Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/G1Ai1Wjq2ZoJyLnDTsnjShH0EI8.roa
File: G1Ai1Wjq2ZoJyLnDTsnjShH0EI8.roa (raw, json)
Hash identifier: AhzxuvC8Q/c4Wp8CpJAa2UY2KzJw9kaYKEBCtyFyMHk=
Subject key identifier: 1B:50:22:D5:68:EA:D9:9A:09:C8:B9:C3:4E:C9:E3:4A:11:F4:10:8F
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0189EFEDFCF2D43E9BD1793AE045DCA7605D
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/G1Ai1Wjq2ZoJyLnDTsnjShH0EI8.roa
Signing time: Sun 13 Aug 2023 17:24:58 +0000
ROA not before: Sun 13 Aug 2023 17:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43824
IP address blocks: 91.92.115.0/24 maxlen: 24
85.202.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:ed:fc:f2:d4:3e:9b:d1:79:3a:e0:45:dc:a7:60:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Aug 13 17:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b5022d568ead99a09c8b9c34ec9e34a11f4108f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:21:f3:a3:54:d7:91:bb:ab:75:a3:61:b0:
53:62:ba:bd:21:b6:3f:e1:1f:21:3a:95:e4:b0:c2:
73:ce:22:46:ba:e3:79:53:db:11:56:56:a5:d8:cf:
23:73:9a:97:c2:d2:39:83:42:85:60:fb:5f:64:0f:
40:0c:01:74:8a:41:71:60:f5:d5:c1:60:4c:e4:39:
a7:f1:c7:1b:74:b2:52:9a:ec:06:b0:e9:71:28:14:
f1:2d:84:01:49:ba:f3:9f:35:68:d0:85:b6:0d:0b:
95:bd:dc:79:20:70:0e:07:79:69:24:d7:94:a0:b2:
97:e1:ce:f0:dc:f9:90:19:e4:d8:3a:c1:e4:24:36:
27:9a:42:34:74:b4:0d:17:3a:6a:4e:1f:07:34:d0:
9d:b9:10:60:2a:78:d7:41:43:4e:d1:53:36:fb:8e:
1a:b2:8e:5c:70:11:7a:05:c5:11:81:a2:07:e9:d4:
c3:b3:03:0b:0d:fa:8c:80:08:ec:ba:71:39:7b:8d:
9d:a0:8e:32:f1:6d:87:5c:6f:22:66:ac:b0:c0:6a:
f9:65:4f:69:35:65:f2:6f:79:10:e1:6c:54:67:47:
2d:83:ca:27:76:d9:f8:c4:63:c0:85:45:18:85:ae:
44:94:69:d6:82:9d:7a:f6:e7:2f:8b:5f:eb:e5:a6:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:50:22:D5:68:EA:D9:9A:09:C8:B9:C3:4E:C9:E3:4A:11:F4:10:8F
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/G1Ai1Wjq2ZoJyLnDTsnjShH0EI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.95.0/24
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e4:4f:65:27:b6:62:4b:0e:a5:27:77:dd:46:5f:1d:a9:56:
28:4e:03:c6:0a:95:ce:8e:a4:e2:47:a3:7d:94:74:58:d3:3e:
68:b6:d1:44:11:97:e4:13:f2:f4:bb:21:54:40:e0:d2:03:c9:
e9:2e:ac:45:93:a0:e1:f0:f6:ce:1a:00:8a:d6:92:91:9d:13:
6a:4d:97:e3:cc:3e:a7:1d:6d:48:dc:58:f0:86:b3:80:94:59:
95:48:f9:62:5b:85:d3:ba:41:1e:e9:bf:14:3a:3a:3e:22:be:
f0:70:35:ed:27:79:9f:29:e7:69:ee:cb:07:44:ce:d4:7f:dc:
4b:32:d3:56:55:7d:b3:93:97:18:85:57:d5:64:16:b6:59:a3:
a6:49:8a:e2:0a:c9:b4:21:7b:3b:ed:6c:e2:ed:b8:c5:34:4a:
23:c7:ef:f4:0e:9b:f4:f2:89:9c:76:96:9e:21:02:b5:1a:06:
09:5a:f9:c7:96:78:61:fe:fe:02:63:c4:12:31:c5:44:dc:39:
0b:93:8c:7b:ec:59:a3:b5:a6:ed:2a:07:8b:99:68:02:bf:5c:
af:64:d2:ec:62:1b:44:e8:0e:14:29:8e:e9:8c:b1:35:ca:22:
a0:d5:2d:34:40:1d:c1:9e:70:9c:ea:51:00:cf:a9:b1:54:77:
1e:c4:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:23 2024 by rpki-client on console-fra.rpki-client.org