Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/CHP7w4tBf9VQONRj-qOo46IZ928.roa
File: CHP7w4tBf9VQONRj-qOo46IZ928.roa (raw, json)
Hash identifier: RdX7iGcKoRP95171V1OheiWSf+44f6rmqUeiROGhhJo=
Subject key identifier: 08:73:FB:C3:8B:41:7F:D5:50:38:D4:63:FA:A3:A8:E3:A2:19:F7:6F
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 0192A0D48BD84E4BCC634E39E2ED7EAFEBF8
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/CHP7w4tBf9VQONRj-qOo46IZ928.roa
Signing time: Fri 18 Oct 2024 18:12:16 +0000
ROA not before: Fri 18 Oct 2024 18:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48732
IP address blocks: 195.200.235.0/24 maxlen: 24
195.200.235.0/25 maxlen: 25
195.200.235.128/25 maxlen: 25
195.200.235.128/26 maxlen: 26
195.200.235.192/26 maxlen: 26
2a11:600:150::/48 maxlen: 48
2a11:600:151::/48 maxlen: 48
2a11:601:d000::/36 maxlen: 36
2a11:601:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a0:d4:8b:d8:4e:4b:cc:63:4e:39:e2:ed:7e:af:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Oct 18 18:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0873fbc38b417fd55038d463faa3a8e3a219f76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:08:f8:32:a4:b4:bd:e6:61:ff:e7:65:53:
de:86:cb:e5:19:23:ec:b8:17:c2:5a:83:53:6c:bf:
14:b2:0c:c5:ea:1d:f6:8d:22:24:71:df:71:4d:55:
20:cf:d6:30:91:23:c0:b8:97:b8:8c:ab:2c:50:c6:
a9:49:f2:a5:d1:80:bb:6a:eb:97:0c:8b:23:16:67:
0c:b8:01:41:fe:ed:14:3b:4c:46:1f:cc:ab:ae:0c:
00:db:1a:0e:a8:55:31:ed:74:0f:bd:fe:d8:cf:84:
f0:a5:5b:aa:31:21:a2:21:93:c0:7d:61:db:1a:86:
28:2d:33:98:e5:cd:f7:9c:9a:03:08:aa:66:70:63:
1f:cb:4c:e5:31:bc:c4:25:51:6b:55:ec:16:ae:22:
c2:ca:5b:d0:81:c0:40:7c:d6:64:fe:0c:83:1a:76:
df:60:74:4b:fd:18:8f:d6:77:5f:8c:30:bc:35:df:
a3:1b:a9:d1:50:ed:56:66:a9:9e:d9:7c:6c:92:79:
bd:45:73:90:62:4c:6a:10:fc:72:9a:16:b1:67:88:
4f:80:45:15:bd:71:f9:46:24:d5:c5:21:17:3e:13:
be:cf:01:30:ea:04:34:3e:40:b4:ce:18:c0:2a:50:
c1:61:c5:99:99:f4:48:c5:b5:2d:74:01:48:50:11:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:FB:C3:8B:41:7F:D5:50:38:D4:63:FA:A3:A8:E3:A2:19:F7:6F
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/CHP7w4tBf9VQONRj-qOo46IZ928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.235.0/24
IPv6:
2a11:600:150::/47
2a11:601:d000::/36
2a11:601:f000::/36
Signature Algorithm: sha256WithRSAEncryption
47:2e:5a:e9:21:9b:3b:bc:12:2f:d3:15:d6:45:a2:28:77:75:
57:f4:27:82:b8:8e:cb:29:99:6b:80:be:b2:06:f4:bd:ee:e2:
ef:37:16:20:d7:b4:c7:bc:e2:cb:4b:79:f9:80:c0:71:ae:5e:
b5:43:65:11:7b:69:ab:99:ed:34:61:6d:70:15:eb:ce:66:00:
a1:60:27:13:e2:e8:f3:54:04:0d:67:99:d9:d5:be:05:54:c1:
47:3c:c4:81:c8:10:fe:86:ab:a5:58:43:0f:e5:74:e8:68:9a:
70:fd:db:5d:ba:68:5d:73:18:b4:05:ec:24:ff:38:d0:c8:1e:
95:d6:c7:60:77:e3:f0:ef:80:5e:19:3c:21:13:60:37:c9:b0:
13:5e:5e:f6:db:ba:a2:d6:4f:27:5b:cf:f0:10:c5:50:d1:83:
77:ef:5a:8d:f8:4b:c2:39:77:19:40:0e:35:3b:05:01:52:74:
cb:82:82:74:d2:8c:60:8f:e2:2e:ca:83:8f:48:9a:31:f8:6f:
e1:d8:c9:4e:49:dc:75:aa:07:7e:ee:02:04:dc:c2:89:92:af:
da:4e:89:76:90:0c:fa:9f:96:43:3f:2d:cf:6a:40:72:99:5e:
fd:7f:bf:b7:65:a6:a2:f3:af:c8:57:0d:57:f5:e1:f9:66:6d:
1b:3d:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:18 2025 by rpki-client