Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/gQQ9TgeAA511JtljFAZfK-Eeu2M.roa
File: gQQ9TgeAA511JtljFAZfK-Eeu2M.roa (raw, json)
Hash identifier: rLlMbD4M7YSwAf8yGuWTesbLGiex7vREknYYBAoEryw=
Subject key identifier: 81:04:3D:4E:07:80:03:9D:75:26:D9:63:14:06:5F:2B:E1:1E:BB:63
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 01932060B9A0F9D10277B4679D3A09934E78
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/gQQ9TgeAA511JtljFAZfK-Eeu2M.roa
Signing time: Tue 12 Nov 2024 12:37:10 +0000
ROA not before: Tue 12 Nov 2024 12:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210312
IP address blocks: 147.189.216.0/21 maxlen: 21
147.189.216.0/24 maxlen: 24
193.5.16.0/22 maxlen: 22
193.5.19.0/24 maxlen: 24
2a0d:3dc0::/29 maxlen: 29
2a0d:3dc2::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Nov 2024 12:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:60:b9:a0:f9:d1:02:77:b4:67:9d:3a:09:93:4e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Nov 12 12:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81043d4e0780039d7526d96314065f2be11ebb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:f0:e9:cd:e2:2f:c3:49:f6:27:1f:6c:e4:
bc:22:5c:b8:04:36:45:f8:40:67:5c:e6:15:31:0b:
7e:45:c1:a9:ba:5c:25:96:7f:bb:18:fb:51:f4:71:
29:b4:b2:be:66:21:57:70:18:5f:9a:17:8c:13:f6:
60:fd:6a:0c:29:80:91:ca:1c:f2:06:ef:dd:08:cc:
94:7b:a9:79:e0:46:b6:e6:00:ea:89:30:95:81:58:
15:9f:48:eb:d0:90:83:dd:c4:ca:94:ee:b3:44:67:
64:22:cd:31:94:c6:2f:4e:8d:01:87:c2:f9:5a:c5:
ba:71:2a:2c:a4:8d:02:0f:ba:3f:b5:4c:90:9f:b2:
9f:40:ad:35:87:59:10:e8:02:9a:5f:5b:e8:46:b7:
62:77:70:06:58:8c:7b:5b:cc:1f:9e:e3:76:78:e1:
2f:5a:ac:cd:41:41:bf:3d:14:b4:4c:ae:e5:13:fc:
6b:44:b2:cb:b2:3e:84:e2:78:c1:44:c9:19:01:e4:
cc:9a:57:8f:e1:2d:a6:42:72:9f:54:5e:5e:22:6d:
e1:8a:45:ab:7f:57:69:2a:b7:20:7e:29:b7:7e:0b:
f0:6a:ff:6c:c5:27:96:69:63:19:d7:8e:fd:db:7c:
28:4b:c5:dd:25:f7:6d:ed:0f:eb:e7:86:36:6a:fc:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:3D:4E:07:80:03:9D:75:26:D9:63:14:06:5F:2B:E1:1E:BB:63
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/gQQ9TgeAA511JtljFAZfK-Eeu2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
14:87:96:e1:06:96:10:1d:71:7e:95:49:a9:68:e1:c5:8c:f5:
b0:c7:13:94:86:62:07:fd:c7:be:f5:d9:b2:dc:37:2f:f7:3a:
91:1b:47:8f:d6:fd:ca:03:c4:ee:3d:bc:cd:00:8d:1a:ca:d0:
ef:3b:80:f1:e1:60:e9:36:26:ac:39:6a:90:bc:94:69:c8:3f:
8f:2f:69:53:7b:a1:c8:93:ab:65:c8:17:fc:3d:b2:12:07:1c:
d2:f6:d4:64:55:94:06:bb:12:b3:da:44:d7:8e:78:b2:90:2e:
31:b0:b8:db:f0:3f:eb:08:1a:6c:b0:46:93:ee:50:bb:ca:1e:
5e:ae:24:59:47:5f:6b:fc:30:5b:68:1b:f7:75:95:e8:0b:f4:
d2:10:6f:1a:b0:2f:34:11:da:f8:b9:66:0d:6a:2e:7a:94:49:
01:c0:36:25:48:77:86:9e:f8:e7:da:40:6b:fa:2c:14:f4:17:
e5:29:5b:ee:77:f3:ab:69:b2:e2:59:9c:8b:7d:0f:c5:68:6d:
18:f1:44:94:ba:c2:c9:8e:97:2d:9d:1e:dc:3f:14:21:de:b7:
a6:a6:42:6f:49:f4:f5:71:bc:57:28:34:0d:22:b3:7e:5a:4c:
04:0a:6f:41:e2:3b:87:31:9e:a9:56:1f:44:b2:44:13:1b:46:
08:40:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 16:39:59 2024 by rpki-client on console-ams.rpki-client.org