Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/gn-Ak1sXCVhHN6YkMTh042pitBM.roa
File: gn-Ak1sXCVhHN6YkMTh042pitBM.roa (raw, json)
Hash identifier: QwERROqw64WzmNMyfbkpcX7rHJ/++3oD/L7po2eHdb8=
Subject key identifier: 82:7F:80:93:5B:17:09:58:47:37:A6:24:31:38:74:E3:6A:62:B4:13
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018C10E439E435F9AAAF2B5233D280D897E4
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/gn-Ak1sXCVhHN6YkMTh042pitBM.roa
Signing time: Mon 27 Nov 2023 13:07:21 +0000
ROA not before: Mon 27 Nov 2023 13:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 176.116.11.0/24 maxlen: 24
62.3.60.0/24 maxlen: 24
62.233.52.0/24 maxlen: 24
212.18.124.0/24 maxlen: 24
194.104.239.0/24 maxlen: 24
45.139.228.0/24 maxlen: 24
45.139.230.0/24 maxlen: 24
45.131.228.0/22 maxlen: 24
146.19.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:e4:39:e4:35:f9:aa:af:2b:52:33:d2:80:d8:97:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Nov 27 13:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=827f80935b1709584737a624313874e36a62b413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:e3:56:79:8d:84:cf:65:ed:de:38:23:bb:
4b:fc:50:e8:be:9b:6d:35:40:f2:b4:ca:62:c0:60:
91:d3:9c:f0:14:53:cd:c3:c6:e9:bf:9f:c8:87:5c:
d2:a1:94:38:ee:56:e7:7a:c0:47:94:4e:a6:a5:3e:
a0:7a:38:64:3c:84:8d:e8:8f:09:09:f4:93:aa:ca:
56:b5:9e:4e:e4:5b:c9:58:69:95:7e:45:aa:c1:ca:
32:bd:d4:c4:b2:b5:21:b4:a8:e9:d0:1f:d2:76:16:
5f:83:df:c7:cb:ed:93:03:3c:98:e0:3c:a6:9c:85:
a1:9e:e6:68:16:76:a6:d6:d3:8b:c0:6b:5a:7e:6b:
e8:9e:cc:1d:ff:41:42:34:0f:73:3d:51:12:9f:4a:
c9:c0:1f:78:d4:92:0e:b6:c1:21:20:ac:42:5f:31:
3a:a9:be:0d:08:81:fd:67:20:f1:98:0a:82:eb:c1:
b6:d9:17:14:0f:22:cd:03:f0:4a:47:18:ae:9e:8d:
0f:c2:a1:ad:ad:bf:ab:5f:04:2f:23:44:e3:66:8e:
b6:27:f0:34:5c:fe:7f:38:ad:53:bc:bc:83:60:c1:
73:0b:c7:f5:53:ac:61:15:7f:15:96:1c:6b:a0:05:
c8:39:94:c2:eb:08:59:ff:8c:b2:d2:15:7b:a5:7d:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7F:80:93:5B:17:09:58:47:37:A6:24:31:38:74:E3:6A:62:B4:13
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/gn-Ak1sXCVhHN6YkMTh042pitBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.228.0/22
45.139.228.0/24
45.139.230.0/24
62.3.60.0/24
62.233.52.0/24
146.19.123.0/24
176.116.11.0/24
194.104.239.0/24
212.18.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:c0:bb:9a:01:05:aa:f2:1c:ed:b8:ed:e6:e0:1f:bf:a6:51:
e5:15:93:5c:ae:51:3c:e5:27:e6:9a:55:20:e9:35:f6:09:96:
9f:bd:e1:db:e4:77:a1:48:e8:46:a8:d3:d7:78:8b:91:6f:99:
91:f7:5c:84:76:bc:cb:db:af:fd:36:58:4c:94:84:1d:a6:ff:
3f:9c:00:48:19:26:06:b5:2a:0d:85:bf:78:a7:95:bb:ca:b1:
44:30:a6:4a:ff:20:76:5e:02:9b:03:ca:30:ce:66:df:ff:05:
65:8b:9b:9f:da:76:dc:e1:bb:33:6d:b2:18:9b:a9:cf:c6:a7:
d7:d9:03:3c:59:67:37:47:92:b6:06:8a:51:84:b8:81:96:4c:
3f:20:50:53:ef:79:50:75:e1:6f:0a:0a:b5:eb:8f:44:e8:30:
c6:c1:93:f8:84:82:43:b4:51:62:1b:8f:12:4a:09:da:fb:8f:
11:61:f5:cd:0a:41:63:22:f8:69:45:bd:f1:55:16:92:0a:37:
06:c3:55:cf:ac:42:8c:e4:37:c2:92:0a:7b:be:0a:74:3d:84:
8b:9f:b1:44:5d:34:d7:bf:59:1f:1f:c3:bb:ac:07:a8:11:a9:
8e:07:41:8a:6b:4a:b2:89:27:fc:7c:b5:54:e2:64:57:e8:68:
39:29:34:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:29 2024 by rpki-client on console-fra.rpki-client.org