Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gwrxn8TFnJjMJ44G2KP4EJp6d9k.roa
File: gwrxn8TFnJjMJ44G2KP4EJp6d9k.roa (raw, json)
Hash identifier: FmWLlIHOgcjl9ZVWMcZA3rsD1gXdgURNPxGbzlT3iCg=
Subject key identifier: 83:0A:F1:9F:C4:C5:9C:98:CC:27:8E:06:D8:A3:F8:10:9A:7A:77:D9
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018ACC94C95FDD652690FAC7CE614FE5CCD0
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gwrxn8TFnJjMJ44G2KP4EJp6d9k.roa
Signing time: Mon 25 Sep 2023 13:43:37 +0000
ROA not before: Mon 25 Sep 2023 13:43:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 193.221.192.0/24 maxlen: 24
193.221.193.0/24 maxlen: 24
193.221.194.0/24 maxlen: 24
83.143.118.0/24 maxlen: 24
45.90.144.0/24 maxlen: 24
212.107.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:94:c9:5f:dd:65:26:90:fa:c7:ce:61:4f:e5:cc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Sep 25 13:43:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=830af19fc4c59c98cc278e06d8a3f8109a7a77d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:4a:05:13:ba:97:2e:86:9a:76:ec:fe:24:
c4:f2:5b:ce:2b:9d:47:5c:e9:e3:05:cb:ad:4b:b8:
bb:84:c5:51:bb:d1:29:48:0f:e0:9d:76:68:f0:b1:
81:ad:0e:a6:7d:97:c9:2d:a3:63:2c:5d:2c:bd:86:
08:82:f8:9e:e5:7d:93:93:10:24:b0:9b:ce:42:e4:
e6:ab:dc:b1:38:64:36:f2:75:85:b3:37:6a:f0:a0:
50:a5:a6:86:ac:36:bc:4e:2d:b7:46:88:e0:6c:c5:
f3:00:24:76:38:ae:b3:87:70:58:9d:90:8d:5e:fd:
0c:5b:bf:ef:e2:95:7d:9b:c2:c9:d0:07:d5:f8:f2:
72:c7:f6:c7:a0:f9:91:43:cd:12:c0:d4:f8:b5:a2:
a6:68:56:f4:82:b5:39:dc:92:04:3a:13:24:5e:7a:
04:46:74:15:cb:ac:4c:50:5e:97:ac:d0:8a:68:f9:
af:81:a6:15:32:fb:a9:28:71:7f:81:55:27:17:b6:
3f:2a:b1:f2:eb:91:67:84:b9:06:41:7e:60:ec:58:
f2:4e:09:30:87:5e:fd:d0:33:62:06:cd:76:65:2b:
06:a4:4f:c7:6d:ba:35:35:b7:5d:32:74:55:51:d9:
df:c8:b0:4d:79:c8:6e:6c:41:2b:c2:2c:6d:d8:d6:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:F1:9F:C4:C5:9C:98:CC:27:8E:06:D8:A3:F8:10:9A:7A:77:D9
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gwrxn8TFnJjMJ44G2KP4EJp6d9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.144.0/24
83.143.118.0/24
193.221.192.0-193.221.194.255
212.107.13.0/24
Signature Algorithm: sha256WithRSAEncryption
27:bc:01:10:7d:40:a2:6c:d6:ed:49:ba:db:fb:cf:28:26:d1:
cf:f3:4d:3d:55:2c:f9:9c:9b:38:ce:bb:4b:36:29:9e:89:cf:
7f:f3:69:2c:fa:67:c4:68:43:7d:bd:08:31:b0:14:3c:82:50:
f6:29:31:39:44:58:29:47:15:a4:ca:c9:61:00:4a:ba:2a:07:
72:6e:5d:c1:26:cd:4d:92:ad:e9:67:3c:0b:a1:0d:9e:55:31:
a5:99:8d:c3:8e:72:7e:51:ed:5e:ed:bf:e0:9a:75:2f:08:fc:
da:e7:74:1d:55:c1:cb:fd:f0:00:0a:a2:33:7c:30:5e:51:b7:
32:7b:15:1c:83:c0:82:13:af:33:31:82:9d:00:dc:3d:58:e5:
74:4b:12:99:63:f2:b4:8e:65:be:e1:5f:cd:34:dd:ca:22:6b:
84:69:21:55:32:b8:e7:c5:38:d2:4f:e9:30:7a:94:ed:66:43:
e6:36:d7:83:05:ab:b0:47:4e:7d:93:f3:87:03:5c:9c:77:35:
ee:c8:14:85:29:16:a1:16:63:ad:2c:49:f0:7f:e4:87:24:dc:
b6:b3:24:22:fa:19:54:b8:78:65:e3:76:1e:65:1f:df:42:90:
a1:89:f3:ee:61:a5:35:9b:ba:46:c2:da:b4:c3:cb:c4:30:51:
3b:46:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org