Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/4GSdiHtQCwLL-wtcsnn0-Z_HygI.roa
File: 4GSdiHtQCwLL-wtcsnn0-Z_HygI.roa (raw, json)
Hash identifier: 9BGVtJvFh52TT256AlrTpM0/zq1wvb6no03kj041Ckg=
Subject key identifier: E0:64:9D:88:7B:50:0B:02:CB:FB:0B:5C:B2:79:F4:F9:9F:C7:CA:02
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 018CC6B7D63211EA2688447FC08CF9F37F8C
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/4GSdiHtQCwLL-wtcsnn0-Z_HygI.roa
Signing time: Mon 01 Jan 2024 20:29:45 +0000
ROA not before: Mon 01 Jan 2024 20:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60092
IP address blocks: 193.151.20.0/24 maxlen: 24
193.151.20.0/22 maxlen: 22
193.151.23.0/24 maxlen: 24
193.151.21.0/24 maxlen: 24
193.151.22.0/24 maxlen: 24
91.195.24.0/24 maxlen: 24
91.195.24.0/23 maxlen: 23
91.195.25.0/24 maxlen: 24
2001:67c:2c90::/46 maxlen: 46
2001:67c:2c91::/48 maxlen: 48
2001:67c:2c92::/48 maxlen: 48
2001:67c:2c88::/48 maxlen: 48
2001:67c:2c88::/47 maxlen: 47
2001:67c:2c93::/48 maxlen: 48
2001:67c:2c89::/48 maxlen: 48
2001:67c:2c90::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:d6:32:11:ea:26:88:44:7f:c0:8c:f9:f3:7f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Jan 1 20:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0649d887b500b02cbfb0b5cb279f4f99fc7ca02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:f2:48:cc:82:74:6b:ae:e0:84:56:8b:8c:
14:d8:e6:5d:6a:90:74:3a:13:ee:e2:e9:ba:6d:dc:
d1:67:dc:2b:f9:6e:5b:01:10:13:d0:55:5e:b3:37:
36:de:41:54:39:88:a8:58:0b:92:8c:e3:d5:b7:8f:
ad:9d:32:5c:e6:ad:fe:2e:d3:8a:05:18:f8:48:20:
48:0a:7b:7a:13:51:52:a7:ba:8f:4f:f4:df:2a:f5:
95:52:2f:f0:30:04:c1:06:04:4f:a3:41:39:64:33:
45:d0:af:c3:c1:5f:4e:9f:80:00:b1:3f:76:e0:bf:
b6:20:74:5c:79:f4:ae:95:e8:ec:2e:40:3e:e3:69:
35:d7:5a:2a:86:6f:d7:2d:06:9b:e5:3a:76:2b:b9:
13:0b:6b:10:61:fb:45:08:01:18:16:03:c4:99:fc:
2a:e0:07:b0:0c:5c:e3:4d:f0:82:cb:8f:81:ef:c5:
13:64:51:64:04:4c:9a:cc:09:14:19:87:52:d2:3a:
32:97:95:2b:f2:9e:9e:67:49:16:e4:1a:7d:0a:1c:
5a:48:56:56:5d:f6:d4:72:7d:76:fb:58:00:35:ea:
98:ef:02:f7:8f:f8:6d:7a:35:1e:7d:cb:fe:f8:83:
84:71:16:97:ee:23:35:2f:b4:4d:c0:21:2b:0c:10:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:9D:88:7B:50:0B:02:CB:FB:0B:5C:B2:79:F4:F9:9F:C7:CA:02
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/4GSdiHtQCwLL-wtcsnn0-Z_HygI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.24.0/23
193.151.20.0/22
IPv6:
2001:67c:2c88::/47
2001:67c:2c90::/46
Signature Algorithm: sha256WithRSAEncryption
63:7f:ed:b4:e4:2a:8f:c7:3d:61:b3:9e:c1:4c:e0:60:13:65:
9d:aa:08:cd:4c:7b:2d:c3:5f:fb:72:3c:f9:ce:3e:a5:73:bd:
7c:d4:7f:6e:e1:3b:16:66:4e:27:28:13:05:e6:ae:e0:9a:8b:
67:63:64:33:7c:ea:ca:be:47:10:90:1d:63:4a:16:d1:f5:55:
4f:33:7d:22:58:aa:70:71:ce:9e:13:06:7b:e8:44:15:dc:07:
0e:5c:bc:0b:86:a6:e6:b7:a8:b0:f2:dd:97:c5:48:87:7e:6a:
3e:10:a8:59:8d:26:0d:21:78:7f:ce:78:5c:f3:be:26:41:47:
99:d2:4f:ad:8b:95:3c:76:8b:0e:39:67:82:38:95:06:02:b4:
6f:22:a3:26:e8:f6:21:26:1f:ac:af:57:7a:f7:f2:c4:ee:21:
50:f1:9d:d1:5a:46:cd:bd:13:36:a4:b6:9b:99:f6:6e:20:68:
c0:70:6d:b5:0f:24:20:9e:64:c1:55:ac:22:48:39:c4:f9:86:
17:ee:53:ac:b4:83:0e:86:d9:af:5a:16:18:a9:03:1b:ec:fd:
dc:03:ca:ca:77:e3:1a:3e:4a:4e:b5:11:4d:3a:8d:e7:5e:9d:
91:c1:cf:10:bb:75:57:3e:02:c3:fa:79:19:a4:6f:27:3e:ce:
97:76:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:23 2025 by rpki-client