Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/gi-L4bpp2ZMxM7xoqq3ugGgS5IQ.roa
File: gi-L4bpp2ZMxM7xoqq3ugGgS5IQ.roa (raw, json)
Hash identifier: kjd+atITljJ7a0moYBZQMoJPm43vHuz6yct02aK4KzA=
Subject key identifier: 82:2F:8B:E1:BA:69:D9:93:31:33:BC:68:AA:AD:EE:80:68:12:E4:84
Certificate issuer: /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial: 018D7B694F102C7FA39C0425B4F27CE23F90
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/gi-L4bpp2ZMxM7xoqq3ugGgS5IQ.roa
Signing time: Mon 05 Feb 2024 22:35:15 +0000
ROA not before: Mon 05 Feb 2024 22:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 46.235.15.0/25 maxlen: 32
46.235.15.128/25 maxlen: 32
103.209.228.0/24 maxlen: 32
103.209.229.0/24 maxlen: 32
2a00:9940::/30 maxlen: 128
2a00:9944::/30 maxlen: 128
2a04:e880::/30 maxlen: 128
2a04:e884::/30 maxlen: 128
2a06:8540::/30 maxlen: 128
2a06:8544::/30 maxlen: 128
2a09:2340::/30 maxlen: 128
2a09:2344::/30 maxlen: 128
2a0e:7fc0::/30 maxlen: 128
2a0e:7fc4::/30 maxlen: 128
2a10:c80::/30 maxlen: 128
2a10:c84::/30 maxlen: 128
2a14:2b80::/30 maxlen: 128
2a14:2b84::/30 maxlen: 128
2a14:5c80::/30 maxlen: 128
2a14:5c84::/30 maxlen: 128
2a14:6580::/30 maxlen: 128
2a14:6584::/30 maxlen: 128
2a14:7080::/30 maxlen: 128
2a14:7084::/30 maxlen: 128
Validation: Failed, certificate revoked on Wed 07 Feb 2024 13:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7b:69:4f:10:2c:7f:a3:9c:04:25:b4:f2:7c:e2:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Validity
Not Before: Feb 5 22:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=822f8be1ba69d9933133bc68aaadee806812e484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:01:7f:cc:ca:f5:d5:3f:c2:06:4c:6c:07:
88:2a:14:b7:c9:8a:5d:13:9b:32:26:87:41:13:04:
8a:ad:2b:60:ca:d4:23:0e:08:86:25:29:90:23:17:
15:6a:ac:34:78:78:66:14:d7:6d:ce:20:65:e8:28:
99:4e:16:49:09:73:05:47:c7:da:b9:63:93:40:55:
85:9e:b1:81:b4:06:51:2a:5f:27:aa:a9:4c:f7:5b:
c2:11:72:d1:cf:5c:4c:2a:d1:5f:12:86:73:35:71:
d4:81:71:f8:b7:87:c9:96:ab:81:cb:76:78:38:0e:
f5:22:07:84:09:85:be:f4:9d:d8:ff:c7:d5:67:bc:
87:94:37:22:5a:ae:b4:7a:43:c1:cc:64:72:93:73:
ba:75:2d:ad:1c:d6:f0:80:d2:54:d7:49:07:0e:c7:
6f:ac:41:c1:21:c4:b2:5e:69:ac:75:94:1c:da:29:
b1:69:a4:fe:92:77:ac:58:fb:80:74:f6:08:a8:f4:
d2:88:d1:22:0a:e5:1b:14:6c:5c:a1:20:37:5b:df:
2f:54:39:31:f1:b6:52:ea:96:bf:21:cf:0f:f3:6d:
06:e8:f8:7b:10:8e:b2:aa:47:b8:74:fd:14:71:21:
5d:aa:10:3d:95:98:54:00:46:c8:2d:31:91:ca:c6:
8c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2F:8B:E1:BA:69:D9:93:31:33:BC:68:AA:AD:EE:80:68:12:E4:84
X509v3 Authority Key Identifier:
keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/gi-L4bpp2ZMxM7xoqq3ugGgS5IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
103.209.228.0/23
IPv6:
2a00:9940::/29
2a04:e880::/29
2a06:8540::/29
2a09:2340::/29
2a0e:7fc0::/29
2a10:c80::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
c0:e6:e0:61:09:7e:08:2d:c2:b2:2e:07:fd:1b:a5:da:3b:64:
9f:b0:8f:7b:d9:0c:bc:e9:2b:22:ca:79:27:28:3a:43:51:30:
0f:fc:94:f4:e0:6b:60:32:c9:7f:96:b6:2e:4f:9b:97:bb:a0:
19:f6:f9:01:17:fa:3e:23:c5:96:4a:a9:d0:a5:9c:46:f5:38:
52:dd:e2:73:d0:39:ee:e2:57:bb:9a:27:ed:c5:33:94:9b:a7:
f4:1d:e6:5e:32:e1:bc:3f:68:53:f7:ea:45:7e:d6:df:75:0a:
83:65:ab:d4:93:fa:dc:ad:26:68:00:1b:58:81:95:ba:77:6f:
9f:f3:a5:0f:93:5d:68:27:24:57:34:b9:da:52:60:d3:31:d4:
ea:2b:e2:b2:36:9f:32:b6:ab:fd:ce:9c:ab:9d:ff:b5:61:82:
19:fb:c3:28:1c:f1:17:7a:17:9e:20:34:b9:b1:c3:32:21:d3:
ef:31:73:f4:f4:34:aa:e4:ea:81:29:08:d7:3a:c4:0a:94:5c:
2c:bd:da:0d:d2:57:d4:4c:59:b5:c2:73:87:6b:f6:d6:3f:dc:
8a:14:44:af:96:4c:e8:97:61:f9:17:44:39:a0:91:be:57:70:
81:23:fd:b8:4d:75:e1:92:b0:26:41:2c:59:d8:cd:91:0e:91:
1b:0a:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:27 2024 by rpki-client on console-fra.rpki-client.org