Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/gVvAcPC-8LNSQz4ezo3_cRnpuh0.roa
File: gVvAcPC-8LNSQz4ezo3_cRnpuh0.roa (raw, json)
Hash identifier: 3QzZmflUeEfc067Zyhs7NwNRKCTEKkiwUmwXsLJWmYA=
Subject key identifier: 81:5B:C0:70:F0:BE:F0:B3:52:43:3E:1E:CE:8D:FF:71:19:E9:BA:1D
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0192955C1117A6BF3A35C1F766E7D47623F0
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/gVvAcPC-8LNSQz4ezo3_cRnpuh0.roa
Signing time: Wed 16 Oct 2024 12:44:51 +0000
ROA not before: Wed 16 Oct 2024 12:44:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 138.124.3.0/24 maxlen: 24
138.124.4.0/24 maxlen: 24
138.124.10.0/24 maxlen: 24
138.124.15.0/24 maxlen: 24
138.124.30.0/24 maxlen: 24
138.124.31.0/24 maxlen: 24
138.124.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 11:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:5c:11:17:a6:bf:3a:35:c1:f7:66:e7:d4:76:23:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Oct 16 12:44:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=815bc070f0bef0b352433e1ece8dff7119e9ba1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:2c:b3:e6:c8:cb:0c:32:f6:9b:8e:a0:2e:
fb:8c:ae:3c:a8:66:59:f7:89:9e:37:e0:fc:f9:e9:
bb:e6:ad:da:0e:2e:b2:58:bd:7d:4e:57:4d:85:4a:
c8:d0:3a:24:5f:22:20:5d:d1:79:a2:f2:e5:b5:ad:
90:79:2b:ab:20:27:39:e6:3d:9a:03:5e:9c:bd:9a:
b5:39:08:ff:22:b1:05:82:4e:86:42:2b:19:9a:ee:
ab:a5:3a:72:e8:29:94:a5:b3:08:2e:5d:71:5d:c7:
89:5b:09:ef:00:bc:e3:b3:1a:e5:04:b8:0d:b7:09:
3a:0e:bc:25:d1:52:42:87:a8:dd:7f:e8:a4:de:a2:
80:75:74:2d:c7:d5:f6:7a:95:23:9e:9c:f4:40:27:
e1:28:a7:73:80:df:8b:fb:ab:cd:c5:a8:9c:22:07:
07:8b:6b:b6:41:44:0b:4f:e8:6d:bf:30:f4:e9:04:
e4:2e:7f:94:2c:a8:20:57:92:fb:93:b6:70:3e:cd:
f4:31:2d:84:db:1f:89:95:ae:2f:5c:f3:09:31:aa:
c6:ce:8f:18:d5:f4:46:8d:2f:91:41:76:7d:18:54:
80:a0:08:cc:1d:8c:ed:4b:56:83:6c:85:f0:76:36:
59:b4:8d:56:f9:b7:6e:c5:93:13:c9:2a:96:8e:53:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:C0:70:F0:BE:F0:B3:52:43:3E:1E:CE:8D:FF:71:19:E9:BA:1D
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/gVvAcPC-8LNSQz4ezo3_cRnpuh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.3.0-138.124.4.255
138.124.10.0/24
138.124.15.0/24
138.124.30.0/23
138.124.125.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4e:36:5b:ff:54:3e:65:2d:d2:5c:6d:82:3f:d5:b6:8b:0c:
27:0a:78:98:25:79:7f:05:ae:18:91:2c:a7:30:9a:8f:76:af:
8f:67:e8:4f:cd:09:d6:df:0d:66:b7:11:45:b5:42:55:b5:2f:
dc:a1:2f:92:ef:70:e4:9d:74:b4:9f:29:f3:a4:35:b1:3a:03:
07:b8:e3:29:dd:2c:97:58:af:d0:03:a1:0e:ca:d3:19:c5:1b:
00:62:30:24:58:8d:4b:b3:95:dc:25:c4:e3:5d:cc:e0:4d:f6:
8a:7e:54:49:ac:40:08:cd:24:ea:b6:0b:50:39:d6:e7:bc:4d:
5b:62:90:8f:a9:ca:dc:35:aa:6a:2f:53:02:38:c9:df:7b:d7:
eb:41:e4:9c:c5:ec:62:2d:df:45:c3:ef:60:34:38:9e:39:b9:
fc:cc:cd:6d:3a:ad:c6:90:73:4f:4c:23:3f:6c:45:40:ee:21:
df:9f:7e:29:af:34:c8:7a:2d:40:ed:f0:c3:62:33:b1:b5:ea:
8a:c5:5e:c2:e8:c4:ae:2f:ef:ac:9d:55:a9:55:02:2f:58:96:
57:af:ed:cf:56:02:57:5f:b5:b2:0a:83:e8:0a:74:a7:a5:ce:
5f:a4:c9:46:b1:67:b2:c5:ed:c2:e9:07:bc:f7:32:45:1b:36:
f9:0d:48:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:33:53 2024 by rpki-client on console-ams.rpki-client.org