Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/GWZYiwEosPQ_CRFY6LxhhzFLafc.roa
File: GWZYiwEosPQ_CRFY6LxhhzFLafc.roa (raw, json)
Hash identifier: X69YAt4HBldO4ic0FVYVLVI/UJfiUcnzzirwIEIyfsU=
Subject key identifier: 19:66:58:8B:01:28:B0:F4:3F:09:11:58:E8:BC:61:87:31:4B:69:F7
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 018CC4939C8F3B6183383C59D972A7C6DA34
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/GWZYiwEosPQ_CRFY6LxhhzFLafc.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42656
IP address blocks: 91.207.14.0/23 maxlen: 24
193.203.222.0/23 maxlen: 24
5.134.208.0/21 maxlen: 24
2a02:dc8::/30 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Oct 2024 09:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9c:8f:3b:61:83:38:3c:59:d9:72:a7:c6:da:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1966588b0128b0f43f091158e8bc6187314b69f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:6d:8b:d7:55:8a:bc:90:96:36:5e:25:94:
f1:b1:8a:66:18:a7:28:68:b2:bf:bc:80:bf:a5:da:
83:10:4b:2e:a1:16:e8:7b:8b:37:c3:38:1e:a3:c5:
72:7b:7a:74:03:c0:84:c0:2c:ba:34:bf:c4:9e:96:
71:e4:8c:3b:2d:13:2b:69:73:9f:ad:5a:86:56:ea:
fd:72:ba:74:8d:85:4e:0b:a2:15:eb:ac:9f:5c:c2:
cb:9b:ad:d0:18:dd:60:08:13:fa:c8:1b:2b:d7:30:
0c:27:b6:4f:a2:76:43:28:b0:c6:bd:35:0a:83:ba:
43:78:7f:dc:5a:7e:6d:f4:bb:5a:d8:02:40:b4:03:
d1:be:c7:3e:9b:e3:c9:80:a2:35:6e:d4:68:fc:a7:
0c:b7:8a:82:b1:8c:33:e1:68:fb:f9:42:cf:89:a3:
26:b8:6d:fd:6f:6f:5c:0d:c2:b4:9e:1f:4f:f7:06:
ce:70:14:e9:19:13:3e:95:60:51:5a:15:12:f7:d0:
d3:70:2d:6d:fe:12:d5:ff:ab:61:ef:a1:e1:ac:e2:
fd:d7:0a:91:50:0b:f7:80:70:bb:d7:82:af:b3:58:
af:72:4c:dd:dc:72:27:29:b2:e6:73:03:0e:c7:38:
32:ab:06:ba:2e:fd:1b:27:cb:54:c7:7a:a2:11:7f:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:58:8B:01:28:B0:F4:3F:09:11:58:E8:BC:61:87:31:4B:69:F7
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/GWZYiwEosPQ_CRFY6LxhhzFLafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.207.14.0/23
193.203.222.0/23
IPv6:
2a02:dc8::/30
Signature Algorithm: sha256WithRSAEncryption
88:9a:0c:06:e1:79:19:14:88:95:8d:10:cc:71:bf:6b:fd:6d:
b8:85:b5:98:63:1d:4a:85:86:4b:60:1f:2c:30:c0:0f:22:90:
86:7d:27:05:b0:63:d1:7d:98:d0:5e:e2:bb:69:d0:85:37:f9:
c3:98:b2:31:39:eb:a6:93:59:71:4d:58:ca:5b:be:54:82:b0:
bb:f8:96:2b:a8:60:05:3b:28:11:0f:20:1b:88:1e:3d:87:6e:
04:e9:16:4f:39:53:d3:73:97:f6:10:ca:0c:f7:8e:a6:7f:5d:
9d:c0:74:8f:69:50:f6:b7:ca:fd:4f:89:31:c0:ea:eb:66:05:
eb:ba:e1:22:85:0d:30:82:e7:b2:12:90:e8:ec:89:b4:a1:10:
46:23:db:24:7d:b6:90:ed:15:c7:4e:82:30:17:77:dd:a7:b9:
7f:5d:c9:a1:93:1b:04:dc:e7:f5:ac:1b:89:24:7a:ab:bb:9f:
1b:16:b1:7d:32:51:90:99:47:8f:9b:fb:20:4f:93:4d:23:36:
64:a7:be:a2:3a:83:5d:e7:f8:c8:54:b7:01:b0:c5:f7:7d:5e:
e3:25:40:b8:e1:e6:4a:c7:78:d2:42:6b:45:81:85:f0:bd:29:
08:c5:ad:1a:c5:c2:ea:25:2c:b4:97:09:01:25:47:12:7a:b1:
73:47:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 14:31:48 2024 by rpki-client on console-ams.rpki-client.org