Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/UCsVb_ZjpdzBvLxNkXVgfUu1DJg.roa
File: UCsVb_ZjpdzBvLxNkXVgfUu1DJg.roa (raw, json)
Hash identifier: In5q/L/2OSi+cKfozwjoyCK1Y7tRUiGVcsbQ51nSVPM=
Subject key identifier: 50:2B:15:6F:F6:63:A5:DC:C1:BC:BC:4D:91:75:60:7D:4B:B5:0C:98
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 018C430119CEDA186168B03AD9CE68EE20E7
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/UCsVb_ZjpdzBvLxNkXVgfUu1DJg.roa
Signing time: Thu 07 Dec 2023 06:39:54 +0000
ROA not before: Thu 07 Dec 2023 06:39:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4637
IP address blocks: 193.82.192.0/19 maxlen: 24
195.153.124.0/24 maxlen: 24
217.151.32.0/20 maxlen: 24
154.32.0.0/16 maxlen: 24
195.153.74.0/24 maxlen: 24
193.82.159.0/24 maxlen: 24
193.117.32.0/19 maxlen: 24
195.153.108.0/22 maxlen: 22
195.153.19.0/24 maxlen: 24
193.82.96.0/19 maxlen: 24
193.82.128.0/19 maxlen: 24
146.101.0.0/16 maxlen: 24
154.8.0.0/19 maxlen: 24
154.8.32.0/20 maxlen: 24
195.153.216.0/24 maxlen: 24
195.153.217.0/24 maxlen: 24
2a02:1620::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:01:19:ce:da:18:61:68:b0:3a:d9:ce:68:ee:20:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Dec 7 06:39:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=502b156ff663a5dcc1bcbc4d9175607d4bb50c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:7e:bf:5d:a6:3e:6a:57:9a:92:c9:dd:b1:
44:79:00:de:d3:50:e4:31:57:2c:00:e2:90:90:30:
8a:65:9b:c8:42:fe:b8:97:d4:a8:e0:9a:33:db:66:
ec:96:4b:d7:2e:85:20:1b:59:73:7d:39:11:08:35:
ca:c0:c8:42:ab:0d:f4:23:2d:ba:ac:67:9c:92:b9:
15:a2:8a:36:f6:6e:96:10:b2:cd:29:9d:fc:55:d2:
25:3d:81:cf:f9:eb:c5:5b:b7:3d:63:5c:a3:ef:44:
06:89:f6:2a:1d:5e:ef:8e:83:d1:00:65:e6:82:67:
2b:5d:50:ce:13:af:57:da:5a:91:e4:81:d8:bc:d3:
93:5b:cf:b4:4d:b6:12:2c:da:2a:64:38:aa:e0:07:
85:82:14:14:18:1c:c0:16:22:d7:b3:86:55:df:40:
9a:46:0f:54:69:99:42:36:b8:6c:b9:47:ff:4e:e9:
a3:45:f0:71:ee:fd:dd:ba:ae:19:0c:76:c7:ab:26:
5d:2b:1f:b6:f4:24:7b:ea:cd:bc:54:02:e5:5e:c8:
f4:9d:45:a0:d7:38:60:49:f1:5a:a8:4e:93:2e:1e:
d7:ab:a3:ea:35:66:f6:33:41:80:0d:9e:9e:26:a3:
93:1e:c3:a1:69:6e:bb:80:c4:61:e4:56:59:df:7c:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:15:6F:F6:63:A5:DC:C1:BC:BC:4D:91:75:60:7D:4B:B5:0C:98
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/UCsVb_ZjpdzBvLxNkXVgfUu1DJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.101.0.0/16
154.8.0.0-154.8.47.255
154.32.0.0/16
193.82.96.0-193.82.159.255
193.82.192.0/19
193.117.32.0/19
195.153.19.0/24
195.153.74.0/24
195.153.108.0/22
195.153.124.0/24
195.153.216.0/23
217.151.32.0/20
IPv6:
2a02:1620::/32
Signature Algorithm: sha256WithRSAEncryption
9c:17:38:5a:1e:cd:79:75:55:40:15:6e:65:81:a2:40:fa:f4:
f8:09:b2:ca:1b:68:ee:ec:4c:a6:95:99:de:7e:b6:1c:fb:65:
ee:5a:08:5b:02:21:24:2c:01:b5:41:2f:93:8f:94:ac:0b:03:
6b:a4:a7:2c:13:98:1e:82:2c:82:0b:fb:29:d7:04:17:f0:eb:
69:ea:43:b5:64:fd:38:a4:f4:b4:1b:fd:6f:74:89:76:85:44:
b9:0c:1b:26:53:dd:40:82:0d:ed:77:00:83:8e:00:0f:b1:07:
2d:7d:60:5a:40:bf:58:31:b2:78:01:d9:43:69:17:e1:27:e5:
23:6d:ca:9e:d4:5e:a0:96:5b:d6:09:03:d8:55:67:60:35:44:
43:25:9e:c7:eb:dd:aa:6f:a4:ae:e2:f3:4c:c7:b3:6e:ac:c7:
89:b6:45:27:75:ef:1f:d9:c4:1d:b4:2f:6f:40:c6:14:45:bd:
99:fa:38:fa:e0:ea:86:3e:8e:47:dc:bb:9e:b4:36:9e:9e:12:
80:01:e9:34:ba:3f:5f:2b:cd:ca:fb:a4:33:19:1f:ca:65:2e:
5d:c5:f8:e5:73:b5:2c:e6:17:87:9e:b3:36:4e:13:8c:7e:a1:
dd:9f:a8:b9:4c:a9:bf:d4:81:dc:b4:85:88:eb:de:75:44:ad:
08:6b:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org