Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Gbi0gDKk7GI_ux3McgW4dYPyymg.roa
File: Gbi0gDKk7GI_ux3McgW4dYPyymg.roa (raw, json)
Hash identifier: x2ITu9iRr9MrFLXQhcUNN4pqmDHOBnRTTSPQFoA5Qtk=
Subject key identifier: 19:B8:B4:80:32:A4:EC:62:3F:BB:1D:CC:72:05:B8:75:83:F2:CA:68
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01888A47F6C1864B44138A95B712CF4D0E3E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Gbi0gDKk7GI_ux3McgW4dYPyymg.roa
Signing time: Mon 05 Jun 2023 06:39:12 +0000
ROA not before: Mon 05 Jun 2023 06:39:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/24 maxlen: 24
81.28.253.0/24 maxlen: 24
95.214.177.0/24 maxlen: 24
45.132.80.0/22 maxlen: 24
91.244.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:47:f6:c1:86:4b:44:13:8a:95:b7:12:cf:4d:0e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jun 5 06:39:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19b8b48032a4ec623fbb1dcc7205b87583f2ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:7e:05:1c:d7:2e:1e:52:a8:f2:71:ee:e4:
f9:4a:84:3f:96:b9:36:20:42:07:9f:a7:87:6d:a6:
1a:a2:59:a7:37:a9:d7:89:e0:0a:15:66:72:1e:e7:
0b:3f:68:ee:13:37:29:0d:61:b4:ca:79:d4:22:c8:
8c:d7:ab:68:87:0e:e6:1e:4d:da:7f:29:78:1c:8e:
05:24:59:40:62:30:ee:75:dd:ae:d2:fc:a0:b6:d4:
4d:18:22:91:08:c5:fc:68:e7:97:34:d3:d3:62:87:
45:47:da:f0:46:3a:94:4d:49:82:30:32:c6:ff:44:
4b:a5:cf:cc:8a:95:34:3c:a0:db:97:62:9e:c8:de:
36:b5:b5:6e:37:16:86:0c:50:4a:50:6d:f0:64:2c:
97:08:62:7c:5b:a7:04:83:fd:9e:a8:26:e7:c4:95:
6c:b7:a4:5a:3a:23:89:2a:ac:6c:75:9b:f6:6a:69:
75:ba:2a:f1:42:bf:55:16:65:0b:d3:d7:8c:8b:35:
f2:89:52:f1:be:88:b3:54:b5:c1:3e:6d:bd:a4:de:
61:20:e6:a8:d3:f7:ea:a5:89:c5:04:21:75:20:d4:
d9:ed:0a:6e:f6:59:9b:88:53:f5:86:d6:7e:e0:38:
5c:99:b5:2d:94:54:be:01:72:3c:1a:12:b5:d2:d4:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:B4:80:32:A4:EC:62:3F:BB:1D:CC:72:05:B8:75:83:F2:CA:68
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Gbi0gDKk7GI_ux3McgW4dYPyymg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
81.28.253.0/24
91.244.198.0/24
95.214.177.0/24
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:91:38:d5:d8:3e:a8:d8:1b:fa:40:71:af:0b:c7:de:3d:1e:
82:8f:f4:56:be:d8:c4:49:b9:4d:46:d6:55:75:a9:a5:5b:36:
b5:ba:69:c1:78:4e:4b:d2:b6:9f:7b:06:60:b3:48:bf:51:95:
b3:8e:80:82:82:fc:7e:ac:9d:8f:85:bd:c7:f4:0d:d1:11:f3:
8e:31:bb:87:29:5e:d5:9e:d8:b3:2b:c1:36:6f:80:74:31:54:
29:5a:25:87:a6:56:e0:e3:aa:bf:12:e5:3a:1d:ac:93:c5:1c:
55:c4:14:45:b0:e5:b2:b7:1b:83:31:8f:e7:c0:6f:bc:7d:48:
2a:73:13:25:6d:a1:a3:fa:25:8c:9c:bf:8d:2f:6c:1f:cd:fa:
c1:0a:fe:17:a3:df:35:79:2b:15:f1:21:24:5c:f6:c6:ac:3a:
0c:99:27:92:93:ee:09:64:75:3e:be:14:7a:1c:88:c5:c9:05:
e4:6c:ec:56:17:d7:ab:7d:87:0b:ee:37:f9:21:ab:c5:4a:27:
a5:56:0c:9c:5d:eb:ee:63:9a:3b:03:a4:8c:fc:f9:c8:5b:0f:
e9:47:87:f4:a0:1f:4e:4f:37:d6:b8:2c:7a:eb:ea:90:73:65:
79:96:41:8b:6e:15:e4:57:15:de:c8:01:f8:ad:65:4c:45:83:
f2:d7:81:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 07:57:06 2023 by rpki-client on console-fra.rpki-client.org