Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/_GeCiOrbtTDFJETDKoSjk_ZCoSg.roa
File: _GeCiOrbtTDFJETDKoSjk_ZCoSg.roa (raw, json)
Hash identifier: rhNF2wPfuWP3kez0WZmP3LQLEHDGz9uZdtswHPtR+gM=
Subject key identifier: FC:67:82:88:EA:DB:B5:30:C5:24:44:C3:2A:84:A3:93:F6:42:A1:28
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 018FAA103FD7EE2E7BFE501BBE9C376C446B
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/_GeCiOrbtTDFJETDKoSjk_ZCoSg.roa
Signing time: Fri 24 May 2024 10:05:42 +0000
ROA not before: Fri 24 May 2024 10:05:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.31.198.0/24 maxlen: 24
91.188.252.0/24 maxlen: 24
91.188.253.0/24 maxlen: 24
91.188.254.0/24 maxlen: 24
91.188.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 20:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:10:3f:d7:ee:2e:7b:fe:50:1b:be:9c:37:6c:44:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: May 24 10:05:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc678288eadbb530c52444c32a84a393f642a128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:b5:fa:42:17:91:9a:65:25:7a:88:03:d1:
ef:33:3a:d5:61:51:81:ee:3e:63:a9:6d:93:d3:ee:
3b:51:77:a3:6b:f5:a5:02:b4:4a:44:30:88:70:33:
0f:cc:ee:7f:0f:b9:de:9b:8a:c4:10:59:41:a3:95:
9c:ab:1b:33:20:60:5d:08:34:3d:49:43:5e:c2:f2:
c7:71:7e:cf:8c:13:f7:e3:0c:eb:77:57:cc:5b:b5:
c4:63:46:38:b3:9c:bb:fc:eb:84:21:e8:97:2c:f6:
ca:83:04:9e:8e:35:63:96:50:a9:3b:93:ea:07:69:
34:74:fb:24:35:8b:60:92:4b:10:ea:f1:1a:d8:5c:
55:82:31:b6:3a:70:28:10:af:4e:2e:a0:44:33:cf:
1e:61:90:53:c6:e7:43:1d:77:3b:72:c4:c3:26:83:
28:38:75:bf:4c:d5:8d:51:31:4a:27:2f:59:53:4e:
ad:1f:e0:30:87:e6:09:f1:72:be:01:f4:9a:6e:9e:
bc:58:99:03:fd:52:1f:e6:9d:8f:14:59:f4:7a:06:
b4:f7:70:e0:f6:88:e7:cd:8c:60:67:d3:49:34:be:
71:03:b7:90:fc:30:3c:d6:e3:9d:be:ca:50:1f:f8:
9b:e2:90:be:f5:19:1f:31:89:56:f5:4d:91:4a:8a:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:67:82:88:EA:DB:B5:30:C5:24:44:C3:2A:84:A3:93:F6:42:A1:28
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/_GeCiOrbtTDFJETDKoSjk_ZCoSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.198.0/24
91.188.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:64:fb:19:03:03:65:1c:38:0c:ae:eb:f7:27:49:de:c5:4c:
f5:ba:f9:27:f4:10:32:56:cd:ba:95:6f:0a:10:b8:38:ac:e5:
a3:b9:88:63:de:49:67:17:91:ee:ce:9b:27:5f:34:86:81:88:
08:33:70:d0:52:42:53:d2:51:22:aa:31:2b:e8:00:6d:5b:a4:
9f:2e:fa:90:ea:c1:a2:90:d1:21:0e:55:25:fb:bf:72:b4:54:
6d:c3:bb:02:a7:6f:6d:a5:ea:df:93:27:ba:84:9d:6c:eb:2b:
86:e8:76:b4:64:4d:e3:5a:ac:68:d8:d8:b1:b8:49:aa:cc:42:
61:f4:cc:e1:7c:35:eb:ae:32:71:81:e2:a5:73:81:c3:6b:21:
0a:9d:51:bd:d9:ef:cd:e6:b6:1f:6f:18:12:ee:f6:fb:53:a9:
f8:1d:86:79:84:2d:8b:3d:85:cd:9f:53:60:f2:32:ae:59:5e:
8e:ab:f8:5f:62:90:91:55:23:7d:88:df:7e:ae:f6:17:80:54:
45:c7:6b:52:89:fb:92:23:72:cd:6d:9d:4c:a7:b0:98:09:84:
94:77:bf:2a:f6:ec:01:51:87:3e:42:d2:1a:62:15:53:1f:bf:
12:c6:d4:0b:88:37:38:78:16:b3:5b:9e:a9:f8:71:d4:07:65:
e0:ef:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:37 2024 by rpki-client on console-ams.rpki-client.org