Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/GAZSufXJmTGypibcAiaPzwWjKl0.roa
File: GAZSufXJmTGypibcAiaPzwWjKl0.roa (raw, json)
Hash identifier: c/7up9olieiWZl8V7iIYZqtFoN4+1IXVvW1iJicmWVk=
Subject key identifier: 18:06:52:B9:F5:C9:99:31:B2:A6:26:DC:02:26:8F:CF:05:A3:2A:5D
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018AB31C3D12F0B26C7A2A4907F84FB72245
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/GAZSufXJmTGypibcAiaPzwWjKl0.roa
Signing time: Wed 20 Sep 2023 15:01:26 +0000
ROA not before: Wed 20 Sep 2023 15:01:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 932
IP address blocks: 91.208.73.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
91.208.104.0/24 maxlen: 24
45.150.198.0/23 maxlen: 24
2a12:ab80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:1c:3d:12:f0:b2:6c:7a:2a:49:07:f8:4f:b7:22:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Sep 20 15:01:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=180652b9f5c99931b2a626dc02268fcf05a32a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:ac:c5:e2:3b:79:98:f1:6a:63:67:7d:f9:
a1:bf:3b:10:62:39:26:ec:9e:d5:9f:26:d4:16:02:
99:ae:5d:0c:84:e5:4b:ff:21:34:d3:c7:45:45:36:
bf:26:f6:35:ea:1f:fe:84:aa:35:d4:d5:5e:b5:a2:
55:21:d7:c6:cb:2a:3e:3d:d5:d7:77:7a:a6:5a:1d:
a2:d4:cc:04:ef:c8:f4:be:67:93:0c:92:94:40:3a:
f5:b0:57:8e:55:13:9a:85:2b:4f:98:3f:57:b6:48:
10:0a:53:b2:66:c4:8b:88:f3:83:1b:64:ca:85:c5:
c5:ac:59:74:ae:c8:21:8a:0b:e9:8d:55:b2:6a:42:
c3:43:df:9a:93:b8:11:25:ce:15:fb:bd:af:c0:96:
2d:2c:a5:94:f4:dc:b3:c2:7a:2d:13:5f:92:bf:0f:
f1:2a:2e:52:43:f8:19:cf:66:45:6c:20:8a:9f:c4:
d9:bf:e6:d9:2c:76:3c:70:8d:56:ce:94:54:40:b3:
f5:66:a0:5f:05:14:c6:a7:d8:a7:dd:bd:3e:f6:eb:
81:96:2e:ce:4d:9e:0d:36:14:9e:58:a4:cf:93:29:
6a:a7:93:59:f9:f7:19:08:b5:95:04:40:6b:50:0f:
15:71:c6:0c:c7:16:84:c4:53:9b:d1:88:3d:bb:cd:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:06:52:B9:F5:C9:99:31:B2:A6:26:DC:02:26:8F:CF:05:A3:2A:5D
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/GAZSufXJmTGypibcAiaPzwWjKl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.198.0/23
91.208.73.0/24
91.208.104.0/24
91.213.200.0/24
IPv6:
2a12:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
1f:bf:ad:63:46:1e:28:4f:86:46:ef:e2:da:f5:9e:87:ab:cf:
72:4f:0d:fb:f8:53:40:78:7f:ae:ae:75:9b:15:56:43:cf:73:
82:3d:6b:ef:5f:18:e6:10:cb:8e:41:e8:26:bd:68:7d:80:bc:
4f:fb:8e:74:0f:c9:47:c7:ad:e0:d9:e9:9d:dc:f4:bd:58:37:
56:84:c6:af:1c:89:ac:85:b2:e7:0f:b6:87:9f:a2:6b:ba:0d:
60:ad:0c:e2:3a:3d:48:04:74:08:37:f6:75:51:bb:80:75:cb:
b9:04:4d:25:4c:dd:1e:91:d2:43:a5:ff:37:af:80:8d:e6:4f:
da:fd:34:90:1a:52:73:68:91:ff:33:fe:5e:9a:03:9d:cf:2b:
30:6c:10:ef:68:62:f2:da:9b:5d:55:97:39:dc:2a:50:f5:91:
1c:d8:b0:22:87:58:20:7a:08:5d:d1:39:76:49:e2:d8:7f:81:
63:53:1c:6d:3f:fa:3a:91:e5:4d:a9:e8:e1:d9:c9:a2:24:de:
aa:90:6d:c6:5a:37:95:09:ef:c2:f9:b1:91:9a:41:e4:c2:a7:
61:d0:5c:23:c1:6a:7b:2f:c2:46:b3:18:7f:8d:6c:4c:00:55:
d4:ba:8f:d0:f5:d0:70:0f:c1:5d:27:8d:0f:19:e0:bf:2e:6a:
e2:19:41:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:04 2024 by rpki-client on console-fra.rpki-client.org