Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/G0djt770J-pxK0KCk1hCD216Scg.roa
File: G0djt770J-pxK0KCk1hCD216Scg.roa (raw, json)
Hash identifier: Kgri/r5CEVTQPROyY8w4gUUhufDcTZmZkSg/edAc+Mk=
Subject key identifier: 1B:47:63:B7:BE:F4:27:EA:71:2B:42:82:93:58:42:0F:6D:7A:49:C8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189CEDA47CBA251F806F0BA0303F00059F3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/G0djt770J-pxK0KCk1hCD216Scg.roa
Signing time: Mon 07 Aug 2023 07:15:58 +0000
ROA not before: Mon 07 Aug 2023 07:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 89.213.177.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
109.176.214.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.45.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 07:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:da:47:cb:a2:51:f8:06:f0:ba:03:03:f0:00:59:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 07:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b4763b7bef427ea712b42829358420f6d7a49c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:4d:54:af:70:58:df:d9:8f:06:fe:aa:99:
bf:98:47:42:f6:ec:c5:b4:49:76:f2:10:64:30:6e:
06:d5:a6:fa:7a:2f:cc:39:6a:93:29:56:d3:0a:56:
3f:28:28:14:70:2a:32:26:5f:9a:75:1c:92:9a:ea:
ac:fe:12:3f:02:a5:62:12:2e:f5:e3:16:4b:e2:68:
d2:80:eb:86:87:de:fe:fb:ce:19:77:93:d7:77:1b:
05:03:d0:6b:3e:e3:09:b1:e2:11:2a:ef:0a:df:af:
dc:20:94:5e:68:97:22:c3:3b:05:b0:e0:68:83:e2:
0d:d9:48:eb:f2:18:3e:b5:23:5c:6e:74:96:81:f6:
0e:c4:1f:50:43:96:2c:29:13:69:41:69:e0:f0:68:
2e:f2:ac:07:9a:cf:37:d1:07:ba:ac:0f:35:4b:0b:
5d:62:d3:b6:48:c9:87:01:f2:c2:63:3d:cd:20:98:
ba:2e:ed:2a:0a:c8:b0:7d:99:66:f3:d8:6d:eb:c0:
71:7e:e2:f8:64:2f:0c:48:00:fb:d8:49:b7:82:b4:
be:88:e0:e6:48:0b:36:21:8e:b0:13:31:00:39:c0:
a0:72:5f:32:79:82:45:56:46:02:1c:8d:48:18:8f:
64:21:5a:49:44:8e:cb:bb:be:17:23:83:c8:86:f6:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:47:63:B7:BE:F4:27:EA:71:2B:42:82:93:58:42:0F:6D:7A:49:C8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/G0djt770J-pxK0KCk1hCD216Scg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.221.0/24
89.213.42.0/24
89.213.45.0/24
89.213.148.0/23
89.213.177.0/24
89.213.183.0/24
109.176.214.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ef:d2:0e:e8:b0:92:39:b6:62:f2:0e:00:87:ab:aa:9b:38:
a4:94:27:a5:f6:3c:50:a7:93:ed:1d:00:8e:1c:45:2c:72:2f:
10:17:e6:17:ee:83:a8:ce:10:8d:59:54:9c:4a:e8:d4:96:9f:
0b:f2:cb:46:6d:78:5a:6d:e9:19:a1:5a:e6:53:92:a8:4e:14:
ef:98:29:15:70:77:ae:e0:7c:3d:2a:9d:8f:64:c8:60:07:81:
91:bf:4d:44:c6:a5:bd:3c:2b:7d:eb:9b:eb:01:ea:ae:ef:78:
82:1d:d6:6d:06:b9:2f:0d:dd:19:35:06:ea:fd:f3:5e:d2:e2:
42:52:68:c4:74:20:ad:90:37:6a:bf:aa:f1:db:74:09:a8:95:
eb:7e:58:a3:5d:f8:1a:ad:8a:6a:15:99:7b:59:52:4d:7e:55:
03:7e:2d:ca:21:c1:c5:83:ef:89:50:67:19:6d:49:ab:7e:35:
aa:c3:a3:22:52:9c:63:55:e1:4d:14:70:04:93:3e:8f:00:56:
b6:c7:c1:f8:f8:a8:56:1e:c3:4b:c9:45:bb:0d:27:78:0d:bc:
05:91:1c:76:3a:b0:2f:6f:03:26:d0:60:e5:e8:58:8a:83:a8:
42:01:87:a5:3a:6a:30:d9:3f:16:5c:03:41:66:43:59:fa:13:
22:e2:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org