Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GzWOiSytBCeDNSUa8j9A_2Pb6gA.roa
File: GzWOiSytBCeDNSUa8j9A_2Pb6gA.roa (raw, json)
Hash identifier: 7PBkt2GSDTNyMIqigzwUk+4qXiGbk9x/md9dgjObmXQ=
Subject key identifier: 1B:35:8E:89:2C:AD:04:27:83:35:25:1A:F2:3F:40:FF:63:DB:EA:00
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01894FE7B2EA75D3F5CDF48A06E8E8ECB864
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GzWOiSytBCeDNSUa8j9A_2Pb6gA.roa
Signing time: Thu 13 Jul 2023 15:38:51 +0000
ROA not before: Thu 13 Jul 2023 15:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 82.153.246.0/24 maxlen: 24
82.152.110.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
109.176.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jul 2023 12:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:e7:b2:ea:75:d3:f5:cd:f4:8a:06:e8:e8:ec:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 13 15:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b358e892cad04278335251af23f40ff63dbea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e6:47:68:98:33:90:42:3c:f7:73:e3:7c:70:
8e:f5:d7:68:e0:da:61:8f:92:ea:cc:5e:35:32:d2:
b4:16:61:a0:8e:b1:2b:2b:bb:43:ac:a8:94:10:8b:
04:cf:5a:30:32:93:40:49:9b:aa:1f:7a:df:05:e3:
f6:c2:4b:dd:04:95:17:5c:23:c2:d5:db:fb:2c:09:
50:ea:f6:a6:7c:eb:5f:c0:e4:79:cb:0c:eb:89:4b:
86:2f:da:8f:17:3f:21:97:76:e4:75:e9:bc:31:59:
d9:e6:68:b8:1b:c1:93:91:74:26:7c:3e:e2:1a:a7:
12:c5:c7:7f:80:03:ec:f0:e2:e2:fb:70:be:c7:96:
1f:f4:ae:23:1b:d8:e8:14:6d:db:e6:d1:1d:18:a3:
f6:02:f7:4a:c3:70:89:6b:79:71:1b:27:43:51:df:
50:3b:2f:e2:ff:12:ff:37:1e:42:14:5b:49:e4:de:
c1:05:00:23:78:86:48:3c:6c:2f:16:5c:60:18:ce:
8a:04:c9:b5:f1:1f:2f:73:f7:74:d6:e9:36:1d:85:
70:03:80:da:66:a6:09:10:33:b8:1b:2b:49:a6:70:
05:31:26:1d:a5:29:04:10:d7:4d:bc:6b:95:8a:d0:
5a:5c:9c:a8:11:95:3c:1e:e4:29:f2:7b:fa:9e:38:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:8E:89:2C:AD:04:27:83:35:25:1A:F2:3F:40:FF:63:DB:EA:00
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GzWOiSytBCeDNSUa8j9A_2Pb6gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.110.0/24
82.153.246.0/24
89.213.132.0/24
109.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
44:dd:ce:b9:dc:80:33:fc:eb:4e:10:39:69:52:ce:eb:3c:3f:
e5:2c:2d:25:1a:20:ae:7b:5d:c7:93:12:e7:be:3a:86:81:5c:
73:c9:62:a6:88:41:21:8e:73:1e:dd:5b:f8:8f:71:e4:ea:b6:
14:e4:4b:91:ac:c3:bf:a1:f9:1a:86:09:ec:d2:89:26:a0:44:
f5:62:d2:06:32:3b:c8:fa:6c:f3:7f:bd:38:99:cd:39:62:88:
ff:6c:53:d7:0f:fd:0a:17:08:39:30:5c:2e:78:b4:09:68:f1:
81:96:18:51:29:47:fa:ca:b8:3a:e7:cd:e0:aa:6b:f0:fc:db:
68:9a:3a:b2:c4:73:d4:86:dd:7e:62:db:11:f7:8a:d8:89:a8:
46:79:e8:23:63:e9:6c:45:27:3c:86:ba:73:a6:f2:67:38:cb:
84:88:ec:88:4c:9b:4b:26:78:20:da:16:90:fa:63:d9:a0:f2:
56:0e:75:b8:d1:62:b0:90:72:6d:ee:b6:5d:5f:e3:b6:90:21:
0c:b4:d9:fa:b1:f0:2f:90:42:da:27:97:8c:b3:38:d3:a8:fe:
98:68:34:c3:e9:65:1c:3a:c1:25:ce:e3:f4:93:b7:4d:0d:2c:
e8:61:79:df:ef:1b:9d:3f:8e:2f:1d:4f:ae:0e:d9:5f:e2:e1:
6e:f6:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org