Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/GZxDbWo8GLliQgDE25EO-MuTFxc.roa
File: GZxDbWo8GLliQgDE25EO-MuTFxc.roa (raw, json)
Hash identifier: ngVh3L3N7Lf1awIPOaAJZUM6+28NHHCxayNH4Vf6qnk=
Subject key identifier: 19:9C:43:6D:6A:3C:18:B9:62:42:00:C4:DB:91:0E:F8:CB:93:17:17
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 018D9D22D40D02B5FB124800315BC3723B07
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/GZxDbWo8GLliQgDE25EO-MuTFxc.roa
Signing time: Mon 12 Feb 2024 11:45:21 +0000
ROA not before: Mon 12 Feb 2024 11:45:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33885
IP address blocks: 37.46.160.0/19 maxlen: 19
37.247.0.0/19 maxlen: 19
84.55.64.0/18 maxlen: 18
89.253.64.0/18 maxlen: 18
92.244.0.0/19 maxlen: 19
94.137.96.0/19 maxlen: 19
109.104.0.0/19 maxlen: 19
178.78.192.0/18 maxlen: 18
185.86.100.0/22 maxlen: 22
212.107.128.0/19 maxlen: 19
2a01:3b8:4000::/35 maxlen: 35
Validation: Failed, certificate revoked on Mon 12 Feb 2024 12:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:22:d4:0d:02:b5:fb:12:48:00:31:5b:c3:72:3b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Feb 12 11:45:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=199c436d6a3c18b9624200c4db910ef8cb931717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:78:86:2b:3a:9e:af:cb:53:15:91:5a:af:
a6:d2:ef:8b:85:7f:e0:56:a4:ef:99:7b:1f:26:b8:
36:91:c6:c1:a1:a3:2a:08:b2:03:f1:7a:bb:49:18:
47:d1:c0:a6:1e:b6:20:d7:af:d8:af:cc:a1:3c:57:
81:11:50:7a:06:13:54:49:89:c7:7a:3a:a8:66:7c:
56:f8:58:90:48:57:e6:1c:9b:c8:6a:71:54:93:36:
88:ba:3f:18:19:ec:eb:0e:36:82:f5:64:12:66:55:
e4:b4:b9:9e:46:c1:c8:c6:b8:c3:03:6f:79:4b:91:
33:54:85:01:2c:a2:ba:fe:97:65:41:7b:69:58:66:
c8:2b:d0:75:76:44:d0:24:7a:8c:e7:97:dd:b5:b5:
a4:a1:8a:9a:c0:f3:cb:3b:fe:42:8c:27:15:a1:48:
5f:e9:bc:b9:32:18:fe:a9:86:e5:25:32:18:4b:45:
cb:1c:d1:de:be:ca:59:ec:0d:45:a6:c1:c4:f5:52:
9c:b9:64:ea:e3:6f:ee:da:ed:74:2b:65:59:ff:d9:
01:eb:1b:14:23:b8:05:8c:a6:c9:27:6f:23:dc:d2:
cc:27:2f:19:fb:a9:5d:3e:2f:8f:0a:0f:cc:af:9f:
0e:a6:95:02:ff:02:b4:f3:75:93:4a:7b:07:c9:95:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:43:6D:6A:3C:18:B9:62:42:00:C4:DB:91:0E:F8:CB:93:17:17
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/GZxDbWo8GLliQgDE25EO-MuTFxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.160.0/19
37.247.0.0/19
84.55.64.0/18
89.253.64.0/18
92.244.0.0/19
94.137.96.0/19
109.104.0.0/19
178.78.192.0/18
185.86.100.0/22
212.107.128.0/19
IPv6:
2a01:3b8:4000::/35
Signature Algorithm: sha256WithRSAEncryption
73:89:1f:26:9c:4e:9e:c7:4c:6c:5c:74:02:88:77:f2:3e:a1:
b5:dd:ed:5e:09:05:95:33:9b:6f:3d:cf:7b:a6:6b:8b:01:4c:
7a:0b:6a:7b:6a:45:9d:a4:44:70:b6:a3:09:ee:19:96:0e:ab:
70:a3:2f:cc:ea:cb:d3:d7:20:88:19:90:4a:5e:bf:75:bb:be:
e9:69:7d:e8:43:24:5a:3f:05:d6:13:c5:6a:62:fa:5f:71:33:
96:8a:ab:a3:82:17:5a:8d:90:1d:2a:75:01:b7:87:a3:98:56:
07:29:d6:fd:b1:af:e0:0b:99:c8:df:b1:59:d1:05:13:c0:bc:
a4:ff:45:19:6b:aa:01:b7:24:1a:e5:c4:61:b3:e8:d8:3a:c9:
ff:b4:3b:76:ae:e1:83:ef:13:bf:20:0e:cc:12:d8:15:3c:c7:
09:3b:9e:d6:bd:c2:be:ec:66:b7:ab:3c:14:8d:72:63:82:f9:
7f:52:76:a5:0f:c1:9a:a8:32:d3:58:dd:48:0a:a2:40:df:fb:
cd:51:c7:41:9b:91:c3:0f:54:d8:a7:41:6f:c9:31:1e:05:7f:
d1:a9:1c:e1:f2:82:5e:2e:ba:ac:27:3c:73:83:ed:a3:34:23:
d5:35:ad:fb:db:ac:cf:77:42:fd:9b:68:76:c0:54:05:73:e3:
9e:4b:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:54 2024 by rpki-client on console-ams.rpki-client.org