Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/gPZSFV8rbWkyr6aDPr2CfuGgmBc.roa
File: gPZSFV8rbWkyr6aDPr2CfuGgmBc.roa (raw, json)
Hash identifier: 4WdvozpCvtshnV1mHrVGrDXYjHGDSzfOrVQ0WSzm9EU=
Subject key identifier: 80:F6:52:15:5F:2B:6D:69:32:AF:A6:83:3E:BD:82:7E:E1:A0:98:17
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018D4527C952E695ECFF7F8AE5062D76BE1C
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/gPZSFV8rbWkyr6aDPr2CfuGgmBc.roa
Signing time: Fri 26 Jan 2024 09:44:11 +0000
ROA not before: Fri 26 Jan 2024 09:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198602
IP address blocks: 213.135.92.0/24 maxlen: 24
213.135.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 26 Feb 2024 14:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:27:c9:52:e6:95:ec:ff:7f:8a:e5:06:2d:76:be:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 26 09:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80f652155f2b6d6932afa6833ebd827ee1a09817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:51:55:cf:22:06:ee:13:51:b2:f1:87:a9:
cd:90:ad:d4:4a:22:88:fb:62:9a:91:5a:69:52:48:
a8:3c:00:dc:f6:08:29:6a:0c:ce:a0:a0:1c:2e:b3:
8d:d6:b2:3c:60:52:0e:b4:4a:e7:c4:86:6f:96:e9:
90:0c:24:00:f1:8e:ac:e5:b8:61:c3:f1:2b:1e:ff:
9e:cb:14:72:58:59:ff:ce:94:4a:bf:b1:48:34:51:
3e:3c:35:c2:89:83:80:60:cb:54:1d:d9:98:a5:e9:
d4:35:b9:b3:2b:c5:93:53:c8:fc:bc:d7:c3:c4:6e:
3b:da:64:1a:1e:cc:a7:84:8d:3e:49:4a:7f:4d:aa:
a8:fb:e1:64:e4:30:8b:21:e9:40:c0:ca:91:80:fb:
e3:0b:54:77:c5:d9:be:39:f9:2d:15:66:03:a1:bf:
24:cf:2a:59:f1:6d:78:34:ad:2f:b0:3b:50:ab:51:
54:d7:74:c0:88:f4:58:a2:a5:d3:f0:43:37:0a:22:
a2:39:29:3c:2c:1d:b3:91:1e:30:59:34:ad:b2:a1:
ae:ea:d7:b0:4b:81:cc:60:22:a0:0c:85:87:6b:cc:
1a:a9:ee:4f:36:15:a4:46:a1:a8:50:34:27:bc:91:
e8:0d:46:4c:68:06:a0:ea:ac:15:c8:f2:8f:63:4d:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F6:52:15:5F:2B:6D:69:32:AF:A6:83:3E:BD:82:7E:E1:A0:98:17
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/gPZSFV8rbWkyr6aDPr2CfuGgmBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.92.0/24
213.135.94.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:17:8f:92:aa:d0:79:4f:5b:0b:be:2c:f6:d1:d7:42:3d:4a:
a8:df:02:34:44:8b:4f:d6:f9:0a:70:bb:e3:d7:86:3f:40:b2:
d4:91:2d:c4:d9:cf:83:21:9f:8e:d6:d3:b6:4f:5e:0b:44:0f:
a8:84:d8:83:2b:19:3d:c5:f7:8f:57:fc:26:fc:ec:d7:60:0a:
26:15:bb:29:8d:1e:88:e7:85:cc:97:b0:b1:3d:1e:8e:ac:a8:
7f:ff:c2:a6:3a:c3:f9:fd:11:5b:72:87:a1:b5:45:58:ac:be:
71:2f:73:bf:2e:01:31:c9:bf:20:38:3b:e2:68:a3:54:e9:cd:
4f:c6:9f:4f:4f:2e:ce:fd:7c:70:88:bd:59:5f:7b:f1:05:55:
d5:c4:06:41:75:56:75:ff:65:96:ff:26:67:2c:db:9d:c4:e5:
7e:3c:b1:58:4f:6f:90:71:0f:b5:59:b3:34:46:fe:bd:3c:78:
53:67:16:e7:ef:ef:b6:b3:b8:ff:b7:db:da:58:bf:a4:7a:ff:
2c:5a:c8:57:09:f0:db:52:e4:8b:29:9a:b6:86:b6:1f:f5:61:
51:e6:cd:11:58:ac:28:cd:a8:c1:60:08:f3:5b:3e:da:06:9f:
9f:b5:ce:0a:30:4a:76:f9:0e:1a:43:0a:43:ca:4e:71:d7:d0:
e2:f3:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org