Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ggZttBXILQ825r5BjZTiVzqB7QA.roa
File: ggZttBXILQ825r5BjZTiVzqB7QA.roa (raw, json)
Hash identifier: iybS8Zsffo64Pu3t3GhZhtFKTA/dAllIE+2tLZHyyLQ=
Subject key identifier: 82:06:6D:B4:15:C8:2D:0F:36:E6:BE:41:8D:94:E2:57:3A:81:ED:00
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018D06133E2CA13839D75513C329919DBE38
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ggZttBXILQ825r5BjZTiVzqB7QA.roa
Signing time: Sun 14 Jan 2024 03:45:40 +0000
ROA not before: Sun 14 Jan 2024 03:45:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 89.251.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 02:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:06:13:3e:2c:a1:38:39:d7:55:13:c3:29:91:9d:be:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 14 03:45:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82066db415c82d0f36e6be418d94e2573a81ed00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:87:b7:f0:48:c9:71:65:37:90:b7:73:b2:
6b:06:95:78:8a:40:bd:26:29:bb:6e:3d:a2:db:77:
19:08:fe:d8:9f:f4:06:2c:aa:2a:55:c6:0a:6d:fd:
39:65:56:39:89:0d:0d:52:77:93:2c:f1:0f:f5:51:
4e:b4:50:a7:e2:66:45:44:b3:bb:a4:12:f2:84:af:
10:7b:4a:a7:cb:df:c9:41:81:a2:25:f3:82:cc:d4:
8f:96:dd:72:12:d2:ef:6a:08:5f:30:eb:26:98:be:
45:d5:82:91:e3:8c:c1:42:8b:08:c8:7a:c2:c2:19:
21:42:8a:b8:d8:07:70:b8:d3:91:dd:7a:df:b7:0a:
71:79:0b:45:f1:13:d0:dc:f0:4e:1c:cd:f3:81:4d:
c0:5b:b0:38:62:1e:64:0b:3e:8a:23:77:f2:6b:14:
d6:fd:c8:6b:6f:06:cb:07:86:43:58:86:df:4c:3a:
85:4c:df:31:45:dd:5d:69:84:c0:f5:ef:79:6d:00:
fd:bb:01:f3:74:3d:88:ad:4a:5d:9d:58:24:e8:b2:
a9:1c:ad:58:47:92:fb:b5:2d:72:4e:cd:a5:d3:3f:
a9:68:d6:e1:81:ea:8c:a5:99:bb:f4:db:31:37:c4:
96:08:b5:81:bd:1b:6c:4c:79:bd:22:cc:30:a1:46:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:06:6D:B4:15:C8:2D:0F:36:E6:BE:41:8D:94:E2:57:3A:81:ED:00
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ggZttBXILQ825r5BjZTiVzqB7QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.10.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7a:8d:47:c7:dd:bc:0f:21:0f:03:27:d4:b3:17:76:ba:e1:
3f:c0:59:e5:38:75:d8:e6:ad:41:8a:f7:fc:09:d5:b9:7d:29:
90:37:bf:ef:95:47:58:98:b9:69:bb:58:33:e1:5f:cd:36:8c:
66:b7:46:d6:6e:d9:17:62:d5:eb:34:a6:da:97:fd:01:a1:49:
ea:32:f1:02:53:d3:06:33:69:bb:61:8e:ba:2a:d4:cb:2b:8d:
ce:72:4c:56:ad:fb:c1:f2:30:2c:e2:26:89:33:fd:64:e2:b3:
19:7b:48:0c:10:6f:44:5b:41:8f:bf:60:d5:71:7a:f7:9a:61:
13:63:f1:4c:77:00:62:c2:b6:60:82:12:44:62:88:c6:f4:d5:
73:57:f1:b9:ad:c7:a8:fb:42:ab:5f:d3:e6:a5:49:29:7c:65:
e6:31:4f:9c:22:bd:a3:83:a4:02:58:eb:53:2f:1c:15:6c:21:
93:2d:5c:32:a1:1c:67:4f:be:68:06:5e:6f:df:4e:a1:e2:bf:
bd:2a:bd:7f:ee:f6:4a:0f:9b:51:d9:a8:fc:e8:94:18:84:e7:
c4:13:e0:86:fd:70:2d:ab:8f:da:6e:fc:8c:d7:c2:97:2b:68:
77:99:f5:99:06:38:1a:8f:dd:48:24:0f:c3:a5:01:09:85:7c:
9c:e3:09:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 02:53:47 2024 by rpki-client on console-ams.rpki-client.org