Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/gFcLX9knmmeSO33mgdrKTC9jvB4.roa
File: gFcLX9knmmeSO33mgdrKTC9jvB4.roa (raw, json)
Hash identifier: QMueQiJLk51pQ/f8vF2dOBXOesttIo9ajG9PxxnNAds=
Subject key identifier: 80:57:0B:5F:D9:27:9A:67:92:3B:7D:E6:81:DA:CA:4C:2F:63:BC:1E
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 01856D6F834E9C30918A52F1FA7785CD5557
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/gFcLX9knmmeSO33mgdrKTC9jvB4.roa
Signing time: Sun 01 Jan 2023 13:05:02 +0000
ROA not before: Sun 01 Jan 2023 13:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50954
IP address blocks: 91.216.58.0/24 maxlen: 24
185.236.56.0/22 maxlen: 22
2a0d:9d00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:83:4e:9c:30:91:8a:52:f1:fa:77:85:cd:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Jan 1 13:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80570b5fd9279a67923b7de681daca4c2f63bc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:30:06:1e:3b:ed:04:64:6f:09:4f:ea:c0:
3c:89:63:fa:0f:aa:3b:8f:ac:0c:24:fc:13:49:3a:
2c:27:66:26:3e:88:55:5d:3b:fb:34:19:33:7d:21:
f4:40:a4:41:ca:74:57:b0:ed:27:f0:c4:d3:df:4b:
b8:b8:fe:98:56:1e:a2:9c:8a:14:bc:42:6f:6a:e6:
23:96:f0:8a:6e:ad:a6:e9:4e:88:c3:ed:78:86:a4:
cd:c4:c2:c2:f2:98:9c:22:86:65:21:ee:12:54:3f:
3d:e7:5b:ae:dd:f4:ad:0d:31:1e:fd:2a:af:35:51:
76:6e:e1:06:21:7c:40:1d:61:e7:77:81:30:3d:6e:
d3:bc:3a:97:ed:77:7b:86:3b:1f:17:b1:22:1e:4a:
99:d6:f7:a0:45:2a:15:61:14:d7:8a:0d:13:51:41:
43:cc:64:6b:6b:a1:61:0c:e0:78:b7:83:d1:53:42:
75:e1:69:0e:4c:8c:c4:2c:94:34:67:17:3c:60:a6:
fa:bc:89:72:47:f4:ae:95:16:54:90:f5:cf:ea:1d:
42:02:4f:7b:a6:c0:e6:83:06:5c:ed:17:47:21:5c:
73:e1:a6:83:a4:b7:d8:81:26:76:fc:31:38:73:43:
61:61:cb:c3:2c:27:ff:ee:e5:28:96:d7:9b:81:0b:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:57:0B:5F:D9:27:9A:67:92:3B:7D:E6:81:DA:CA:4C:2F:63:BC:1E
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/gFcLX9knmmeSO33mgdrKTC9jvB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.58.0/24
185.236.56.0/22
IPv6:
2a0d:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
09:a2:b3:d5:15:b9:f8:8c:7f:7e:7c:84:db:dd:91:07:3f:59:
e0:1c:1b:67:31:32:90:85:aa:b9:f5:d2:c0:6e:43:e1:c0:fb:
15:9e:d1:3a:20:1e:8a:44:24:07:6f:df:28:bf:a7:38:5f:39:
88:87:29:d5:ba:23:8d:7a:9d:f0:18:d9:07:10:5b:f8:0c:31:
ce:10:1a:d1:14:b9:30:9e:44:d7:9f:c0:56:0b:40:b0:08:31:
03:91:7a:0e:2a:17:89:b3:97:42:82:44:66:35:03:95:24:bd:
f7:e6:2c:61:83:50:9b:87:1d:5e:87:0d:42:42:17:94:62:b2:
94:a5:2b:16:91:b6:12:bb:d7:76:3e:34:51:73:30:49:8f:10:
87:9d:65:b9:42:a5:5e:68:0c:0f:e6:6b:ca:6c:60:0a:6a:3d:
fc:86:90:58:3f:aa:64:2a:8c:f6:00:50:4e:0c:5a:3c:23:f8:
08:1e:d2:e1:fc:df:32:62:aa:76:f2:da:c7:31:38:a3:41:c2:
57:2f:cf:5c:65:2b:2c:f0:99:92:ce:3e:55:48:7c:9c:7d:64:
b7:e4:a4:40:ed:3f:20:6e:86:ac:85:61:a6:16:a6:0d:6c:22:
b6:a8:79:f3:60:76:24:ba:9b:23:56:dd:3b:5c:00:14:ae:b6:
2d:f5:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:55 2024 by rpki-client on console-fra.rpki-client.org