Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/G2JIDl8Z4q8_vzYpo9cg6ggvis4.roa
File: G2JIDl8Z4q8_vzYpo9cg6ggvis4.roa (raw, json)
Hash identifier: dK9/0w70eiCHhxPgV2O5rc9IUkrDCV/xfuLTQgRoStI=
Subject key identifier: 1B:62:48:0E:5F:19:E2:AF:3F:BF:36:29:A3:D7:20:EA:08:2F:8A:CE
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 01856E01CD30731DCD7AB476470AAA3EB17B
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/G2JIDl8Z4q8_vzYpo9cg6ggvis4.roa
Signing time: Sun 01 Jan 2023 15:44:49 +0000
ROA not before: Sun 01 Jan 2023 15:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9153
IP address blocks: 85.116.9.0/24 maxlen: 24
46.248.96.0/19 maxlen: 19
82.136.0.0/18 maxlen: 18
82.136.4.0/23 maxlen: 23
82.136.8.0/22 maxlen: 22
195.68.206.0/24 maxlen: 24
195.22.128.0/23 maxlen: 23
82.136.48.0/22 maxlen: 22
2001:4088::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:cd:30:73:1d:cd:7a:b4:76:47:0a:aa:3e:b1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Jan 1 15:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b62480e5f19e2af3fbf3629a3d720ea082f8ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b2:c1:9b:22:cb:23:f4:7d:ce:a6:b4:75:a2:
54:67:c7:e4:b5:b8:49:0f:eb:2e:fa:d2:44:ad:b7:
16:23:59:e7:73:9c:1b:71:88:e0:86:00:f5:51:4c:
81:00:b0:f1:98:12:d2:be:89:93:92:53:61:00:26:
c2:0b:0e:1b:f2:50:da:6f:88:15:b2:df:5b:69:fd:
2f:0f:95:c5:7d:73:b2:cd:04:75:fd:f1:d8:ea:93:
ed:da:ba:9b:02:6e:89:5d:f1:c7:bc:1d:ad:89:0d:
ad:2f:9e:46:e6:c2:81:2b:5e:e1:03:c0:a2:a8:01:
55:be:68:07:18:b8:b2:58:b5:3f:02:84:68:75:1e:
a6:a2:96:35:d5:73:94:e6:a7:0f:b7:1b:70:ba:fc:
3f:b4:74:1f:55:58:97:5e:56:f1:91:50:86:ea:83:
d4:db:6c:99:b2:a7:70:58:ea:b5:1d:e2:a3:db:a4:
e4:ab:9f:e7:13:a0:13:33:df:15:e2:09:b2:6f:32:
69:e5:30:e0:ff:a8:03:0c:40:d7:1f:d7:8c:f7:2f:
85:7c:a0:85:7e:10:d9:78:d4:3d:ce:78:b8:6b:2f:
2c:23:b5:c8:d9:15:55:66:c6:08:bd:d4:96:5f:79:
dd:f5:3b:4b:10:43:b2:dc:0b:12:83:33:20:57:ab:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:62:48:0E:5F:19:E2:AF:3F:BF:36:29:A3:D7:20:EA:08:2F:8A:CE
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/G2JIDl8Z4q8_vzYpo9cg6ggvis4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.96.0/19
82.136.0.0/18
85.116.9.0/24
195.22.128.0/23
195.68.206.0/24
IPv6:
2001:4088::/32
Signature Algorithm: sha256WithRSAEncryption
62:48:2c:3e:e7:1e:9a:76:55:f9:40:79:27:d7:8b:42:cc:2a:
80:37:ae:d6:27:6c:36:be:b8:cd:9b:91:96:b7:61:ed:d7:8d:
98:12:fe:5b:3a:7f:49:ac:92:91:da:77:9e:68:bd:06:0d:18:
ad:ec:8a:61:a0:a1:8a:d2:f1:08:f3:b4:7b:c3:ee:87:aa:cb:
84:4c:65:0a:20:34:92:92:db:84:fd:25:14:2f:f4:a8:c7:b4:
cf:86:63:26:f0:c1:8f:19:3c:d1:d7:cb:ce:69:10:58:1f:98:
72:d8:f8:66:7c:42:28:04:49:62:ef:24:87:5d:e2:14:7c:1f:
f5:70:60:9d:12:e4:b6:c0:06:9c:55:8a:e0:89:62:34:ef:86:
31:d1:ca:24:3f:84:0e:02:e7:a5:44:cd:c8:de:50:5f:49:d5:
17:b2:ab:3a:d5:92:c3:2b:46:95:ef:ca:95:c0:f0:aa:b7:1f:
f4:75:60:ac:58:72:be:a7:9d:f1:e3:a9:ae:dc:5a:d7:d2:c8:
c2:6a:31:c6:49:b2:81:56:b6:90:b4:f2:1f:e4:7d:9c:7a:21:
4e:b3:3f:55:48:7d:01:de:5e:41:17:4e:c6:a0:33:2b:7c:f2:
69:0d:7c:1e:a3:ec:e1:6e:b3:b7:f3:a3:cc:40:83:70:23:03:
55:10:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:13 2024 by rpki-client on console-ams.rpki-client.org