Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Gi-WWg8TsiqduWrakd76v8gIvv8.roa
File: Gi-WWg8TsiqduWrakd76v8gIvv8.roa (raw, json)
Hash identifier: hqDXn/Cg03zwgKvlCjmmtOkTDiP09U03UMQypbZqWbM=
Subject key identifier: 1A:2F:96:5A:0F:13:B2:2A:9D:B9:6A:DA:91:DE:FA:BF:C8:08:BE:FF
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB851281DEC72C4D110445B200B9D47
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Gi-WWg8TsiqduWrakd76v8gIvv8.roa
Signing time: Sun 01 Jan 2023 09:44:56 +0000
ROA not before: Sun 01 Jan 2023 09:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47377
IP address blocks: 90.84.96.0/19 maxlen: 24
2a01:cd20::/32 maxlen: 48
2a01:caa0::/32 maxlen: 48
2a01:cc00::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 Feb 2023 10:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:51:28:1d:ec:72:c4:d1:10:44:5b:20:0b:9d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a2f965a0f13b22a9db96ada91defabfc808beff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:d6:61:1e:16:5e:3e:f6:2a:18:fa:62:00:
84:64:d0:50:ed:cf:05:7a:39:1d:97:69:9d:21:65:
ab:bb:16:e6:bc:26:69:b3:c0:6e:d3:84:71:29:46:
6c:da:a0:a1:97:70:94:f2:4e:0d:62:84:0a:7d:8a:
a6:2e:2b:0b:89:d9:d2:19:8e:be:37:43:e0:c2:e3:
f1:bc:bc:f9:b8:ba:db:0c:ec:fd:0e:01:f2:db:72:
34:b2:3b:ba:71:ec:f7:dd:f2:a3:89:b0:b4:ab:67:
03:38:03:08:2d:7d:13:82:ff:44:b6:ea:fb:57:aa:
39:ee:26:52:b2:e1:80:40:2e:90:26:37:7f:32:e1:
a3:08:2c:38:2b:7c:fc:62:8e:88:6e:08:34:d7:77:
ed:74:f7:41:ff:8a:cc:57:b3:8e:3f:95:7b:4d:ec:
66:78:8a:af:28:0a:4c:7f:a6:93:bf:5a:0a:7d:83:
01:18:58:5f:87:20:8f:16:a3:46:e9:a0:62:3a:50:
02:7b:dc:ec:a8:c0:0e:b9:39:20:5e:5e:26:10:8b:
39:f7:1b:68:47:a1:31:91:7d:9a:21:71:d9:e8:31:
8d:46:fb:1b:7b:ed:60:c5:bf:39:1a:10:05:f7:3a:
67:44:50:fb:7e:a9:55:69:04:aa:94:ff:44:e5:bc:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2F:96:5A:0F:13:B2:2A:9D:B9:6A:DA:91:DE:FA:BF:C8:08:BE:FF
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Gi-WWg8TsiqduWrakd76v8gIvv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.96.0/19
IPv6:
2a01:caa0::/32
2a01:cc00::/32
2a01:cd20::/32
Signature Algorithm: sha256WithRSAEncryption
1d:cf:cd:d7:5e:fb:ed:c1:28:d0:14:3f:9b:eb:bd:a7:e4:85:
19:e3:79:d7:67:69:88:80:3d:0e:0e:92:ad:0b:34:ca:24:18:
5a:86:09:9f:fb:e8:ab:ec:80:1b:82:c9:01:af:96:c4:09:a4:
1d:17:d7:03:3c:c0:c1:76:c9:e1:ce:4d:4d:76:b3:9d:1f:e0:
6d:7c:80:e8:a2:9f:7f:4e:68:62:0f:41:28:0e:44:5f:bf:a5:
46:71:47:cc:d1:81:6c:26:65:3a:2c:88:ff:1a:59:0b:a3:9b:
57:04:8a:13:20:1d:ac:8a:83:27:fd:7d:74:86:4d:a6:92:76:
19:8f:7e:40:dc:ef:ef:e7:0c:56:a7:b7:41:70:6e:51:d8:77:
39:a3:4d:2b:1f:00:9a:d0:91:6a:ba:f6:33:a8:cd:3f:5c:a2:
89:23:54:ce:f5:0f:98:62:aa:9c:35:44:8b:bd:82:17:c9:97:
c9:b2:77:66:a7:4d:f7:92:43:6c:55:a5:95:00:03:f7:d8:53:
6b:c8:fb:39:56:47:fd:33:e8:d0:c8:1a:24:3a:75:7f:35:9e:
67:9e:89:6a:58:05:27:d5:66:4e:a9:4a:87:ff:54:e5:9f:fa:
82:68:af:30:13:36:fd:9e:30:4b:1e:3b:0e:dc:05:ac:31:90:
75:e3:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org