Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GXRd6Bc750Gi8ihRFqMIVebedsc.roa
File: GXRd6Bc750Gi8ihRFqMIVebedsc.roa (raw, json)
Hash identifier: q3zrHlJMQqyV5rHH5tYmoXXco3Qp21GjLmKJ4Q+gRTQ=
Subject key identifier: 19:74:5D:E8:17:3B:E7:41:A2:F2:28:51:16:A3:08:55:E6:DE:76:C7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018824E5C55DECD54C34B214D3C02FB11D7E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GXRd6Bc750Gi8ihRFqMIVebedsc.roa
Signing time: Tue 16 May 2023 14:10:18 +0000
ROA not before: Tue 16 May 2023 14:10:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58347
IP address blocks: 95.46.159.0/24 maxlen: 24
95.47.234.0/23 maxlen: 24
93.170.5.0/24 maxlen: 24
31.148.248.0/23 maxlen: 24
95.47.243.0/24 maxlen: 24
95.47.36.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:e5:c5:5d:ec:d5:4c:34:b2:14:d3:c0:2f:b1:1d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 16 14:10:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19745de8173be741a2f2285116a30855e6de76c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:fc:33:b2:12:6a:34:35:2f:f7:b9:1c:a1:
bf:9b:5f:32:f9:5e:67:64:5c:0b:62:51:b0:a7:fd:
16:23:05:69:ff:45:6f:aa:73:20:ca:75:51:f4:fb:
56:cf:58:74:2e:01:d2:83:d9:ff:a1:65:d5:94:44:
bf:fb:b5:79:64:c1:0e:5a:a2:bb:41:a0:2e:4d:4a:
22:56:ac:02:cf:5e:3c:44:b9:c6:be:c3:47:1e:f6:
6d:bc:1d:98:d5:60:79:bc:b2:93:9c:08:0b:24:fc:
58:3c:d6:62:00:34:fc:7b:36:64:0f:35:56:c1:69:
14:12:42:46:da:d4:1e:8d:58:b4:e3:73:7f:03:e5:
92:eb:8e:c3:2d:22:03:aa:01:9c:97:84:68:46:50:
d6:18:c6:d3:a4:50:91:ea:70:b7:66:47:c0:7d:f2:
51:dd:cd:15:77:34:82:0e:52:a3:f9:2b:25:5e:04:
11:0d:69:21:a8:a1:dc:cc:bc:1e:e6:0e:65:41:81:
07:62:72:09:17:89:4f:df:33:f3:c0:2e:79:96:b8:
f3:b4:46:3c:de:0a:2d:7d:c9:0c:e6:44:e0:d0:92:
98:d4:9b:46:4b:c1:3b:43:53:7e:55:26:33:66:17:
2b:34:0a:4c:e4:30:12:05:96:b5:bf:01:fa:ba:73:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:74:5D:E8:17:3B:E7:41:A2:F2:28:51:16:A3:08:55:E6:DE:76:C7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GXRd6Bc750Gi8ihRFqMIVebedsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.248.0/23
93.170.5.0/24
95.46.159.0/24
95.47.36.0/22
95.47.234.0/23
95.47.243.0/24
Signature Algorithm: sha256WithRSAEncryption
91:21:e7:e8:d2:c8:1c:4f:aa:a0:e7:73:aa:82:a9:9a:96:da:
11:e9:b4:34:2a:13:d3:c4:12:29:31:a4:04:f7:5f:b1:9c:09:
d1:61:d8:eb:13:41:f8:b5:5b:8b:bd:10:04:3c:f9:da:42:81:
7e:5b:33:57:3a:ac:58:4d:4c:93:bd:0f:8e:e5:77:98:5c:8d:
8d:8e:67:b7:3b:2e:8e:61:6a:98:72:78:73:2d:a8:76:45:7c:
0a:f3:cc:47:fa:02:2b:b5:61:8a:bf:3d:87:c9:07:b4:2d:27:
bc:09:02:3a:c8:f0:a1:17:b9:1e:2c:05:9a:94:49:80:af:54:
b7:cd:f8:b3:f3:06:db:6e:bd:02:3c:13:20:37:31:a2:15:6e:
57:01:e7:d0:cd:0a:a4:b2:5b:57:89:46:a5:1c:18:d4:09:48:
c4:57:73:c5:ea:55:02:d0:ef:f8:79:d0:c6:25:cd:7e:27:c8:
b1:48:3f:b8:57:8b:7d:37:d3:cd:7b:58:b3:2e:c5:96:58:d0:
ae:82:77:5a:55:ac:61:77:03:39:0c:c7:31:69:b2:62:63:43:
8b:01:07:c5:d3:d2:e7:2a:91:63:de:cb:c7:3a:4b:d9:63:35:
c5:d4:aa:f3:04:9e:af:d1:9f:b2:06:e3:cc:03:e4:51:34:78:
b6:80:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:00 2024 by rpki-client on console-ams.rpki-client.org