Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Gmz_UIN8PiVTTqaGhn6J7hxrSbo.roa
File: Gmz_UIN8PiVTTqaGhn6J7hxrSbo.roa (raw, json)
Hash identifier: cgy2zpsYwa/Hl8W+PxLU9xIQba/5asYKDMhl5ZwTtAo=
Subject key identifier: 1A:6C:FF:50:83:7C:3E:25:53:4E:A6:86:86:7E:89:EE:1C:6B:49:BA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C7BEDB96277F596569C8F3E4B50ABB9CA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Gmz_UIN8PiVTTqaGhn6J7hxrSbo.roa
Signing time: Mon 18 Dec 2023 07:57:06 +0000
ROA not before: Mon 18 Dec 2023 07:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 86.107.51.0/24 maxlen: 24
91.132.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 07:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:ed:b9:62:77:f5:96:56:9c:8f:3e:4b:50:ab:b9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 18 07:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a6cff50837c3e25534ea686867e89ee1c6b49ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2c:d4:44:12:18:4c:b9:41:fd:b2:cc:8e:25:
20:b5:85:89:06:03:3e:06:15:d2:4a:1a:20:43:08:
ca:a1:da:dd:6c:6c:58:ad:81:cc:3b:44:d3:ee:0b:
72:22:ab:29:36:bc:b1:30:43:d8:e8:d7:ef:eb:5d:
0d:76:28:c9:45:f9:3b:e5:c9:81:73:69:16:44:83:
68:eb:2f:fb:70:75:34:93:39:87:64:e5:d5:4e:5e:
72:29:c9:4f:16:86:dd:33:fc:79:9f:bf:6a:28:f8:
6d:39:4d:a4:34:65:a2:7b:14:b0:2b:bc:88:30:38:
3b:13:81:1e:93:fc:f5:6b:02:81:99:e5:eb:d8:48:
a5:e3:9f:93:a9:ff:fc:ad:c7:ba:61:b3:e0:06:43:
4f:00:af:98:8b:02:3f:dc:69:4c:8c:35:df:b0:ac:
38:33:57:9b:c1:9b:45:2f:5b:83:7f:eb:0f:a1:12:
78:9d:3d:92:f4:fe:51:2c:6f:5f:0b:47:52:d0:8c:
f5:13:ae:7c:ad:1b:7a:4c:e2:f4:e9:06:c2:e9:fd:
6f:71:49:18:62:30:1e:4f:7a:13:93:4f:df:57:d8:
5a:20:f2:44:38:ff:b3:51:cd:22:c7:49:31:9e:6f:
2a:12:db:af:dc:4f:6c:78:6b:0c:a1:8e:eb:b8:ae:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:FF:50:83:7C:3E:25:53:4E:A6:86:86:7E:89:EE:1C:6B:49:BA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Gmz_UIN8PiVTTqaGhn6J7hxrSbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
91.132.49.0/24
Signature Algorithm: sha256WithRSAEncryption
78:86:e4:6a:7f:ee:78:15:36:47:1b:da:be:2d:d9:c8:45:e3:
78:3d:d5:25:3d:a2:4a:a5:09:07:c9:86:94:c5:d4:cc:89:bc:
70:e6:49:b2:77:d6:c0:63:79:a1:ca:52:5f:ec:ad:3f:83:9f:
be:f1:22:49:ea:96:61:6e:d8:f6:83:a3:fa:a2:2e:05:b5:43:
11:47:40:0b:fe:e7:d5:c3:d1:9b:9a:c7:7c:07:e1:e9:93:3d:
26:c4:d0:37:37:0f:ca:0f:9a:5d:db:5d:ea:26:14:df:67:e6:
90:e6:7a:6d:11:8e:7d:af:f4:6d:cd:60:50:48:84:be:e4:01:
e9:eb:87:ce:3e:1f:a0:c9:8f:a0:1a:6b:bd:7b:01:2a:d7:bf:
52:af:c8:6b:99:9e:4c:7b:db:2f:10:63:2d:c2:e1:a1:ac:6a:
57:d7:8c:db:2c:69:cb:8f:16:7a:75:93:4b:7d:e7:c2:7c:e3:
e2:1e:1f:3f:10:c7:9a:86:7f:36:29:15:18:87:32:94:45:18:
ee:cc:43:ea:f2:a2:a6:75:ff:4b:6a:7c:7c:9d:69:33:bc:8f:
99:97:f0:26:2f:ac:eb:07:a8:5f:65:5d:f9:a4:f6:98:fa:f7:
a6:9a:92:de:4d:52:d3:be:98:05:c6:76:a5:6e:4a:88:20:f1:
da:9d:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org