Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/4GSRLfvJjRa5XD49PbFjL4hyZsc.roa
File: 4GSRLfvJjRa5XD49PbFjL4hyZsc.roa (raw, json)
Hash identifier: 5Z0ZsZToYTwMWBHjlm6+KCTKXuaFJwMXJLNLJlQFJHs=
Subject key identifier: E0:64:91:2D:FB:C9:8D:16:B9:5C:3E:3D:3D:B1:63:2F:88:72:66:C7
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 0188D72F59EC7A69D56A600C607FA3DB1D31
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/4GSRLfvJjRa5XD49PbFjL4hyZsc.roa
Signing time: Tue 20 Jun 2023 05:03:04 +0000
ROA not before: Tue 20 Jun 2023 05:03:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 91.201.140.0/23 maxlen: 23
139.28.136.0/24 maxlen: 24
195.206.111.0/24 maxlen: 24
195.206.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:2f:59:ec:7a:69:d5:6a:60:0c:60:7f:a3:db:1d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jun 20 05:03:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e064912dfbc98d16b95c3e3d3db1632f887266c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:14:8b:d7:d2:b2:d2:fc:e7:54:1c:13:8a:
7f:1e:e6:3a:86:4f:b2:20:43:4b:ff:17:77:15:35:
41:7d:86:83:e6:d4:26:68:d0:22:e4:ad:23:a1:17:
90:32:90:53:62:c6:85:c5:74:ed:e0:cf:67:2f:d5:
8d:a2:82:af:1f:9f:c1:85:b3:bf:21:ab:de:f4:1a:
b6:70:b5:7b:54:23:5d:ee:0b:15:7c:2f:30:c1:e4:
64:dd:0b:8e:f5:96:9a:58:0b:96:39:8f:f1:68:c5:
c1:75:41:cb:dc:47:01:77:06:10:fa:a7:97:30:16:
76:91:b5:12:04:46:17:f1:38:64:06:29:b6:22:f3:
cf:bb:4e:c9:bd:49:73:c6:f3:28:12:04:03:34:49:
33:ed:63:28:17:a2:5f:9e:ea:60:2e:58:15:37:8e:
8c:46:7b:a7:17:0f:ee:96:99:6c:6b:8c:c2:a1:15:
8f:5f:5a:6e:06:0b:1a:b0:d0:80:d3:da:08:ea:c4:
a0:d5:ee:bf:33:40:fe:df:a8:5a:a0:7b:76:9e:6a:
6c:0e:68:b3:7b:98:99:87:6d:f1:87:c9:5f:9c:c6:
ec:ec:51:c2:fa:6c:1f:64:57:67:11:52:70:4d:7e:
b0:3f:9e:f0:ef:59:f8:1e:f4:d8:4c:9c:e8:39:72:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:91:2D:FB:C9:8D:16:B9:5C:3E:3D:3D:B1:63:2F:88:72:66:C7
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/4GSRLfvJjRa5XD49PbFjL4hyZsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.140.0/23
139.28.136.0/24
195.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
42:34:5d:db:36:25:51:ff:57:00:c1:6e:74:0e:35:2f:d2:4a:
05:5f:be:cf:5b:cf:f7:81:08:72:d4:2c:b5:bf:0b:a0:e5:87:
90:a5:04:70:5d:2b:92:e9:89:ed:55:1e:b3:d9:d5:ef:e2:b0:
b4:0c:f5:64:bf:d8:f0:ea:c8:07:3d:5f:1e:bc:6b:67:c7:83:
22:23:b1:40:d5:29:61:c6:ac:15:25:71:82:a0:0e:21:3a:82:
e4:22:e2:cc:ce:9d:81:0c:51:7b:69:96:48:65:a5:90:1a:41:
b0:3d:d8:12:7e:48:48:04:19:fe:e9:71:fe:76:96:75:a1:e6:
eb:0d:38:71:b3:13:8f:27:c7:32:6a:97:7f:c9:05:bd:20:13:
c9:19:b2:3e:2f:96:90:30:00:8e:11:c3:ed:49:ef:93:1c:9f:
b3:79:bc:5e:79:e6:73:5d:58:5d:d2:1a:7e:5a:0b:d0:85:a0:
f1:be:7d:d6:26:e6:37:03:f8:5a:7c:3d:8b:e5:df:c6:0e:4d:
aa:4b:e5:dd:60:28:4b:6a:cf:0f:ef:c1:a3:a5:ad:d0:e5:fe:
d3:22:98:69:58:7c:a4:42:2f:f7:0f:73:4c:ab:5a:a3:90:55:
8c:d0:5d:11:51:bd:f3:55:6a:13:91:74:41:f0:bf:a5:00:38:
97:c1:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:04 2024 by rpki-client on console-fra.rpki-client.org