Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GBqbx72ieQSaEFDvkibrnton_s4.roa
File: GBqbx72ieQSaEFDvkibrnton_s4.roa (raw, json)
Hash identifier: 6RoY9e49E+XyaiqxAUnigpxKy1p2uApD7xcZRFs92Es=
Subject key identifier: 18:1A:9B:C7:BD:A2:79:04:9A:10:50:EF:92:26:EB:9E:DA:27:FE:CE
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0190789DFE7B0382808D406289A0311B2B95
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GBqbx72ieQSaEFDvkibrnton_s4.roa
Signing time: Wed 03 Jul 2024 12:42:18 +0000
ROA not before: Wed 03 Jul 2024 12:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 91.210.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 13:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:9d:fe:7b:03:82:80:8d:40:62:89:a0:31:1b:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 3 12:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=181a9bc7bda279049a1050ef9226eb9eda27fece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:ef:56:aa:ae:3f:a4:e0:b7:e5:60:0f:b2:
70:35:43:82:76:38:74:47:93:7f:a0:45:26:61:e0:
da:68:cd:18:1e:6a:e1:a2:09:b7:9c:1d:e1:46:54:
57:18:50:20:7c:1e:01:82:56:2a:40:ca:13:0c:b1:
bd:56:ff:77:64:e1:6d:7e:f0:63:54:11:43:11:ab:
58:2b:82:21:e6:f6:5c:ca:87:5e:49:20:17:90:af:
ee:54:83:69:95:60:08:4d:ad:27:0a:e7:bb:5e:16:
98:67:b2:f7:4e:af:e0:ce:62:d3:81:0e:cd:d3:ae:
03:40:8f:c1:f9:ca:0f:14:84:a7:93:e3:ac:6c:3b:
5a:03:d4:31:b0:ba:73:5b:6b:64:bd:12:c7:d5:6a:
e5:aa:78:a1:3a:e0:71:da:ed:85:41:cd:ee:06:f9:
58:85:df:b8:55:ac:6c:cf:8b:36:20:06:95:f0:a6:
5d:68:84:87:35:3c:57:4f:9c:e6:34:13:a6:5a:79:
f6:e8:5e:2d:70:f9:61:d5:8f:3a:f2:de:66:c2:b2:
5f:24:f2:5a:af:a7:23:3b:91:70:c3:46:af:8d:b4:
57:43:22:89:20:fc:a2:04:d4:3b:fb:d3:3a:96:93:
86:f6:18:5f:70:b4:30:e1:d4:78:87:b7:12:22:3b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1A:9B:C7:BD:A2:79:04:9A:10:50:EF:92:26:EB:9E:DA:27:FE:CE
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GBqbx72ieQSaEFDvkibrnton_s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b5:72:e8:1b:c9:53:2f:86:71:87:bf:da:be:1d:ca:f8:c7:
73:b4:08:54:5d:9b:7f:66:c4:17:e0:5c:60:90:e9:94:87:ac:
c3:f9:f2:15:87:98:ee:bf:88:01:e2:32:5a:c0:97:7b:24:13:
9f:80:ea:2f:17:d2:a0:04:37:89:e8:60:fb:c9:88:52:88:ef:
96:2c:ed:91:fd:0a:01:05:d4:45:c7:c7:ec:e2:e5:b1:b0:b3:
8c:46:19:61:7f:3f:f4:d8:b0:e5:d1:52:5d:d1:02:8e:f3:e4:
11:06:aa:9b:95:d4:72:34:48:5d:d7:39:39:02:42:5f:a9:0c:
42:33:96:57:15:c0:df:0b:b7:25:af:24:1d:c3:a9:bf:07:c2:
7e:50:fd:49:14:72:88:71:c7:b2:3f:e3:e4:a6:30:41:9c:2e:
92:f0:40:ad:35:a9:75:cf:a1:35:c3:74:27:2e:bb:e4:ea:99:
f1:7f:61:47:86:2e:de:dc:03:e2:59:d5:97:a4:5c:4e:05:9a:
1f:4b:ee:c0:8c:7f:fb:3b:91:58:2f:24:3e:e9:bd:6f:71:39:
2d:a8:0d:18:03:fa:31:07:f3:52:43:35:7e:67:be:e3:93:3e:
d4:3b:fa:55:f5:e8:b2:43:63:78:96:99:7a:57:37:5d:44:2c:
33:1b:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 20:02:10 2024 by rpki-client on console-fra.rpki-client.org