Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/gPw26WL1MO0vIjA4UiA0T3H_zpg.roa
File: gPw26WL1MO0vIjA4UiA0T3H_zpg.roa (raw, json)
Hash identifier: J9JhHQlHJ+3H6gjy5kMeAUY2heDGGO68IRvLxrKNod8=
Subject key identifier: 80:FC:36:E9:62:F5:30:ED:2F:22:30:38:52:20:34:4F:71:FF:CE:98
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570305E4AED7AEB592E5CE5423D7090E8
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/gPw26WL1MO0vIjA4UiA0T3H_zpg.roa
Signing time: Mon 02 Jan 2023 01:54:56 +0000
ROA not before: Mon 02 Jan 2023 01:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24690
IP address blocks: 91.120.58.0/24 maxlen: 24
194.88.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5e:4a:ed:7a:eb:59:2e:5c:e5:42:3d:70:90:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80fc36e962f530ed2f2230385220344f71ffce98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:83:2f:e0:54:6c:92:b5:05:a2:5b:e2:c2:a8:
e0:5d:7a:93:5e:16:26:11:c3:1e:1a:29:09:6a:ad:
34:3a:cb:77:cb:68:e9:fa:22:e5:dd:4d:34:7d:e4:
a3:fb:ee:29:8d:79:32:5f:02:e7:2c:60:9e:48:96:
67:4c:5a:08:a0:0f:dd:47:af:7f:08:59:87:0e:da:
cd:99:fc:35:db:9e:fb:a6:a6:18:d4:06:b1:6e:c7:
b4:9f:79:1d:38:d2:d9:09:f0:a7:06:24:51:55:fa:
74:6a:01:fd:76:e1:e2:8b:c8:50:b4:a4:25:67:52:
f8:43:16:46:89:b7:9e:ba:df:38:ff:09:78:6c:11:
00:71:82:7f:aa:f1:10:1b:d8:7e:c6:fc:64:5d:15:
f8:11:82:27:4b:3e:74:9b:ea:c2:6e:82:e9:03:ad:
da:7e:be:e8:b1:99:3d:a4:50:7c:50:52:3b:d6:90:
6d:37:8b:7c:f9:0a:4f:25:48:06:20:0d:e5:f9:c8:
05:a5:77:eb:23:3e:99:29:f3:9a:ca:77:0c:c6:07:
fd:a1:c5:bf:41:ca:21:aa:1a:f6:8f:6f:cd:e6:5a:
fb:87:75:d7:c3:e4:c8:12:c4:dd:55:88:89:79:89:
f3:f3:28:f4:14:59:02:0e:fb:15:3e:72:54:ee:0e:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FC:36:E9:62:F5:30:ED:2F:22:30:38:52:20:34:4F:71:FF:CE:98
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/gPw26WL1MO0vIjA4UiA0T3H_zpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.58.0/24
194.88.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3b:27:27:12:3c:a8:8a:89:0d:58:20:c7:33:23:28:16:61:
d3:58:a0:b4:4b:11:d1:4c:ab:8a:24:4e:6d:61:ad:4c:40:12:
4e:97:55:99:bb:49:98:52:2a:7b:0f:3f:c0:2a:f3:d1:6c:63:
92:75:4f:95:63:c5:0b:d2:00:5c:f3:47:2e:a7:b7:9f:8c:27:
83:17:f8:42:06:a7:88:77:03:dc:46:b7:a4:1f:6f:69:f4:17:
dc:9e:1d:3d:df:4a:43:d7:92:36:92:01:76:49:a7:2d:0d:37:
13:bb:d9:8e:38:40:b5:1f:ef:ca:ea:d5:d4:0b:16:53:b0:28:
81:6a:b7:f3:b7:f4:24:53:ca:f4:c6:73:dc:1a:e5:44:b5:89:
6a:ce:90:27:18:b8:cc:76:ee:be:19:c9:59:49:e3:2f:06:ab:
9c:5a:7d:c7:42:6e:9a:c4:64:11:ee:b9:4f:2d:65:72:60:f1:
8a:3c:d6:4f:a5:89:55:a6:4b:e3:f3:b0:22:8b:8a:54:08:2c:
f0:15:85:80:dc:9a:c8:91:40:9f:fc:65:2c:f9:88:9f:be:0e:
e0:1d:54:fa:4f:f8:e0:5f:39:a0:88:37:58:e4:01:84:1c:33:
8e:7f:8d:66:47:ab:76:0a:84:9a:13:8b:dc:ea:70:7c:0b:8f:
50:41:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org