Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/ggYE1I95q-SoClan2L-R5dNmST0.roa
File: ggYE1I95q-SoClan2L-R5dNmST0.roa (raw, json)
Hash identifier: KY6GMbISllcGCxpjhnPP0ab0CzISBCF1AYqzBAc/rCY=
Subject key identifier: 82:06:04:D4:8F:79:AB:E4:A8:0A:56:A7:D8:BF:91:E5:D3:66:49:3D
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 01856DA63FB17C8B2AEACA0435D47D6020D9
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/ggYE1I95q-SoClan2L-R5dNmST0.roa
Signing time: Sun 01 Jan 2023 14:04:49 +0000
ROA not before: Sun 01 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8680
IP address blocks: 93.191.206.0/23 maxlen: 23
93.191.202.0/23 maxlen: 23
93.191.200.0/22 maxlen: 22
93.191.200.0/21 maxlen: 24
93.191.204.0/23 maxlen: 23
93.191.200.0/23 maxlen: 23
185.48.60.0/22 maxlen: 24
46.254.248.0/21 maxlen: 24
83.137.248.0/21 maxlen: 24
5.42.128.0/21 maxlen: 24
2a01:94a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:3f:b1:7c:8b:2a:ea:ca:04:35:d4:7d:60:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jan 1 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=820604d48f79abe4a80a56a7d8bf91e5d366493d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bf:56:64:35:4d:aa:d6:47:0b:b2:b4:63:aa:
69:83:1e:1c:bc:61:29:ae:65:a5:0b:88:9e:5c:bb:
d7:f1:d4:83:5e:8b:44:a1:96:ec:35:dd:07:9a:c4:
6f:c7:b2:34:5b:32:d4:8b:eb:85:7a:b1:2f:dd:6e:
82:4b:40:2a:9c:8f:de:9a:17:93:26:ba:42:d2:d7:
60:78:1b:c5:37:c4:8a:c4:ca:2e:b9:56:42:2e:db:
d3:b7:0d:52:e3:94:04:84:2c:2b:bd:a6:10:bd:9a:
fa:ad:39:7b:3a:a4:88:92:f9:2a:ba:57:61:ff:66:
dc:b5:c4:74:ae:2b:f0:56:1e:2b:a9:18:b2:7b:87:
31:79:5e:02:1f:aa:1b:b6:e6:e0:a5:33:46:7c:83:
5d:f5:91:b5:cc:de:19:6f:20:a2:f8:66:8f:96:28:
20:f0:b3:ef:42:6f:79:bc:bf:2b:8e:99:49:cb:3e:
eb:04:2d:07:dd:d4:3f:4d:10:82:b8:43:68:13:c0:
99:e3:07:f1:3e:9a:69:ea:14:5b:56:ed:07:70:e5:
47:f1:d5:06:48:96:1d:1c:86:43:38:bb:c5:49:01:
16:58:32:ac:09:55:86:27:18:d9:4a:fa:fc:a6:0d:
41:c6:0e:59:36:99:9c:56:9f:96:bd:75:3a:60:6e:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:06:04:D4:8F:79:AB:E4:A8:0A:56:A7:D8:BF:91:E5:D3:66:49:3D
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/ggYE1I95q-SoClan2L-R5dNmST0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.128.0/21
46.254.248.0/21
83.137.248.0/21
93.191.200.0/21
185.48.60.0/22
IPv6:
2a01:94a0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:23:e3:89:64:4d:94:6f:8a:9f:21:43:51:65:9b:57:cd:2b:
26:f9:0d:7b:a6:54:27:ee:a2:56:0d:14:1d:7a:c8:3c:fe:ba:
e0:28:9a:f7:1f:7b:1d:47:fe:32:2b:4d:48:77:b5:54:1f:69:
2c:0d:f1:1d:7a:85:59:e4:8e:56:f1:24:d6:b8:c7:f0:14:86:
b1:fe:84:2b:75:14:7d:ca:10:ac:a7:a2:43:c9:be:16:60:e7:
1e:c7:0e:a3:e2:94:72:87:22:26:7b:b7:e9:27:3b:4f:52:5e:
85:8d:63:06:cd:ef:df:e0:85:30:e1:51:a5:70:06:06:8c:10:
1f:49:a4:9f:d3:44:9d:77:ff:48:79:3b:f8:36:8f:66:eb:0e:
b1:30:9e:6b:74:d0:d2:83:70:e0:de:95:04:57:a6:8b:b1:cd:
d4:e5:81:96:e2:eb:34:3f:91:ab:98:98:d9:54:ec:73:d0:3b:
1d:b4:ef:03:d1:dc:fc:10:03:50:52:b0:78:b4:f9:35:90:98:
80:38:9e:50:2e:21:68:14:da:47:21:1d:0b:9f:66:15:34:2a:
64:fc:40:73:89:c1:e8:fb:ea:45:1f:09:24:d5:7f:c4:84:65:
16:e2:c5:95:1a:20:96:30:a4:2a:a2:f2:74:9b:e9:65:90:1d:
b9:ca:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:17 2024 by rpki-client on console-ams.rpki-client.org