Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/n3zCWw8QcjYOIVeiRkIk9ATfC8c.roa
File: n3zCWw8QcjYOIVeiRkIk9ATfC8c.roa (raw, json)
Hash identifier: txbr5tfve1OO49IKWkSbO35/jq+tj3GIEKzAOwaawMc=
Subject key identifier: 9F:7C:C2:5B:0F:10:72:36:0E:21:57:A2:46:42:24:F4:04:DF:0B:C7
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 0191FC549A5FD1FA93048E0EF186EBBD9CFB
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/n3zCWw8QcjYOIVeiRkIk9ATfC8c.roa
Signing time: Mon 16 Sep 2024 19:34:48 +0000
ROA not before: Mon 16 Sep 2024 19:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25220
IP address blocks: 62.102.192.0/19 maxlen: 24
82.145.192.0/20 maxlen: 24
185.56.228.0/22 maxlen: 24
193.106.16.0/22 maxlen: 24
193.254.212.0/23 maxlen: 24
195.135.224.0/22 maxlen: 24
2001:4b39::/32 maxlen: 48
2001:4b3a::/32 maxlen: 48
2001:4b3b::/32 maxlen: 48
2a00:9e00::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Sep 2024 20:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fc:54:9a:5f:d1:fa:93:04:8e:0e:f1:86:eb:bd:9c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Sep 16 19:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f7cc25b0f1072360e2157a2464224f404df0bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:17:7d:16:de:c0:3b:1a:f3:7e:80:bf:64:
83:8f:22:45:b8:31:3f:cf:25:1b:e1:a1:ae:07:34:
06:7f:b1:65:02:d7:d9:3a:34:a9:37:27:ea:db:25:
6c:49:71:33:f4:7a:d8:20:3b:96:d4:10:ea:01:8b:
09:29:df:eb:2a:fb:2b:88:41:f6:3f:20:bb:fa:11:
20:72:e4:da:13:12:44:b9:bd:61:de:75:d0:9f:d6:
0e:6b:6c:35:a6:a7:38:34:9a:15:85:16:03:23:f9:
7f:83:e0:8f:36:fb:5b:39:7f:46:c7:a2:53:89:71:
fc:28:a1:94:33:af:5f:0e:47:32:27:c5:48:88:e4:
8e:59:b0:f0:5f:c1:90:97:9a:32:46:04:f9:5e:fb:
cf:65:d2:2a:59:77:18:12:a2:10:db:2e:1b:24:73:
a7:44:64:e3:be:b5:ed:14:4d:80:cf:56:1e:5a:a7:
34:17:25:bd:6f:4b:82:44:50:7a:cb:3f:e7:3f:9e:
37:0c:8a:8b:55:77:ab:17:8b:aa:aa:91:bd:e6:95:
54:d3:88:fe:bc:4d:d7:8c:3b:5c:f5:fc:ed:49:36:
b7:50:32:26:92:28:5a:eb:c4:9a:dc:d7:34:81:40:
96:1b:8a:7a:81:db:cd:db:99:b5:d6:63:67:97:f7:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:C2:5B:0F:10:72:36:0E:21:57:A2:46:42:24:F4:04:DF:0B:C7
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/n3zCWw8QcjYOIVeiRkIk9ATfC8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.192.0/19
82.145.192.0/20
185.56.228.0/22
193.106.16.0/22
193.254.212.0/23
195.135.224.0/22
IPv6:
2001:4b39::-2001:4b3b:ffff:ffff:ffff:ffff:ffff:ffff
2a00:9e00::/32
Signature Algorithm: sha256WithRSAEncryption
b8:9c:56:44:5c:eb:51:34:8e:4f:d6:a3:a0:f3:13:e0:e0:81:
00:d8:be:0c:4e:c8:7d:9d:ee:2f:e6:e3:40:49:d1:45:85:f4:
17:53:c1:b5:f4:3b:a4:1d:c4:32:4c:a9:67:e7:d5:3e:76:61:
5f:59:a9:3e:83:df:eb:07:1c:2e:d1:85:74:57:b6:32:df:82:
c5:63:16:90:42:52:c3:b3:41:1d:c1:5d:26:9a:c6:d8:65:ae:
81:21:d9:e3:95:c2:be:f6:ef:00:9b:6a:63:d4:f2:ec:c8:1c:
9b:18:55:4d:f7:4c:f3:fc:c3:95:65:a8:eb:b6:24:8d:b8:1e:
46:db:f6:61:b1:76:a9:89:47:a0:10:50:9f:b3:46:b8:fa:0e:
ec:4a:8c:71:38:7c:b1:2f:38:c4:d9:cb:ed:e3:fe:c8:86:05:
9a:fa:90:ff:1d:db:bb:c7:ed:8e:79:ef:95:82:cc:5d:91:4a:
62:ed:5e:cc:04:8f:76:1f:0a:16:96:90:36:ec:c4:4d:d4:94:
dd:03:62:2f:e7:c4:1c:11:94:ec:ca:f3:86:0f:76:43:17:5c:
af:15:48:ba:76:5d:65:9d:29:69:ca:58:ab:76:d9:f1:21:03:
7f:cb:22:c6:a3:31:14:27:ee:62:f5:2c:23:51:1a:97:ac:5b:
b0:fd:b3:91
-----BEGIN CERTIFICATE-----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==
Generated at Thu Sep 19 23:14:32 2024 by rpki-client on console-fra.rpki-client.org