Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/gBGgDrwi6dKwDE_PIrdzgsEPlF4.roa
File: gBGgDrwi6dKwDE_PIrdzgsEPlF4.roa (raw, json)
Hash identifier: zxbD7YwaprRGJSkHNYKpjv9yMz1RXibi4WadXi9cbr4=
Subject key identifier: 80:11:A0:0E:BC:22:E9:D2:B0:0C:4F:CF:22:B7:73:82:C1:0F:94:5E
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 01861C46D4BA48A645345E822CBE10BC45B6
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/gBGgDrwi6dKwDE_PIrdzgsEPlF4.roa
Signing time: Sat 04 Feb 2023 11:54:09 +0000
ROA not before: Sat 04 Feb 2023 11:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40964
IP address blocks: 89.107.132.0/23 maxlen: 23
89.107.130.0/23 maxlen: 23
89.107.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 05 Feb 2023 21:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:46:d4:ba:48:a6:45:34:5e:82:2c:be:10:bc:45:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Feb 4 11:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8011a00ebc22e9d2b00c4fcf22b77382c10f945e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:74:5f:ec:05:34:35:a7:10:fe:76:04:a9:
a8:6e:eb:69:29:95:d0:70:dd:b7:f7:8d:91:32:fb:
7b:d0:39:3e:ba:4b:78:d8:1c:0a:f8:5f:f6:fc:d8:
2f:2f:97:03:c4:9e:a9:a3:cf:90:c2:bb:27:ce:86:
39:78:b5:8e:97:5f:03:f2:3a:82:83:f6:e3:18:e8:
fe:73:a2:e0:8e:0c:3c:69:cc:5c:2d:44:18:42:5c:
63:29:53:b6:1b:bc:9c:6a:a4:ab:d9:2e:06:f6:80:
bc:e8:2d:96:99:55:65:e4:63:e4:3b:f2:53:81:2b:
89:18:e4:f3:f6:e9:6d:2e:52:b2:54:e0:e8:82:6b:
40:6c:cf:3e:a1:03:19:3a:d5:b9:8d:15:92:e2:6b:
de:2a:ea:1f:ca:1f:3f:61:be:fc:b6:a1:49:93:fc:
5c:d1:25:c5:d5:a5:ab:46:29:97:47:df:86:f4:c2:
12:42:ce:77:41:bc:84:8f:4c:d5:c6:22:f8:14:98:
ba:d5:d2:d1:af:44:07:ff:d0:4d:e3:ce:c9:7a:dc:
eb:5a:37:13:63:55:db:38:70:bd:1f:18:b3:a4:f1:
67:c2:7a:6b:18:68:67:19:ac:6e:6f:70:d4:64:ef:
22:61:22:c8:5a:91:c1:d9:3a:f1:fd:2f:29:e1:23:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:11:A0:0E:BC:22:E9:D2:B0:0C:4F:CF:22:B7:73:82:C1:0F:94:5E
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/gBGgDrwi6dKwDE_PIrdzgsEPlF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.130.0-89.107.135.255
Signature Algorithm: sha256WithRSAEncryption
5e:79:47:86:3e:74:c3:25:c0:b7:06:d2:12:59:c7:91:2e:b0:
e5:e2:9d:3b:00:1d:02:5b:52:f5:ce:49:4a:e8:f7:45:9a:39:
94:52:1a:0a:56:9f:fd:4a:01:4e:d8:87:7e:7f:a6:31:fa:c9:
7c:c3:41:06:f4:00:ac:bf:84:df:40:7e:4e:25:4c:31:ba:f5:
b9:ac:49:eb:35:08:4c:b1:0d:23:44:ad:cb:35:a8:e7:6a:a2:
5f:67:31:9f:14:3c:60:c0:12:85:0b:b0:aa:36:4a:56:d9:fd:
d1:7a:26:93:ff:a9:7d:db:ba:b2:95:ad:43:0c:7b:52:8d:48:
07:a4:67:cc:d4:99:47:08:d6:53:16:3c:81:49:b9:38:96:b1:
fb:b7:d8:05:e4:dd:a6:c1:3a:e2:47:9b:fa:0b:79:19:a1:20:
b4:38:4d:b7:2e:d9:18:b0:f6:3d:a9:64:e6:e3:dc:a5:0c:d3:
48:4f:04:27:ec:e8:f6:2c:ca:f3:5a:28:0f:8b:4d:12:0a:ac:
39:e7:fb:b2:3e:52:7f:40:0c:ea:7c:1c:f8:fd:7a:50:ec:1a:
ac:c4:76:c2:01:76:af:9b:a5:42:14:5c:40:be:3a:3c:10:05:
22:9a:c3:4e:ae:0b:83:bc:3c:b2:81:95:64:63:d0:8e:75:ab:
6e:56:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:18 2024 by rpki-client on console-ams.rpki-client.org