Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GyLzZShWUms8PAp-CesDhDbaWks.roa
File: GyLzZShWUms8PAp-CesDhDbaWks.roa (raw, json)
Hash identifier: T1qbSF1UJFtb27EvG80PEMWl/491oK0YzBSeRd3Pug0=
Subject key identifier: 1B:22:F3:65:28:56:52:6B:3C:3C:0A:7E:09:EB:03:84:36:DA:5A:4B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BDC635FB657D0DF8E537F141FE742895A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GyLzZShWUms8PAp-CesDhDbaWks.roa
Signing time: Fri 17 Nov 2023 08:26:21 +0000
ROA not before: Fri 17 Nov 2023 08:26:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.42.95.0/24 maxlen: 24
89.34.228.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 11:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:63:5f:b6:57:d0:df:8e:53:7f:14:1f:e7:42:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 17 08:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b22f3652856526b3c3c0a7e09eb038436da5a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:e2:72:ee:72:f5:e5:5d:3e:23:be:51:6d:
3c:45:d0:64:36:82:31:22:41:8b:20:57:2a:04:f1:
09:2b:8f:05:df:f8:90:a5:9c:47:15:7f:c4:f2:42:
96:0f:59:65:b4:94:e4:22:8c:86:54:c8:7d:de:2a:
df:a0:7b:53:27:a7:9b:49:d4:f2:a0:6f:cc:a3:76:
b8:c4:38:4d:0a:e5:59:21:2c:12:3e:9d:b8:a2:ee:
dd:fa:30:67:10:d4:b1:02:a6:af:45:47:8a:33:e8:
0f:5e:b4:41:47:0e:80:73:7e:76:14:c2:f5:24:84:
3a:29:c5:07:37:68:5b:1e:65:e3:04:f2:d1:44:97:
03:0f:b2:92:f9:6c:e8:0d:5c:e1:fc:d4:a5:99:4d:
3c:0e:b2:18:70:28:de:dd:12:e0:bb:6a:bd:94:6f:
4f:f1:a1:26:34:7b:c7:47:33:77:ac:4d:df:2c:59:
f2:59:af:16:71:81:23:22:0d:f6:ff:b0:dc:2e:e2:
23:2e:b5:4e:a3:ce:bf:b2:a2:32:20:b1:ff:69:e1:
03:02:f6:1a:18:4e:33:04:c8:fa:5d:9f:e7:0c:6b:
37:2e:4e:5a:ed:70:35:8e:9e:8e:07:47:1c:7f:77:
3a:46:a3:f6:cc:e5:c0:f3:43:c1:53:cb:6c:ab:4e:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:22:F3:65:28:56:52:6B:3C:3C:0A:7E:09:EB:03:84:36:DA:5A:4B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GyLzZShWUms8PAp-CesDhDbaWks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.42.95.0/24
89.43.140.0/24
93.113.181.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e2:f1:96:24:55:9b:5d:bb:f8:66:3b:dd:5c:9c:f6:c4:0f:
b3:8b:07:ac:0c:60:99:81:53:3d:62:fc:33:af:12:5d:01:37:
84:ab:50:c2:41:ae:ba:7d:d5:f7:7b:9b:ac:aa:b9:a5:4f:fc:
8d:20:86:8c:d3:e3:c9:fc:4e:ff:05:1c:ea:ab:ed:b0:b0:f9:
89:f8:11:86:49:41:8d:0e:2e:2b:ac:9d:9f:fe:4f:01:55:a2:
97:31:b7:c9:e4:77:6c:60:2e:7f:08:6f:0e:25:1b:6e:e9:05:
0f:d3:61:46:6f:9d:79:18:21:5a:67:a4:d6:41:6c:a5:8b:43:
d8:bf:4f:db:d6:eb:26:ef:59:15:69:48:7f:26:c1:9a:41:20:
b3:82:bf:04:e9:24:80:c7:aa:16:b6:a2:ef:81:52:3f:bc:1c:
fd:1d:94:70:73:1c:29:db:05:d4:3c:80:25:27:54:12:ea:c9:
d9:a3:fd:4b:27:6c:46:65:48:ce:17:15:e5:c3:3e:a3:98:20:
98:5a:76:a8:31:16:37:a5:0a:e9:29:73:9a:26:77:10:6b:e0:
12:79:92:90:96:b4:9b:03:cf:02:04:27:39:b0:63:c4:59:ac:
ab:b9:e3:59:2d:9d:1b:6e:1f:04:83:5c:eb:80:da:60:d1:18:
cc:9e:ba:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org