:
7b:95:c3:95:34:d7:90:9e:b3:fd:5e:76:d2:28:c9:
2e:e8:24:2c:d4:0f:bf:47:a4:94:48:1d:db:38:5b:
e7:f1:c9:f9:c6:84:a4:d5:f4:9f:f0:f0:30:9c:51:
de:31:b5:a6:78:ef:ac:aa:58:89:48:72:58:73:50:
cd:e8:17:92:dc:43:8f:f0:dd:09:28:56:81:06:24:
d2:5a:a9:17:6a:2d:e2:49:c3:77:12:00:70:80:5b:
5b:62:d1:75:cf:5d:03:13:4b:1d:52:43:88:16:3c:
02:15:0b:f4:25:d3:37:65:68:1d:05:5c:8a:8f:5f:
36:9c:11:9a:1c:99:c0:a6:81:5b:8c:d6:32:49:04:
f2:eb:c8:c9:e6:5b:cd:4d:3e:57:92:5c:b8:ce:00:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D0:FE:74:9F:67:22:E1:EA:49:7B:FD:BA:F7:BB:DC:59:BE:D5:89
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/49D-dJ9nIuHqSXv9uve73Fm-1Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.3.190.0/24
194.206.120.0/24
194.250.118.0/24
195.101.64.0/24
195.101.188.0/23
217.109.127.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ca:94:69:b2:51:ee:ac:45:d5:6a:7d:08:3a:fd:7b:77:b8:
87:f9:ca:b8:53:8e:ee:a7:46:e7:aa:b5:b5:76:68:fe:6c:db:
55:71:43:a9:4c:dd:95:21:a0:d3:93:5d:cb:87:f7:dc:ab:9b:
23:75:17:12:f8:82:6f:5c:49:16:04:b6:bf:b9:b3:86:04:15:
ca:b1:15:58:14:78:d2:a8:2e:df:a0:9d:08:d1:cb:38:21:73:
29:34:29:93:96:5b:8d:cd:fd:fe:31:43:ae:0b:f3:48:14:a7:
43:0a:91:15:a1:08:ce:4e:8a:50:e7:e2:7b:c4:c2:a0:6e:c6:
0d:af:a7:5b:74:21:c1:72:91:e4:a9:b6:80:a9:7d:0a:17:44:
f3:14:40:2d:d3:37:53:66:ad:c1:e9:d0:94:f5:e8:a7:f1:23:
14:36:68:97:4b:b0:85:64:da:c0:6b:fa:8f:84:fc:08:b3:ce:
ba:49:3a:b7:05:c7:a2:2e:a2:ff:88:0b:92:98:f6:fc:8d:33:
76:b2:2d:94:78:25:1c:d4:f2:4f:db:8f:ab:24:dc:f6:aa:4e:
f5:61:c7:66:75:03:55:73:7a:39:30:1c:91:4c:8f:64:01:32:
cb:f7:55:f7:ea:3e:bd:1c:f3:b4:39:61:9b:23:75:05:e6:36:
b9:18:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org