Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/6GLSnYY0QDp9iNtUs6V12av-_60.roa
File: 6GLSnYY0QDp9iNtUs6V12av-_60.roa (raw, json)
Hash identifier: s1V9wDSk2Blf2tlzBkPVo4vRvVEiw9R9CfVv9DxR/L8=
Subject key identifier: E8:62:D2:9D:86:34:40:3A:7D:88:DB:54:B3:A5:75:D9:AB:FE:FF:AD
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 018571A79A89B5D4AB422B417B8FC271B3AD
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/6GLSnYY0QDp9iNtUs6V12av-_60.roa
Signing time: Mon 02 Jan 2023 08:44:47 +0000
ROA not before: Mon 02 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.25.48.0/24 maxlen: 24
193.25.49.0/24 maxlen: 24
193.25.50.0/24 maxlen: 24
193.25.51.0/24 maxlen: 24
193.25.55.0/24 maxlen: 24
193.25.56.0/24 maxlen: 24
193.25.54.0/24 maxlen: 24
193.25.57.0/24 maxlen: 24
193.25.58.0/24 maxlen: 24
193.25.52.0/24 maxlen: 24
193.25.53.0/24 maxlen: 24
193.25.59.0/24 maxlen: 24
193.25.62.0/24 maxlen: 24
193.25.63.0/24 maxlen: 24
193.25.60.0/24 maxlen: 24
193.25.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:9a:89:b5:d4:ab:42:2b:41:7b:8f:c2:71:b3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Jan 2 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e862d29d8634403a7d88db54b3a575d9abfeffad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:00:79:96:87:db:6a:8f:3d:38:64:c8:bf:
cb:a7:5d:1b:45:f5:23:80:4b:30:e0:74:0f:15:a4:
04:55:d5:b4:22:54:83:b6:bd:a8:7f:09:a1:ee:c5:
2a:7c:15:3a:7b:84:5f:d3:27:d2:b7:ac:e8:06:17:
c0:20:f6:35:fa:32:a1:0f:93:12:a5:87:e5:d3:52:
03:da:0e:56:a3:83:83:5e:6a:5d:04:08:09:7a:3b:
1e:fe:a5:1c:d6:81:0c:c8:60:00:f3:b1:75:f4:74:
fc:e0:10:b1:53:07:10:66:85:29:18:65:cd:86:7f:
63:d0:53:37:e6:ed:c2:42:3e:f9:3a:0d:40:f1:1c:
2b:92:7f:f2:b3:5b:2e:6a:55:15:ca:26:63:33:5a:
b8:1a:a1:3a:a0:ab:15:1d:ec:b1:b7:2e:3b:cc:41:
e5:aa:5b:21:75:7b:42:64:73:42:58:62:4d:d7:89:
90:49:1b:51:4b:5c:6c:00:d3:39:c4:8b:76:7a:dd:
06:a1:ac:0d:39:62:10:5b:ee:1f:bd:c1:62:8a:88:
86:ba:c4:a1:01:c6:d5:ba:f4:ea:39:f8:14:d1:10:
30:47:78:1d:a8:1b:c0:73:ad:04:06:f7:f2:39:f7:
00:80:90:9c:fa:26:08:9b:04:ec:71:97:11:d8:91:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:62:D2:9D:86:34:40:3A:7D:88:DB:54:B3:A5:75:D9:AB:FE:FF:AD
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/6GLSnYY0QDp9iNtUs6V12av-_60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.48.0/20
Signature Algorithm: sha256WithRSAEncryption
70:47:a6:84:43:65:89:04:ce:c6:3b:fa:45:73:b4:3e:4c:b2:
d9:53:1f:d6:0c:97:9e:5f:9d:ad:cd:c2:a2:a8:de:f5:82:10:
dd:9c:02:3e:3a:0e:4f:ca:14:15:d5:c2:ff:4f:4a:9c:e2:d9:
99:90:88:7d:6b:27:e4:a0:ee:49:8c:cc:00:27:09:f8:4e:13:
27:9c:6e:d3:73:76:39:26:30:84:00:2e:83:17:53:13:a7:50:
60:4e:c0:e1:6f:2b:45:1d:43:e8:76:c1:bd:f9:27:e0:86:fa:
5e:cd:40:3e:39:a8:be:59:c3:a8:19:5b:2b:d8:a5:e5:9b:cf:
ef:7c:04:96:ea:4f:5f:0b:6e:de:28:cc:61:40:ec:31:df:b5:
9b:ba:3e:79:7f:ef:af:3c:ae:e4:05:72:14:8d:d5:d7:76:9d:
b3:22:b5:b3:95:ea:a4:94:39:16:5c:c8:c1:a1:9e:5a:3b:6b:
4a:81:54:a9:e0:7a:01:68:16:96:93:5a:84:a5:a7:25:81:25:
9b:37:3f:6f:d4:04:ea:58:cf:3e:66:2f:6d:c6:e9:47:bd:f0:
fe:ae:b6:41:32:fc:51:18:5d:ef:f4:b8:3a:a8:a7:07:8d:e9:
7d:23:92:94:d8:d0:36:25:5c:45:36:e3:c1:65:aa:ef:00:d3:
93:39:ac:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org