Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/4gJuW4ZlqNovhLr008115Q7xb-M.roa
File: 4gJuW4ZlqNovhLr008115Q7xb-M.roa (raw, json)
Hash identifier: wUs8EuSFppkyJNunYxV9LwLfLJo22kJFpOqU2XdC91s=
Subject key identifier: E2:02:6E:5B:86:65:A8:DA:2F:84:BA:F4:D3:CD:75:E5:0E:F1:6F:E3
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019183B54CFC792FCFDDB66B5F6BA2DC801B
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/4gJuW4ZlqNovhLr008115Q7xb-M.roa
Signing time: Sat 24 Aug 2024 09:26:22 +0000
ROA not before: Sat 24 Aug 2024 09:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 195.216.160.0/24 maxlen: 24
213.182.196.0/24 maxlen: 24
213.182.197.0/24 maxlen: 24
213.182.198.0/24 maxlen: 24
213.182.200.0/24 maxlen: 24
213.182.201.0/24 maxlen: 24
213.182.203.0/24 maxlen: 24
213.182.205.0/24 maxlen: 24
213.182.206.0/24 maxlen: 24
213.182.208.0/24 maxlen: 24
213.182.212.0/24 maxlen: 24
213.182.213.0/24 maxlen: 24
213.182.214.0/24 maxlen: 24
213.182.215.0/24 maxlen: 24
213.182.217.0/24 maxlen: 24
213.182.219.0/24 maxlen: 24
213.182.220.0/24 maxlen: 24
213.182.221.0/24 maxlen: 24
213.182.222.0/24 maxlen: 24
213.182.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 10:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:b5:4c:fc:79:2f:cf:dd:b6:6b:5f:6b:a2:dc:80:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 24 09:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2026e5b8665a8da2f84baf4d3cd75e50ef16fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:5c:11:9e:52:68:67:1d:35:cf:26:84:9f:
4c:38:14:5a:f1:a5:ff:0d:6b:a5:44:a9:d9:be:bb:
14:0f:00:77:eb:1d:11:12:35:e7:e0:b0:9d:58:d4:
ff:d9:d2:fa:d5:c1:45:60:fc:31:54:d4:d9:d8:be:
4c:2e:10:5a:d9:03:c6:a7:b0:99:d3:b0:7d:de:9b:
f4:80:87:84:81:97:c0:95:b0:38:9e:fc:3f:b7:5b:
48:3c:83:fd:ce:a1:c0:c6:3d:69:72:02:0f:e0:b6:
06:4e:10:55:92:1e:f8:5e:57:5e:eb:b3:bb:da:c4:
89:c3:2b:24:67:d4:9b:78:30:09:49:b1:b0:f0:b1:
00:ca:f5:c4:66:69:8e:58:69:27:84:47:73:93:b1:
59:3b:66:4b:4d:8e:31:26:a9:16:6d:f1:97:97:63:
d0:de:e4:ec:55:ec:62:e4:34:bb:15:f3:d6:ea:1f:
b5:20:dc:10:ed:8e:31:3a:bd:8a:a5:4a:1f:39:37:
13:0d:7d:fe:4f:c6:57:01:b4:1e:e6:a4:01:90:1a:
d0:25:39:e4:7a:42:5d:5c:0f:75:d7:ac:4c:4a:68:
9b:42:cc:03:a2:fd:5c:3d:07:16:df:a0:46:91:63:
82:d1:d8:32:d2:3c:5d:f7:91:cf:f7:d7:b6:ac:3d:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:6E:5B:86:65:A8:DA:2F:84:BA:F4:D3:CD:75:E5:0E:F1:6F:E3
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/4gJuW4ZlqNovhLr008115Q7xb-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.160.0/24
213.182.196.0-213.182.198.255
213.182.200.0/23
213.182.203.0/24
213.182.205.0-213.182.206.255
213.182.208.0/24
213.182.212.0/22
213.182.217.0/24
213.182.219.0-213.182.223.255
Signature Algorithm: sha256WithRSAEncryption
59:7f:a8:94:23:0e:34:60:2d:cc:a1:ca:56:21:e0:8a:83:0d:
37:e0:74:1e:49:98:7b:a4:3a:04:2c:e1:5a:8a:c4:09:01:65:
92:6b:10:d5:4d:0f:3f:f6:13:91:14:e0:b9:bd:87:10:38:8a:
78:0c:8d:bc:f6:ee:78:e2:c6:8b:b2:8d:72:9e:ec:d2:93:99:
08:f6:31:25:56:6d:2e:18:c9:d6:b1:2b:b2:9d:f2:c0:e9:6d:
3e:4b:d0:b9:a0:68:43:e2:f6:89:b4:b4:5e:f4:df:b9:21:ab:
d3:d6:d5:7a:b7:72:77:d1:c5:e1:a1:85:4d:40:ea:1b:01:86:
1d:a7:0a:84:12:62:d0:0f:a6:10:73:c0:0c:08:bf:d8:28:d0:
f5:07:72:2a:15:4c:f4:11:10:49:01:8e:ed:3a:e9:73:e1:eb:
e8:48:7d:9c:f4:a5:92:7f:92:a3:e3:0b:cc:19:c4:2b:99:66:
d1:9d:ef:28:0b:e4:10:0e:2e:dd:d0:9e:0b:42:78:3d:f8:9b:
d5:99:73:05:af:b4:63:f5:bb:4d:be:db:61:d3:aa:73:2b:12:
8b:2c:52:bf:2e:8c:ae:e5:0c:a1:5e:a1:bc:2f:4c:ce:4e:8d:
5e:ba:93:24:97:87:d2:a1:f6:c2:88:ba:56:f1:33:37:fe:6b:
68:5a:b2:d5
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 24 13:32:00 2024 by rpki-client on console-fra.rpki-client.org