Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_gLSJNAZJbMeHKWy8yQViBgq1zM.roa
File: _gLSJNAZJbMeHKWy8yQViBgq1zM.roa (raw, json)
Hash identifier: +44O46iFU3etuAeIGN8nfWa+JrQyglTR9zqnWD9dkRU=
Subject key identifier: FE:02:D2:24:D0:19:25:B3:1E:1C:A5:B2:F3:24:15:88:18:2A:D7:33
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018E0EDA7421FF10EB0639E512BE5B702F5C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_gLSJNAZJbMeHKWy8yQViBgq1zM.roa
Signing time: Tue 05 Mar 2024 13:43:01 +0000
ROA not before: Tue 05 Mar 2024 13:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8434
IP address blocks: 192.71.158.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.237.0/24 maxlen: 24
194.14.129.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.248.0/21 maxlen: 21
194.132.108.0/23 maxlen: 24
194.132.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 08:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:da:74:21:ff:10:eb:06:39:e5:12:be:5b:70:2f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 5 13:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe02d224d01925b31e1ca5b2f3241588182ad733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5b:43:8f:b1:ae:3f:45:52:60:9b:b3:80:d6:
6a:75:aa:a3:36:58:c1:9f:6b:76:3d:be:60:de:f9:
16:a6:7f:24:8c:6b:e9:35:e0:1c:d0:74:4e:ea:49:
bf:55:25:87:76:7d:cf:df:af:29:c5:c5:c6:39:6d:
ad:32:ba:d7:96:e5:8f:f6:f4:25:f9:59:69:20:59:
fb:15:32:3b:d8:5a:66:b4:0d:62:e4:70:ad:43:e9:
d6:51:25:c2:39:32:09:d4:42:f4:5b:45:ce:2b:94:
a1:f7:d8:e3:e1:fc:e8:f8:6f:d8:cd:03:72:02:ae:
8a:ba:32:b3:ad:a7:3d:dd:85:1b:2a:2d:e8:0a:a3:
d7:60:4f:f1:d1:30:b4:d7:16:10:48:cf:5b:24:ed:
fe:78:d6:f1:bf:a7:7e:da:fa:69:47:2d:95:5f:0e:
a2:04:46:a5:78:54:be:b9:cb:25:ed:2b:c8:2f:cd:
28:06:61:3e:27:6a:84:11:4d:c2:11:20:0b:e8:7b:
3b:fc:fc:47:ae:35:66:44:c8:e4:20:aa:94:bf:b0:
20:9c:93:eb:3c:36:d7:46:69:90:4c:9f:4e:04:fa:
80:36:ca:35:c2:5d:b2:ca:e6:71:10:56:ba:98:77:
59:05:91:b8:1b:20:81:2e:fd:ff:e6:45:d0:27:1d:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:02:D2:24:D0:19:25:B3:1E:1C:A5:B2:F3:24:15:88:18:2A:D7:33
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_gLSJNAZJbMeHKWy8yQViBgq1zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.158.0/24
192.121.192.0/24
193.180.61.0/24
193.183.118.0/24
193.234.237.0/24
194.14.129.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.248.0/21
194.132.108.0/23
194.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ca:dc:83:d2:28:3b:53:b4:75:ba:19:8a:ed:95:63:d6:43:
19:cf:88:80:6e:7b:41:e9:0c:50:72:bc:d4:50:32:85:a9:45:
96:8a:a9:7b:08:16:e4:d8:66:6c:cc:b1:62:bd:5d:39:a7:e5:
5b:bf:81:91:d1:fb:d5:39:ac:1f:d9:83:f3:89:8c:7f:cd:cf:
02:ba:98:34:42:2b:eb:c5:99:e0:e4:01:78:e0:a5:ff:f0:24:
45:68:64:f5:11:64:0c:c0:18:eb:39:72:90:88:84:41:02:4b:
72:9f:29:0e:4c:be:40:a3:4f:75:97:05:26:7d:67:a0:90:78:
d4:d4:33:af:f7:9f:67:e8:20:94:b2:4b:6a:4e:b1:aa:b4:6f:
aa:94:d9:d5:2d:63:46:b7:60:1d:25:08:96:54:fb:8b:15:2a:
9b:fe:74:5f:62:3e:3c:ec:b0:9d:c5:87:16:9a:58:22:9f:63:
5c:4a:37:a4:ce:17:78:b7:32:11:2f:1c:69:99:66:4f:42:0c:
ae:9a:7f:6b:da:13:b7:6a:ec:7f:bc:e9:8f:e1:1c:a9:9c:c7:
1d:d5:11:73:cb:14:c2:d8:9f:06:62:20:3b:5c:bf:c0:37:13:
6c:1d:ff:c7:cb:a2:e8:1a:cc:c3:a0:aa:3c:fb:ba:3c:7b:64:
4a:a8:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 11:27:01 2024 by rpki-client on console-fra.rpki-client.org