Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/g0nHZDSLRuB80JaMok3DJ3XAPus.roa
File: g0nHZDSLRuB80JaMok3DJ3XAPus.roa (raw, json)
Hash identifier: K1sdTnAQwzGv9r0gcsR3CNJ5bBBe9E4J6deTAxpRiD8=
Subject key identifier: 83:49:C7:64:34:8B:46:E0:7C:D0:96:8C:A2:4D:C3:27:75:C0:3E:EB
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01863FFC5D1394879119CC6C3F201787FC24
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/g0nHZDSLRuB80JaMok3DJ3XAPus.roa
Signing time: Sat 11 Feb 2023 10:19:08 +0000
ROA not before: Sat 11 Feb 2023 10:19:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 46.243.76.0/22 maxlen: 22
92.119.164.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 22 Mar 2023 15:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:fc:5d:13:94:87:91:19:cc:6c:3f:20:17:87:fc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 11 10:19:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8349c764348b46e07cd0968ca24dc32775c03eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:6a:1a:49:8d:40:64:dc:bf:be:56:4c:1a:
b1:d6:47:b0:95:a6:44:85:8d:a1:ef:81:bd:ba:69:
b0:fc:04:14:e6:2e:3e:5f:fc:d6:b3:5c:4c:ae:bf:
b0:bd:5f:e8:53:37:ee:35:1f:61:62:1c:c8:a5:dd:
8d:b8:25:2c:92:31:04:cc:a4:cb:b5:93:c3:7b:7a:
5b:82:f8:56:f3:88:42:f4:75:cf:a6:e5:5b:a6:51:
90:d6:7d:48:94:a0:61:00:b7:fc:9e:5a:57:2f:23:
0f:53:a9:12:1d:b6:82:43:cd:84:2e:2a:76:2c:26:
f9:42:17:1c:36:8a:1b:6f:eb:11:df:e7:80:35:3e:
5f:37:43:73:f5:99:fb:20:de:9b:0d:a9:97:c3:66:
0c:e2:cd:64:d4:49:06:99:11:8a:44:73:ff:7b:c1:
fd:1f:35:95:ee:1e:12:77:0d:70:3f:6a:65:4d:57:
45:7b:49:37:20:ce:06:14:7c:6d:8a:29:df:08:62:
4c:6d:90:c8:ea:17:d0:df:65:2a:37:04:6e:4e:55:
ea:0f:0f:44:c2:c5:f6:8f:f3:8e:49:7c:99:33:d9:
31:3f:84:9b:bb:cc:20:ef:26:cf:a0:2c:b7:70:e5:
7a:3b:2e:e1:79:3a:79:fa:df:e5:d0:03:ae:7f:2f:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:49:C7:64:34:8B:46:E0:7C:D0:96:8C:A2:4D:C3:27:75:C0:3E:EB
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/g0nHZDSLRuB80JaMok3DJ3XAPus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.76.0/22
77.83.32.0/22
92.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
43:01:24:dd:1b:40:80:7b:bf:3c:cc:71:77:d5:32:29:83:a4:
76:31:61:ad:ce:11:fb:6d:91:f6:73:56:7a:93:c9:a7:ea:9b:
73:24:5d:71:79:37:9e:84:82:4f:0b:ec:66:3e:90:72:c1:0b:
97:50:46:a0:43:57:2f:68:2c:89:b5:38:7a:20:fb:02:91:17:
26:70:fa:4a:ed:46:aa:8a:df:89:bc:cb:69:38:11:75:13:3b:
87:88:86:6f:07:b0:dc:b3:b7:12:5d:e4:db:29:e5:5f:b3:c8:
5b:1c:17:5d:e3:7b:a5:7e:6f:d9:37:97:4e:3b:f2:f4:7e:66:
aa:06:9a:9b:15:8a:09:3a:05:e7:c4:3a:40:42:68:fa:d3:d4:
30:b6:4d:30:cc:dd:7b:af:e4:fc:14:62:21:21:ef:18:31:d1:
db:3a:27:f7:e2:3d:f0:a5:b9:4b:cf:f4:08:69:db:28:0c:ce:
90:bb:54:7e:ec:1f:fe:1b:f2:0e:5c:c9:4f:7b:02:b7:14:dc:
2e:ba:e9:5f:38:a6:e6:fb:e0:ef:21:4e:99:f6:e5:ac:6f:68:
2b:91:06:da:49:0c:9a:3f:15:a0:92:9b:32:e2:60:7c:c5:27:
6e:22:f2:c8:8a:05:fa:6a:90:58:89:e4:4f:64:ca:70:14:90:
c4:9d:d1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org