Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dg3-lw6cXYrnoYk5HoOXLW0-AJ8.roa
File: dg3-lw6cXYrnoYk5HoOXLW0-AJ8.roa (raw, json)
Hash identifier: 59CtsvXcSO+QAo+Bfj+kmXOsB0kSULrd/bAYpDeuuPI=
Subject key identifier: 76:0D:FE:97:0E:9C:5D:8A:E7:A1:89:39:1E:83:97:2D:6D:3E:00:9F
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018964CB4D3908CA23C8BC488FC0186F15C2
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dg3-lw6cXYrnoYk5HoOXLW0-AJ8.roa
Signing time: Mon 17 Jul 2023 16:59:52 +0000
ROA not before: Mon 17 Jul 2023 16:59:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.119.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:cb:4d:39:08:ca:23:c8:bc:48:8f:c0:18:6f:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 17 16:59:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=760dfe970e9c5d8ae7a189391e83972d6d3e009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:03:5e:97:79:08:48:c3:31:16:af:e4:d2:
6e:21:ee:b9:1a:4b:de:12:af:51:b0:fb:11:1e:73:
ae:d1:70:f9:13:56:3e:1e:d8:b2:81:8e:1a:79:4a:
98:50:f8:7e:c2:cc:f8:81:df:ef:98:fc:1a:09:2e:
ad:e1:1a:c6:9e:66:5e:ec:60:bc:3f:ce:87:2a:1f:
4a:b1:4c:1c:1e:df:bc:f3:3a:45:eb:02:a9:fe:23:
90:f0:ff:d5:b3:24:ea:bc:d8:ef:33:6a:9e:28:47:
f9:ca:b7:82:f8:fe:f8:18:33:a7:c6:d0:88:8c:e2:
09:34:3e:f7:06:df:8f:c6:5e:6a:92:8a:7f:f8:c5:
7c:be:0a:77:d4:08:3f:da:b4:38:c2:eb:1f:b2:92:
65:d2:25:c5:27:d6:43:14:f2:67:8a:0f:32:aa:e0:
01:b0:00:9c:da:55:bf:bd:58:2c:3d:54:f6:97:fa:
98:0c:fa:29:1a:d4:6a:47:09:58:64:db:a6:b1:6b:
65:5f:4d:c2:d9:8c:27:dc:36:08:26:50:86:a0:48:
35:75:2e:9c:72:36:39:bd:2e:23:3e:a8:b0:c6:52:
fd:de:ee:bb:cb:79:19:45:8c:2b:53:77:e9:4a:8a:
ba:4f:1e:6a:78:69:32:d5:60:11:5a:d1:ff:ac:7b:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0D:FE:97:0E:9C:5D:8A:E7:A1:89:39:1E:83:97:2D:6D:3E:00:9F
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dg3-lw6cXYrnoYk5HoOXLW0-AJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.119.0/24
91.147.123.0/24
91.147.126.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:eb:5e:ee:06:f9:3b:39:33:b2:5e:9f:e1:a2:5f:4f:8c:b0:
7d:b2:7e:22:dd:24:7b:3a:e9:ca:2e:a0:a3:a4:63:c2:af:8f:
1e:3b:13:e3:60:aa:f9:7e:8b:8c:3a:12:72:5a:1c:c3:c8:86:
db:c7:38:0d:8f:36:cf:68:1f:07:9b:bb:ac:d6:80:80:32:b0:
7b:92:9c:7e:ec:aa:25:31:50:d7:21:75:96:ee:c1:dc:ac:46:
62:9e:86:fc:d5:27:91:a0:a8:0b:0e:ac:e7:5e:02:46:85:87:
6a:fa:c7:cb:b6:3a:99:a1:6e:7e:3c:5a:1e:a7:ed:fd:c1:4d:
9b:be:c6:7c:62:cf:0b:6f:ef:16:28:e1:ef:38:30:3d:08:98:
7d:13:4c:d9:a2:e4:6b:1c:d2:52:f9:90:91:5a:d2:d7:a2:69:
e3:6e:e9:b6:28:e1:22:ca:6a:81:52:58:55:69:52:e2:a7:8f:
79:14:9e:62:bf:53:5c:0d:a5:aa:fd:d4:90:9c:30:ae:ba:5c:
99:b2:a4:80:26:5c:0e:12:47:fe:f4:b3:8a:7a:50:e7:71:71:
f2:d0:3d:c4:3f:0f:50:17:b4:35:be:2e:54:3c:52:12:fa:8c:
ad:9b:35:a6:ea:00:b0:db:8a:1e:04:6a:76:db:04:15:e6:df:
d3:5e:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:22 2024 by rpki-client on console-ams.rpki-client.org