Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/G4mEhOisP4wTXAzrdXH8Ojv7qfc.roa
File: G4mEhOisP4wTXAzrdXH8Ojv7qfc.roa (raw, json)
Hash identifier: 1GZTRK5x9/zPqPwZi2WY+YX12Ld7GbLzvI4kdqOlT9k=
Subject key identifier: 1B:89:84:84:E8:AC:3F:8C:13:5C:0C:EB:75:71:FC:3A:3B:FB:A9:F7
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 018B65B2C26AB7CB94C99D2AE32BDBB0BBD3
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/G4mEhOisP4wTXAzrdXH8Ojv7qfc.roa
Signing time: Wed 25 Oct 2023 07:18:15 +0000
ROA not before: Wed 25 Oct 2023 07:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21034
IP address blocks: 195.32.69.0/24 maxlen: 24
195.32.80.0/22 maxlen: 22
195.32.84.0/24 maxlen: 24
195.32.85.0/24 maxlen: 24
195.32.88.0/21 maxlen: 22
195.32.86.0/23 maxlen: 23
195.32.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:b2:c2:6a:b7:cb:94:c9:9d:2a:e3:2b:db:b0:bb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Oct 25 07:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b898484e8ac3f8c135c0ceb7571fc3a3bfba9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:ab:39:cf:53:4d:bb:69:0f:db:56:0e:0d:
90:5a:12:9f:2c:fe:21:dd:61:a7:2c:3a:73:c3:c1:
25:83:e2:38:97:f2:6a:00:82:2c:5c:a0:6b:5b:fb:
a1:44:61:6f:8f:4b:4a:61:e5:b4:63:a1:f5:76:ce:
64:a2:04:29:17:99:ad:c2:0b:72:71:95:99:6f:8c:
f9:9a:84:3c:cb:25:46:04:8a:e7:f8:af:4b:50:54:
f5:7f:45:03:d8:43:32:eb:85:06:ea:bf:6e:b2:a0:
93:1f:a8:90:7f:67:8b:6c:43:54:97:41:f9:5f:a4:
29:e8:ff:8d:df:d8:96:c0:7c:82:f9:22:7b:9c:84:
f6:90:25:85:56:5f:e5:dd:a6:d4:df:c5:12:b4:51:
6c:24:67:31:4b:f2:aa:35:8a:9d:45:75:64:b9:a4:
73:b7:c2:11:ca:82:9d:9e:c7:6e:d2:80:51:1f:b9:
65:06:5a:ab:6f:1a:48:31:d9:08:6d:df:79:e6:5d:
84:a4:0f:44:44:7e:30:5c:e7:b4:80:02:f5:7c:34:
a2:7d:02:2a:0b:0d:77:6a:2b:60:d2:95:f2:c6:1d:
41:58:8f:a6:ed:4a:8c:88:cb:19:c9:47:32:3e:67:
b9:e7:1c:d8:9d:74:ef:b9:e2:bf:0c:b4:cd:e8:dc:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:89:84:84:E8:AC:3F:8C:13:5C:0C:EB:75:71:FC:3A:3B:FB:A9:F7
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/G4mEhOisP4wTXAzrdXH8Ojv7qfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.32.69.0/24
195.32.80.0/20
Signature Algorithm: sha256WithRSAEncryption
16:e0:f5:16:ed:3f:f2:b4:21:0e:18:eb:aa:fa:cc:85:23:f1:
95:86:80:2c:34:d8:33:ba:34:dd:82:20:42:cb:23:1b:1e:9f:
17:bc:1e:bf:22:6b:91:6d:0c:58:1b:ab:4f:84:ad:89:e4:49:
e0:8e:a8:26:7e:40:c7:9f:0b:43:48:43:37:9d:8f:43:27:16:
88:d2:a8:e2:4b:62:28:92:ce:44:79:18:16:59:9a:35:e1:cd:
4c:c5:27:10:a7:3a:a4:64:36:73:8b:ca:7d:31:10:1a:50:3a:
cb:6e:44:a8:88:53:ba:3d:2d:aa:f7:54:14:94:f3:e3:99:52:
cb:2d:1f:f5:74:16:84:df:a8:d7:bc:fa:14:c4:0e:d5:38:e9:
0c:e2:bc:00:f6:68:77:af:4e:9a:a1:3a:95:a8:a7:d1:d9:db:
a4:03:7e:2d:4a:81:90:ba:49:93:95:34:5e:75:5f:46:c8:d3:
19:1a:42:dd:56:1d:5d:dc:ec:e8:5f:a5:03:b6:99:0e:18:ff:
cc:f8:76:6b:50:6e:4f:95:d0:ce:50:8e:28:dc:93:41:9f:dd:
61:e9:08:61:0c:57:67:fd:8c:49:73:db:b8:4d:54:10:89:43:
d1:b7:d7:68:ec:ad:98:ea:17:f4:3d:dc:43:1e:3e:9d:4b:3d:
9c:b2:b1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:20 2024 by rpki-client on console-fra.rpki-client.org