Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/gmujhOb1ZRKR5Y3ubZE2M3WnJdc.roa
File: gmujhOb1ZRKR5Y3ubZE2M3WnJdc.roa (raw, json)
Hash identifier: C2E2YSXQdE4DrCCoIT+kVAhccjQGh+SDqj7aNKQvLZE=
Subject key identifier: 82:6B:A3:84:E6:F5:65:12:91:E5:8D:EE:6D:91:36:33:75:A7:25:D7
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 0187EB6626F8D64D884FC89B7A7764EEAA35
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/gmujhOb1ZRKR5Y3ubZE2M3WnJdc.roa
Signing time: Fri 05 May 2023 10:12:33 +0000
ROA not before: Fri 05 May 2023 10:12:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 80.79.112.0/20 maxlen: 24
185.246.184.0/22 maxlen: 24
46.22.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 08:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:66:26:f8:d6:4d:88:4f:c8:9b:7a:77:64:ee:aa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: May 5 10:12:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=826ba384e6f5651291e58dee6d91363375a725d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:d8:47:1e:89:43:6e:60:18:b0:da:91:17:
9f:97:c2:04:65:af:54:4f:cd:c0:fc:32:fe:e6:ef:
13:44:95:01:89:66:3a:b4:c0:be:27:f3:ae:11:67:
48:50:24:c4:d5:d5:a9:5a:17:cb:3e:a9:ef:68:ca:
15:f0:31:b1:e2:ed:ec:2e:e9:c0:f7:4a:47:0f:63:
76:75:77:42:a6:cf:c7:39:82:16:54:99:d8:a7:3f:
0b:2f:a5:83:ff:35:ed:65:51:63:71:74:62:95:10:
12:3c:a4:28:f1:b5:2a:0b:fd:bb:d5:da:44:18:28:
69:0d:ac:f9:4f:df:03:e1:04:49:20:a5:66:e6:05:
32:fc:59:d7:93:1e:d4:8b:ce:d0:61:f5:2b:f1:07:
ee:a2:9f:b4:b5:06:68:f2:dc:ec:9a:69:b1:37:1c:
6b:e3:ea:14:96:d8:b7:67:40:63:4c:33:8a:d2:a7:
8e:89:dd:c4:0d:0b:e1:a0:3e:06:74:69:05:03:88:
de:b1:96:76:f6:1e:32:8a:28:8a:57:43:c8:2e:ac:
30:72:33:aa:ec:41:ad:f5:4b:e9:10:81:1d:ea:ea:
e5:43:79:02:32:96:30:58:ed:9c:13:60:b0:51:1d:
a1:6d:f6:13:ba:2e:d6:f8:0d:b5:ec:8b:ba:0b:52:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:A3:84:E6:F5:65:12:91:E5:8D:EE:6D:91:36:33:75:A7:25:D7
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/gmujhOb1ZRKR5Y3ubZE2M3WnJdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.208.0/20
80.79.112.0/20
185.246.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:ad:0d:8e:b1:6f:7d:f5:48:29:e9:be:8f:5b:0b:5b:ba:7c:
67:eb:a0:ba:0d:41:fa:8b:3d:e9:da:e9:ce:40:a2:de:8e:c8:
1d:0d:f8:06:9c:1e:4f:3a:69:9e:93:28:5e:d3:97:ca:2c:df:
ef:a5:4d:16:88:3d:6f:c6:e4:0c:1c:6e:3a:cb:bc:30:dd:89:
93:97:e2:55:ec:fb:c1:46:ce:43:af:56:e6:39:74:3d:e9:db:
09:0e:c3:fa:35:60:6c:cd:9e:2e:6b:52:18:7b:8a:36:52:79:
3e:95:12:a3:44:7f:38:fd:fe:63:4f:89:fc:b0:d4:3a:df:bc:
ea:76:3a:a6:4c:8e:8c:63:8a:db:d3:50:90:1d:dc:31:1d:bb:
e5:26:3a:22:a6:7f:b1:20:3e:9a:ea:53:10:8e:67:e3:d5:cb:
da:6f:4b:87:fb:14:3e:ed:ef:1e:98:95:35:0c:f3:d9:0a:59:
12:88:2d:fc:19:3e:2d:c0:a3:3c:2f:19:b6:1b:11:5a:8c:43:
c5:36:21:ce:33:3d:83:ee:0d:8e:02:5c:b2:8d:cb:70:be:3b:
da:1e:b8:ed:c8:39:78:75:f2:97:ae:45:0f:84:0b:5a:95:da:
e2:c8:b7:7e:4f:8e:e6:d4:f4:28:22:dc:b3:30:41:f5:e0:55:
60:26:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org