Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/G-Ve4cgwqnXQQo73_2S2C7I5Ogc.roa
File: G-Ve4cgwqnXQQo73_2S2C7I5Ogc.roa (raw, json)
Hash identifier: OBiEmWhvTt1Rr2egy84ysvhBWz2Gudh6sLjDHaNXOCM=
Subject key identifier: 1B:E5:5E:E1:C8:30:AA:75:D0:42:8E:F7:FF:64:B6:0B:B2:39:3A:07
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018B793E1D9F9C1D883FB3D8E4B40F916D59
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/G-Ve4cgwqnXQQo73_2S2C7I5Ogc.roa
Signing time: Sun 29 Oct 2023 02:23:15 +0000
ROA not before: Sun 29 Oct 2023 02:23:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328867
IP address blocks: 85.92.112.0/24 maxlen: 24
45.158.254.0/24 maxlen: 24
185.243.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Oct 2023 13:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:79:3e:1d:9f:9c:1d:88:3f:b3:d8:e4:b4:0f:91:6d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 29 02:23:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1be55ee1c830aa75d0428ef7ff64b60bb2393a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:16:4f:d3:cb:68:33:e0:02:fc:3d:ed:87:
07:c9:1c:0d:eb:42:02:7e:92:d4:0a:c7:30:b8:8e:
2b:89:f2:71:41:b6:97:15:c1:8b:78:f4:42:af:c9:
e6:4e:e2:3c:db:45:1f:ee:82:79:4c:22:84:66:56:
36:cb:71:12:e7:e7:ca:b1:72:bf:3d:bb:91:4f:aa:
5b:ab:b5:90:02:ff:3a:a2:d0:e8:fb:f0:cc:4f:e9:
1e:f9:88:d0:b3:79:30:f3:c1:10:6d:a2:bb:2e:8d:
d1:07:e5:79:44:34:0a:1b:e1:c0:fa:9d:5e:5f:88:
8b:99:31:a5:15:17:f3:07:8f:0d:da:d6:5f:77:4b:
75:3e:fc:ab:57:90:e0:b4:94:19:17:f2:ff:67:0e:
78:ef:65:05:6d:ba:38:9a:8c:67:a0:ac:12:2e:6c:
15:71:23:ac:c2:24:fe:38:c6:f6:19:94:b4:19:46:
9f:88:42:43:fc:d2:be:de:3a:10:da:e6:5f:c9:d2:
87:dd:b3:4b:12:0a:26:60:5d:5a:52:e4:3f:e5:97:
65:4a:85:ff:8b:dc:92:34:22:02:38:b3:61:49:bd:
8e:dc:5c:b1:43:52:2a:43:59:3a:ef:0e:ad:fa:bc:
26:d2:f5:2e:34:83:c7:9b:e3:bb:14:45:61:13:c0:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E5:5E:E1:C8:30:AA:75:D0:42:8E:F7:FF:64:B6:0B:B2:39:3A:07
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/G-Ve4cgwqnXQQo73_2S2C7I5Ogc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.254.0/24
85.92.112.0/24
185.243.7.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bc:d8:8a:a2:33:69:c0:5e:67:af:95:0d:15:6a:a3:40:6b:
61:06:ae:6b:a9:91:c1:9b:81:93:96:8a:4b:5b:10:cc:ae:a8:
70:77:0c:17:15:f9:91:cb:e6:42:53:94:83:0e:a9:d1:a9:c6:
3e:0e:aa:da:f6:f2:0b:9c:3f:77:03:e2:ab:cd:6e:d3:24:b6:
4c:db:50:ce:4f:83:28:55:61:ff:f0:bc:b7:07:10:58:c1:eb:
b0:9b:ae:d7:63:24:f4:ac:2d:94:da:2c:cc:45:c5:d6:52:c8:
2c:cc:3b:24:52:d6:f0:ca:66:4a:52:07:5f:75:4b:1a:e5:1a:
00:32:a8:3b:f5:5d:9c:71:21:bd:72:59:8a:62:c8:c9:86:2b:
05:c5:48:75:13:f9:9c:eb:c7:ff:7f:9b:ab:d5:a7:0c:a1:c7:
77:6c:b6:57:cc:73:57:18:c4:fa:be:30:2d:21:62:c3:83:6c:
0b:62:86:20:a3:76:1b:c0:dc:88:5e:54:8b:b9:50:60:09:ce:
bb:9a:30:b6:c1:13:cc:11:23:92:03:05:5e:eb:44:e0:07:ae:
c3:ab:68:c0:0a:ca:42:48:fa:42:a2:27:16:ce:e5:e1:95:2c:
e7:c8:f6:bc:e1:ba:10:d3:4b:97:24:29:0b:f9:06:aa:b7:7f:
b4:60:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org