Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G4FFeBSdBcwLFVI9UA0l08DZEhI.roa
File: G4FFeBSdBcwLFVI9UA0l08DZEhI.roa (raw, json)
Hash identifier: XBaqNxXUJ2VHpuE6dd4MW5AS8NEZJ5qrEjO81eWpr+g=
Subject key identifier: 1B:81:45:78:14:9D:05:CC:0B:15:52:3D:50:0D:25:D3:C0:D9:12:12
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802DA7817A8DD44238367716DB232CA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G4FFeBSdBcwLFVI9UA0l08DZEhI.roa
Signing time: Tue 02 Jan 2024 02:31:19 +0000
ROA not before: Tue 02 Jan 2024 02:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3399
IP address blocks: 194.71.217.0/24 maxlen: 24
194.71.216.0/23 maxlen: 23
194.71.216.0/24 maxlen: 24
193.180.96.0/22 maxlen: 22
192.165.178.0/23 maxlen: 23
194.132.9.0/24 maxlen: 24
194.68.220.0/23 maxlen: 23
193.180.23.0/24 maxlen: 24
192.36.22.0/24 maxlen: 24
193.183.116.0/24 maxlen: 24
193.180.164.0/23 maxlen: 23
194.68.170.0/23 maxlen: 23
194.68.170.0/24 maxlen: 24
194.68.171.0/24 maxlen: 24
193.182.111.0/24 maxlen: 24
192.36.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:da:78:17:a8:dd:44:23:83:67:71:6d:b2:32:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b814578149d05cc0b15523d500d25d3c0d91212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:60:4c:5b:85:87:38:c2:cd:2d:e5:b6:fe:
46:5c:18:1d:96:e0:40:a7:f5:e9:28:73:8e:02:4f:
2a:c6:85:e0:37:30:eb:82:b2:7f:e4:fd:f8:27:a0:
f5:e4:c2:52:2d:97:4f:34:af:58:ad:cd:c7:94:76:
47:e8:71:80:b7:ec:e9:3e:e6:11:6d:2c:80:41:4b:
bf:f5:51:bf:cd:42:7d:b8:b6:bd:90:23:bd:09:7f:
ba:f6:5b:0b:8d:96:58:a4:07:bf:6e:52:49:d9:b5:
c3:a1:82:12:64:80:e6:7f:f7:2f:82:40:d5:29:a0:
ad:ab:44:e6:33:ab:e5:cf:54:cb:c3:d5:a5:6a:df:
9c:24:15:c2:ce:4e:0e:96:57:9c:2b:83:d6:42:82:
71:77:f4:ac:e3:cc:43:ed:d4:13:fe:c0:8c:70:58:
9e:da:e7:43:45:ea:fd:1f:1a:ae:6e:ca:95:77:2d:
7d:8f:4c:52:5c:8e:09:c9:e2:30:22:94:6d:a1:68:
10:6d:0a:c3:60:2e:75:04:f7:08:c8:df:cf:f9:51:
e8:a8:be:95:a5:76:5a:8f:e9:99:74:1d:75:6f:28:
3f:fa:af:7e:f1:f1:6c:15:3d:0a:bf:c6:ec:76:53:
a0:b0:74:c8:fd:04:c7:9f:37:a0:de:2a:17:a5:3e:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:81:45:78:14:9D:05:CC:0B:15:52:3D:50:0D:25:D3:C0:D9:12:12
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G4FFeBSdBcwLFVI9UA0l08DZEhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.22.0/24
192.36.208.0/24
192.165.178.0/23
193.180.23.0/24
193.180.96.0/22
193.180.164.0/23
193.182.111.0/24
193.183.116.0/24
194.68.170.0/23
194.68.220.0/23
194.71.216.0/23
194.132.9.0/24
Signature Algorithm: sha256WithRSAEncryption
54:79:15:54:17:d0:02:1a:40:fc:37:08:9b:92:f2:1b:a5:f2:
c4:21:92:2a:e3:7b:ee:91:0e:33:f8:6b:c0:98:8b:66:09:df:
27:f7:fa:e5:88:08:a8:f0:1b:9b:a7:f9:e7:6c:c9:51:e2:ca:
59:a0:2f:3a:1c:35:f6:05:2b:20:89:c0:5f:fb:55:be:2a:37:
b5:74:67:7a:4e:1a:2e:d7:09:c7:4d:ba:d0:0d:cf:59:4e:c8:
6c:ed:dd:4d:28:76:52:8d:8e:f5:40:91:dd:45:05:5d:65:dd:
a8:16:48:26:61:5c:7e:31:d0:78:9b:b6:d6:1e:d3:04:5a:07:
63:d8:5c:08:25:05:6f:f8:de:7f:a9:7a:34:95:47:3f:b7:11:
8e:05:c7:27:2e:4b:56:84:a1:1c:f7:07:4b:ef:9f:bf:74:c9:
fb:ef:06:37:ee:3b:78:de:90:6a:f4:dc:82:fe:bc:cb:20:87:
5b:74:bf:78:7e:94:7c:21:ad:45:fd:5c:12:da:ba:2c:ee:1f:
8f:81:d1:90:5f:d9:16:d8:45:c4:f8:d6:02:ff:c7:c5:03:63:
16:b3:dd:97:2a:6f:f5:a7:8e:b4:e6:62:65:a4:e1:d4:24:1c:
ba:33:50:17:8c:b6:d3:8a:1b:d3:0f:06:3c:b9:d1:1a:83:5d:
3d:ce:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 19:17:28 2024 by rpki-client on console-fra.rpki-client.org