Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GZN5YtV_-N9dG0PjHxdCiyCmGGs.roa
File: GZN5YtV_-N9dG0PjHxdCiyCmGGs.roa (raw, json)
Hash identifier: eGMZYLvpUUiDJqLqYchxTqwlrqx8uTfmSnS4TRpQjdI=
Subject key identifier: 19:93:79:62:D5:7F:F8:DF:5D:1B:43:E3:1F:17:42:8B:20:A6:18:6B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018BD31C1F81674C6371F79780F6F0965529
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GZN5YtV_-N9dG0PjHxdCiyCmGGs.roa
Signing time: Wed 15 Nov 2023 13:11:57 +0000
ROA not before: Wed 15 Nov 2023 13:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.213.180.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.136.0/22 maxlen: 22
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
109.176.248.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 07:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:1c:1f:81:67:4c:63:71:f7:97:80:f6:f0:96:55:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 15 13:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19937962d57ff8df5d1b43e31f17428b20a6186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:bc:23:33:5e:8d:64:fe:69:f3:c6:96:a1:
f1:aa:44:cf:16:91:73:f8:ef:4a:f2:94:bb:14:85:
d6:51:d2:a3:8a:4a:1f:b4:85:22:70:f3:a1:5c:48:
60:85:a0:3b:ad:ee:ef:0a:00:00:c8:1f:b3:68:57:
49:03:45:96:29:fa:cc:59:24:4d:c9:ab:c3:63:27:
0a:15:8c:3c:7c:62:c7:a1:d9:da:a0:db:cb:ca:a8:
2b:17:1a:b4:97:46:d2:0b:de:4d:0b:b6:d6:7d:7b:
8d:0e:c6:fc:96:38:fb:9b:5c:74:bb:d2:90:46:d0:
1a:1c:f9:39:f4:7a:85:02:bf:81:2c:37:bc:a6:ee:
2d:9f:ce:0f:b6:8b:4b:3b:8e:94:5d:ef:00:24:93:
03:ee:b8:55:df:14:5c:85:d7:1a:f6:d6:79:af:de:
49:56:33:f4:9e:06:3b:61:8c:62:88:d8:e4:38:ab:
81:95:7f:ba:02:78:c1:73:7f:af:06:d0:d3:fc:eb:
b4:06:93:c3:d7:12:30:47:b7:90:35:f6:d7:f0:21:
d9:cf:13:08:0d:9d:dd:fd:e9:45:f3:10:87:00:3e:
b8:4b:1b:af:5f:b4:77:37:1a:83:4a:06:27:9e:53:
04:ea:b5:cd:42:80:bc:59:a1:ac:6b:62:c4:d3:0e:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:79:62:D5:7F:F8:DF:5D:1B:43:E3:1F:17:42:8B:20:A6:18:6B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GZN5YtV_-N9dG0PjHxdCiyCmGGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.180.0/22
109.176.246.0/24
109.176.248.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
34:71:e7:36:1e:c0:43:b1:b4:af:8a:79:15:01:c1:3a:e9:64:
bd:f7:0b:cc:e9:c7:08:de:3e:0d:ee:9e:3e:85:04:0c:10:fe:
b7:8c:53:65:ec:aa:74:ea:01:b4:dc:c0:4b:a1:11:f0:64:40:
52:4a:81:d7:5a:94:d4:89:a3:90:ea:41:86:0e:ec:37:ea:75:
38:5c:df:c5:5d:94:2d:5b:f0:30:e7:03:5a:2d:5c:97:bc:22:
09:c7:e0:fb:82:1d:46:52:2d:7b:bf:0d:8c:b8:91:bf:c5:17:
22:4f:e5:b7:95:1a:ec:2c:9f:08:9f:53:1b:8f:b0:da:cf:94:
2b:1c:b5:93:9b:52:6b:14:2e:21:56:8f:18:4c:27:69:0e:07:
54:0b:5f:d0:c3:45:b1:c6:a0:31:2a:8b:53:77:0c:93:58:6d:
b6:37:d2:ed:8a:89:ab:35:9e:35:67:0f:56:b8:f3:f7:f6:89:
a0:fd:f6:44:47:ad:62:6c:41:0f:ff:e0:28:77:fb:e5:97:c6:
b9:84:f9:50:4b:a2:99:41:49:19:51:c2:c7:55:5c:cf:1c:a0:
44:d8:3f:38:ce:b6:3b:9c:b3:88:57:3d:87:6e:37:44:7b:ac:
21:3f:9f:d1:82:9d:76:9c:c2:b2:0b:29:b3:83:23:3a:f3:9d:
45:71:c2:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org