Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/nGapsGZI4TqHfL9EY6UY6eCw8a0.roa
File: nGapsGZI4TqHfL9EY6UY6eCw8a0.roa (raw, json)
Hash identifier: EDSv7Dg5gBi0inHmOLebMUfN8ZRdVI6IASlhmIN8ohM=
Subject key identifier: 9C:66:A9:B0:66:48:E1:3A:87:7C:BF:44:63:A5:18:E9:E0:B0:F1:AD
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0187142787178850A317AB2AC2E5788EC07D
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/nGapsGZI4TqHfL9EY6UY6eCw8a0.roa
Signing time: Fri 24 Mar 2023 15:05:47 +0000
ROA not before: Fri 24 Mar 2023 15:05:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207676
IP address blocks: 46.243.179.0/24 maxlen: 24
178.170.249.0/24 maxlen: 24
178.170.251.0/24 maxlen: 24
141.101.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:14:27:87:17:88:50:a3:17:ab:2a:c2:e5:78:8e:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 24 15:05:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c66a9b06648e13a877cbf4463a518e9e0b0f1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:d5:6d:b8:00:7e:df:d3:7c:7b:a7:48:45:
71:57:d8:c4:12:4d:a9:f2:fd:4a:dd:2b:19:70:0f:
e3:d0:ac:ec:0a:77:bd:40:43:b6:0f:5b:0e:48:1d:
d4:4f:ee:22:f5:1f:c9:9b:c9:38:d0:51:90:43:64:
a9:c0:96:58:cf:6c:87:f5:9f:6b:d3:a6:e7:07:54:
9e:a0:c7:90:1a:ff:05:a9:5b:f7:a4:02:2e:34:29:
14:af:1c:b1:1b:cb:27:55:26:26:40:2f:f3:4e:7c:
6d:08:1a:6b:3f:93:25:2e:1c:e9:2b:5c:14:ac:cb:
6a:56:ab:d7:fc:a6:c2:e3:b5:d5:5f:c5:60:e5:d9:
a2:94:b8:f0:6a:09:78:a5:9a:a8:80:65:b6:a6:15:
8a:38:ec:40:9a:7f:55:ff:c5:0a:15:6b:08:7b:31:
c6:f0:bb:b5:1a:18:de:51:f3:a6:1d:b8:f6:ea:b2:
f0:46:2c:ee:7c:0c:98:83:39:32:7d:a6:11:47:e1:
ee:1e:c1:fc:c7:d4:ca:92:f7:28:55:ad:80:bc:b5:
43:75:ef:df:26:98:28:c9:69:5e:83:d8:8d:92:c9:
50:15:e7:de:5d:25:9a:34:44:6d:74:17:e1:e7:d1:
12:89:a7:4a:60:30:7e:14:89:7a:21:60:dd:2c:a9:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:66:A9:B0:66:48:E1:3A:87:7C:BF:44:63:A5:18:E9:E0:B0:F1:AD
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/nGapsGZI4TqHfL9EY6UY6eCw8a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.179.0/24
141.101.249.0/24
178.170.249.0/24
178.170.251.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c9:60:d7:e1:7f:f8:4e:65:c1:91:df:63:0a:98:f1:36:82:
39:41:fb:73:c9:90:70:56:fd:13:6c:ed:27:0e:a0:4c:ee:e5:
46:01:f3:27:71:6d:30:94:7c:29:fc:a3:81:85:5d:1f:bc:e1:
35:71:2f:fa:25:d5:94:48:43:71:63:4a:4c:80:ef:10:79:4a:
ab:b3:b0:77:d0:71:10:56:ab:9c:f5:c6:40:80:7b:aa:45:25:
90:b0:20:43:f4:f4:2a:8a:e1:7a:c6:48:f9:7e:9d:67:74:f2:
ab:23:7f:cd:e5:9b:05:52:c4:59:c9:f8:b3:5c:0c:37:d0:80:
df:fc:61:fa:7b:e4:a5:6e:66:20:c5:30:a3:ab:ef:00:1a:c0:
27:1f:58:92:92:33:85:ed:7f:f5:e5:0d:b7:e7:a1:3a:16:eb:
d8:6a:b9:3b:87:da:87:72:95:56:48:74:8c:2b:3d:9b:ce:cc:
fe:45:24:c6:47:40:e6:4f:9b:24:cb:52:cd:0a:80:10:30:5d:
3b:4b:a1:99:99:b9:d9:ff:cb:9f:79:fa:3e:7b:38:9f:a2:94:
c9:bb:84:c0:95:ce:87:3d:aa:6e:54:e8:77:26:4a:f1:85:1d:
7f:de:a9:f2:d0:09:19:32:ca:31:9b:46:67:38:7c:ea:8d:83:
e4:5a:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:50 2024 by rpki-client on console-fra.rpki-client.org