Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/sgdJg-h0uuuL4cpNl9lRz_BAu_0.roa
File: sgdJg-h0uuuL4cpNl9lRz_BAu_0.roa (raw, json)
Hash identifier: sCWES307c2dH3ZqLcpz3/eBDsAX4OKfrNsToq6FIUIY=
Subject key identifier: B2:07:49:83:E8:74:BA:EB:8B:E1:CA:4D:97:D9:51:CF:F0:40:BB:FD
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 018AF9BB1B8B50A60B34286A7D62B77C6BE7
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/sgdJg-h0uuuL4cpNl9lRz_BAu_0.roa
Signing time: Wed 04 Oct 2023 08:08:23 +0000
ROA not before: Wed 04 Oct 2023 08:08:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1290
IP address blocks: 193.82.192.0/19 maxlen: 24
193.82.96.0/19 maxlen: 24
193.82.128.0/19 maxlen: 24
146.101.0.0/16 maxlen: 24
154.32.0.0/16 maxlen: 24
195.152.0.0/15 maxlen: 15
193.117.32.0/19 maxlen: 24
2a02:1620::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 06 Oct 2023 01:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:bb:1b:8b:50:a6:0b:34:28:6a:7d:62:b7:7c:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Oct 4 08:08:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2074983e874baeb8be1ca4d97d951cff040bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:6f:74:11:33:11:f2:76:fa:14:65:2e:ce:
87:a4:4f:0d:6f:59:05:60:05:0d:f9:04:d8:20:7a:
69:b7:24:ef:cd:cb:85:b8:d5:99:10:de:30:a1:af:
1f:a8:28:f9:75:70:7b:4c:bd:29:d1:36:8c:ea:0a:
f6:2a:73:5b:be:8a:65:21:66:e6:b2:72:e2:3f:88:
bb:f0:3c:2c:11:f8:12:d6:93:84:90:9f:d5:3b:79:
1a:ba:3c:a3:19:19:bd:2c:44:bf:18:68:e4:72:31:
d2:e4:9a:8c:ef:13:68:db:4d:9e:ff:ae:4c:51:09:
c0:39:6c:60:80:01:3b:40:eb:77:fa:cb:6f:b3:d0:
69:fc:71:df:38:17:da:f2:dc:16:b2:d6:96:9d:6f:
77:ad:83:e4:25:eb:28:c9:ff:f1:25:b7:69:ff:db:
23:56:ac:a5:7d:df:02:66:b1:7c:dc:f9:30:b1:4a:
d8:65:bd:be:b1:d2:b7:dc:ff:23:93:37:3b:d6:23:
4f:74:68:d8:80:9e:41:7d:b1:57:1d:32:68:42:df:
34:ba:77:3e:1c:b8:a5:4d:64:7f:78:53:84:7b:65:
5f:5a:ad:0c:2d:46:cb:84:5e:eb:8b:96:fe:53:b6:
a4:f1:e2:bc:6f:2b:2d:7e:0d:4d:5f:0b:b4:9f:b3:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:49:83:E8:74:BA:EB:8B:E1:CA:4D:97:D9:51:CF:F0:40:BB:FD
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/sgdJg-h0uuuL4cpNl9lRz_BAu_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.101.0.0/16
154.32.0.0/16
193.82.96.0-193.82.159.255
193.82.192.0/19
193.117.32.0/19
195.152.0.0/15
IPv6:
2a02:1620::/32
Signature Algorithm: sha256WithRSAEncryption
5c:96:55:ca:15:42:24:8c:0a:04:71:a5:10:5b:73:79:12:d8:
f7:d7:59:34:84:10:4b:94:d0:92:24:5c:aa:84:d1:1d:c2:dc:
c7:b6:22:23:31:bb:aa:fe:67:be:3a:47:e5:93:bc:80:d9:d2:
7e:2c:d1:26:f9:01:1e:bd:f9:91:6a:3b:d6:ea:63:54:c4:b4:
10:05:41:04:9c:81:8f:a9:59:32:ca:ac:ae:c4:06:8d:f7:5d:
d3:df:3f:60:ad:cb:89:2c:81:10:81:96:e1:92:9f:ff:26:4c:
38:8a:07:cb:9a:33:f0:a2:7e:19:c3:23:e2:86:3f:da:8e:97:
16:76:84:4e:ae:5c:05:22:cd:22:14:a6:cd:7c:55:22:fa:ec:
19:13:1d:8a:a8:0f:b7:81:01:31:66:bf:47:68:8b:f5:37:0a:
94:22:e0:bc:f2:28:fc:16:1d:ec:8a:a9:e4:55:3d:8d:29:0b:
94:9b:12:2a:a5:15:08:77:75:93:df:20:dd:b8:52:ff:52:a4:
fa:1b:45:75:fd:bd:7c:21:16:fc:0f:8a:0c:53:a1:69:8f:d1:
03:90:5d:a7:ea:ac:a0:bc:77:0e:ca:7d:f0:68:be:69:15:be:
44:50:62:1a:24:e3:e4:86:49:94:7e:2c:b1:23:6a:bb:6d:bf:
50:b6:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:07 2024 by rpki-client on console-ams.rpki-client.org