Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/gY-VHVdkh3_5cjDxgYLcUXOICcI.roa
File: gY-VHVdkh3_5cjDxgYLcUXOICcI.roa (raw, json)
Hash identifier: B4Dt8nRgzYHrTg/FmSJqmehK5ylkSRFVtd62u6HLvbQ=
Subject key identifier: 81:8F:95:1D:57:64:87:7F:F9:72:30:F1:81:82:DC:51:73:88:09:C2
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018AFE97D5853C553E93588049E691C1BE95
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/gY-VHVdkh3_5cjDxgYLcUXOICcI.roa
Signing time: Thu 05 Oct 2023 06:47:57 +0000
ROA not before: Thu 05 Oct 2023 06:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49112
IP address blocks: 176.52.224.0/20 maxlen: 20
130.0.96.0/19 maxlen: 19
95.157.128.0/18 maxlen: 18
185.147.232.0/22 maxlen: 22
2a00:9380::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:97:d5:85:3c:55:3e:93:58:80:49:e6:91:c1:be:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Oct 5 06:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=818f951d5764877ff97230f18182dc51738809c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:01:5f:da:70:f3:7d:24:cf:b3:4b:65:fb:
4a:5d:d7:0e:0c:d1:f0:7f:f2:ae:23:16:1b:02:e4:
a0:cb:ab:ba:fa:1f:5e:e6:7d:24:01:df:5a:db:ef:
dd:db:5e:73:16:24:d1:c0:24:d4:0b:70:21:ed:02:
38:53:17:3b:3c:92:8c:12:4d:26:9e:61:8b:3d:cd:
1c:96:da:47:10:ba:57:62:82:8d:c3:15:76:94:4f:
c3:99:31:01:46:4a:66:99:1a:ec:21:fc:1b:e5:e5:
52:e0:28:a3:7d:5f:4b:7f:c7:ad:86:ef:0e:69:31:
a2:66:de:29:ce:81:fc:1a:d1:f1:13:a4:2b:19:12:
3b:fe:d5:41:1b:fd:8a:4c:15:99:fa:e5:02:fa:32:
8b:07:e7:5d:b7:bc:f9:0b:43:21:c5:34:67:6f:41:
2f:86:8f:7d:88:83:b6:3e:25:8f:66:d5:50:c6:63:
b1:e2:f0:36:96:87:d4:21:04:85:50:63:32:a0:b3:
95:9e:3e:86:9f:e9:c2:22:42:bb:18:ce:07:c0:27:
95:7f:37:8e:94:a9:78:7f:1b:13:eb:05:b6:cd:1f:
93:6a:9c:e6:ec:84:2d:c0:f1:37:a7:3e:b2:35:02:
df:b5:bd:a2:56:ec:de:5a:89:51:b7:b5:2e:e9:56:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8F:95:1D:57:64:87:7F:F9:72:30:F1:81:82:DC:51:73:88:09:C2
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/gY-VHVdkh3_5cjDxgYLcUXOICcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.128.0/18
130.0.96.0/19
176.52.224.0/20
185.147.232.0/22
IPv6:
2a00:9380::/32
Signature Algorithm: sha256WithRSAEncryption
4a:8e:0c:64:0f:39:84:3c:2f:36:72:a9:82:4e:5f:59:77:dd:
9c:58:92:14:2f:e1:5a:f8:3f:e9:1d:d5:e7:09:92:28:f0:2a:
c8:8b:59:ca:e3:a4:dc:de:04:d4:3b:d0:af:41:51:15:6e:5b:
c5:41:9a:cd:76:41:95:24:ec:d5:dd:95:88:6f:e7:c5:dd:ba:
15:f2:72:b5:f8:57:bb:3d:eb:a0:6a:e1:cf:36:c3:ab:2c:50:
58:c4:c0:2d:8e:a2:cc:fa:77:fa:da:c8:96:75:25:df:8b:0a:
e7:22:95:42:eb:df:32:96:8a:fc:46:da:58:61:cd:17:f5:b0:
87:0d:9f:1b:4e:6c:0e:7e:c4:c3:28:7d:5e:ab:29:80:89:03:
7f:8d:f0:95:9c:6d:f8:49:cd:70:51:b3:04:84:0f:20:6f:9b:
d3:22:43:51:40:33:ac:79:5c:e8:79:29:1c:86:0b:a4:eb:3a:
5d:4e:24:7d:22:5c:f5:9b:81:90:d4:2f:2b:49:da:5d:8b:3a:
50:0e:a3:82:4f:70:40:80:fa:c5:99:68:47:18:6d:34:7f:ed:
b3:8b:61:90:d5:cd:ef:06:c2:e5:fd:09:51:37:ed:f2:e0:f0:
54:c9:2f:49:7e:90:95:c8:fe:d0:d8:43:d0:98:1c:8d:90:38:
b2:6a:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org