Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/gWkqXGwPdTJcp_ROL3JLOAqilaE.roa
File: gWkqXGwPdTJcp_ROL3JLOAqilaE.roa (raw, json)
Hash identifier: Eh/nt80eptFD7y2+o2d+86FUAIHmEkNnqD3adamNWmM=
Subject key identifier: 81:69:2A:5C:6C:0F:75:32:5C:A7:F4:4E:2F:72:4B:38:0A:A2:95:A1
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 018CC8DEFFD1E2370B64BFA7E4CA596F3F9D
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/gWkqXGwPdTJcp_ROL3JLOAqilaE.roa
Signing time: Tue 02 Jan 2024 06:31:46 +0000
ROA not before: Tue 02 Jan 2024 06:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38972
IP address blocks: 80.251.154.0/24 maxlen: 24
80.251.144.0/21 maxlen: 21
46.254.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 25 Mar 2024 04:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ff:d1:e2:37:0b:64:bf:a7:e4:ca:59:6f:3f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Jan 2 06:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81692a5c6c0f75325ca7f44e2f724b380aa295a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:5a:d6:2f:ad:ee:1b:4f:83:28:2e:1f:b8:
eb:ac:85:b7:a1:4a:3f:9d:d3:b0:76:37:fc:f8:72:
fb:dd:51:7a:07:42:e8:4b:f6:a1:68:30:b7:09:78:
41:bb:ed:e3:62:91:f2:a6:9a:81:54:8f:98:12:87:
4d:71:9e:0b:ea:61:36:50:c3:34:90:27:1a:d7:69:
39:b8:45:10:78:ce:ab:91:d9:d1:7e:46:fe:dc:ee:
26:e1:d5:8f:b7:6c:3c:86:27:22:d3:75:48:74:4b:
71:87:41:14:71:d7:b8:72:c3:c8:97:72:b0:6a:cf:
a3:3c:ba:0f:1b:b2:67:25:e8:1c:e4:b1:54:1b:fe:
00:b7:21:be:08:e6:32:3d:9a:4d:22:0f:37:24:00:
3b:f6:88:d5:ed:58:45:ba:28:8f:27:22:85:d9:03:
bc:ba:d4:13:14:1d:25:00:c6:24:71:20:50:58:e2:
45:4c:04:3a:56:f3:8d:89:82:f1:47:2a:99:ab:98:
e4:1b:e0:14:15:19:72:e9:d7:42:bc:e4:5b:b6:79:
26:3d:69:41:63:88:25:6e:40:cd:18:50:b9:19:98:
6c:79:85:ae:69:c6:39:4c:9e:35:a1:22:c9:20:94:
39:e4:48:14:ca:a2:b5:3d:dc:f3:ab:0c:f6:11:b8:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:2A:5C:6C:0F:75:32:5C:A7:F4:4E:2F:72:4B:38:0A:A2:95:A1
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/gWkqXGwPdTJcp_ROL3JLOAqilaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.24.0/22
80.251.144.0/21
80.251.154.0/24
Signature Algorithm: sha256WithRSAEncryption
99:07:e2:79:d6:34:60:72:53:82:25:2d:df:23:a9:61:bc:f7:
54:50:90:77:0a:ee:c9:a4:a5:91:02:f8:98:bb:8f:5e:38:ea:
e4:69:7f:0c:6c:ab:73:4e:73:d8:d8:5d:49:cb:de:a0:0d:3d:
1d:56:c0:ab:38:5d:2e:f7:9c:aa:99:c4:95:15:f9:31:b5:6d:
09:22:3b:f5:3f:71:df:be:b2:fb:b8:62:27:ee:08:a0:99:f0:
23:00:82:b1:bb:2e:db:7d:ea:2b:79:95:c3:52:f1:31:5e:1b:
65:56:4f:aa:1e:43:ab:18:d4:18:f2:01:2c:9f:ea:9a:16:ff:
62:2b:87:01:1d:59:54:79:7c:9e:25:a2:06:a4:3a:f2:22:23:
03:4e:09:54:49:06:93:9a:69:43:07:40:01:d6:f0:f7:7c:41:
8c:bc:ee:78:8f:81:e6:4c:bd:87:b3:74:e2:d9:1e:20:33:37:
e7:0e:b3:31:98:a2:70:1c:3e:c7:f2:71:e3:4f:f1:97:c2:f5:
37:63:b5:42:b9:bd:78:0f:d1:ec:07:86:42:cc:2c:8d:ea:fd:
46:da:e6:5b:b8:40:3d:8a:35:da:12:52:e4:ac:88:a8:46:4b:
44:31:8a:9f:90:40:7c:0b:b5:bc:86:44:7d:cc:6d:0b:1f:59:
6c:d6:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:00 2024 by rpki-client on console-ams.rpki-client.org