Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/Gk0NfX_kRGS3yCsbVA9bnRpbbIc.roa
File: Gk0NfX_kRGS3yCsbVA9bnRpbbIc.roa (raw, json)
Hash identifier: QJQlnu1X0lDMNx3PiFQAoeBxnYYg/11WYeZNkqCiYNw=
Subject key identifier: 1A:4D:0D:7D:7F:E4:44:64:B7:C8:2B:1B:54:0F:5B:9D:1A:5B:6C:87
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 01856FD503D9ED121489F3234932BD8F8BCF
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/Gk0NfX_kRGS3yCsbVA9bnRpbbIc.roa
Signing time: Mon 02 Jan 2023 00:15:09 +0000
ROA not before: Mon 02 Jan 2023 00:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197138
IP address blocks: 91.188.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:03:d9:ed:12:14:89:f3:23:49:32:bd:8f:8b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Jan 2 00:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a4d0d7d7fe44464b7c82b1b540f5b9d1a5b6c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0e:2f:88:ef:cc:70:01:eb:3f:94:fa:2b:04:
d3:32:d4:bc:44:ec:f6:c2:da:2c:f3:0f:54:07:d5:
14:d3:39:00:09:0b:a5:20:38:09:04:4e:ad:b3:d2:
42:ff:1d:0c:5d:17:7c:96:5d:1e:da:19:e6:4b:fa:
88:48:89:a5:3a:11:e2:4b:fe:5d:10:4c:78:5f:8c:
c2:29:03:92:4e:14:8b:66:59:22:7e:3c:18:e9:c2:
13:e8:86:1b:2f:16:63:2c:bd:c8:b4:c2:b9:3e:12:
be:29:5d:78:11:5d:18:59:96:bf:e3:8e:99:65:2b:
af:c8:25:c3:01:58:3b:41:88:9f:35:12:82:0d:fe:
f5:a9:fd:71:7c:ca:48:90:31:85:1d:ad:92:42:20:
75:85:9d:bb:fe:f1:bc:48:19:83:a8:9e:73:cf:2d:
00:98:4a:5f:c2:1e:87:ba:2b:fc:b2:0e:f2:33:c9:
63:ed:79:ac:99:ef:ac:4b:96:c0:89:95:86:91:30:
2e:45:5f:89:63:83:38:a1:ea:da:59:cd:eb:89:cd:
2e:ba:d0:13:46:35:8f:e8:c1:02:11:ef:7b:26:61:
f7:61:4d:74:aa:5c:d8:29:2e:6d:9c:6a:b5:77:f0:
a0:f9:32:4c:ff:84:b3:c8:d6:2c:9f:dc:e5:b7:b9:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:0D:7D:7F:E4:44:64:B7:C8:2B:1B:54:0F:5B:9D:1A:5B:6C:87
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/Gk0NfX_kRGS3yCsbVA9bnRpbbIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a1:ce:64:0c:eb:71:74:03:16:b8:bb:c2:ce:87:13:db:8d:
de:00:89:ae:14:62:6b:99:b2:ae:45:c7:94:85:a6:4d:a8:33:
77:72:da:6c:87:2b:0c:3d:92:43:2c:3b:3d:19:77:b3:e9:85:
77:fc:28:42:a0:7f:3c:e9:45:f6:6c:8b:54:eb:da:08:68:fa:
18:ef:6d:e0:c8:bb:75:51:0f:6f:1e:58:c2:36:0a:6b:9e:a6:
b9:5f:21:d2:46:80:70:1b:26:a0:dd:21:27:2e:07:96:af:b2:
4e:58:3c:85:5d:c8:53:bc:18:8e:67:e3:6f:40:5c:91:01:bf:
a4:86:ce:a3:b1:cb:eb:0c:19:28:e3:4e:ec:97:39:0e:03:58:
f9:2c:d8:0c:d7:d8:4a:69:9d:61:9b:1e:ca:e0:52:70:8e:62:
0e:c9:d5:48:ef:55:ad:9f:07:ed:e5:7e:d4:3b:8b:b8:1c:90:
3e:92:c5:09:2a:77:1c:de:24:d5:92:22:21:73:8e:4f:f5:66:
52:df:3c:b9:43:fc:e9:5c:9a:25:7b:77:fb:13:52:e6:b9:e9:
65:6f:42:72:f2:99:58:f2:92:fb:d0:c8:c0:81:04:b6:39:fb:
6d:1a:f1:cf:26:e0:da:0b:f4:46:18:1e:00:16:bf:d4:56:25:
ef:29:59:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org