Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/gNDS2m9E6OrMW-s0FSmI7qV2sw0.roa
File: gNDS2m9E6OrMW-s0FSmI7qV2sw0.roa (raw, json)
Hash identifier: r7FolWX1mVlXXkhHzU9eK36U+wK/5CAq3JWQv/Mk4AQ=
Subject key identifier: 80:D0:D2:DA:6F:44:E8:EA:CC:5B:EB:34:15:29:88:EE:A5:76:B3:0D
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 01856EC206039EFEDF64D0AE0460CC4A049A
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/gNDS2m9E6OrMW-s0FSmI7qV2sw0.roa
Signing time: Sun 01 Jan 2023 19:14:47 +0000
ROA not before: Sun 01 Jan 2023 19:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204287
IP address blocks: 89.46.152.0/21 maxlen: 32
77.81.104.0/21 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:06:03:9e:fe:df:64:d0:ae:04:60:cc:4a:04:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 1 19:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80d0d2da6f44e8eacc5beb34152988eea576b30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:e9:c0:7f:16:2d:7d:1e:0e:2a:1a:d5:10:
8a:df:eb:c9:67:1b:e1:d9:e5:d3:68:51:fb:f9:49:
9a:ce:9d:b8:d8:19:32:df:43:ae:8e:84:7f:1e:69:
a0:e7:5b:7c:c0:d9:f4:d2:10:50:f7:a4:74:58:c0:
1c:3c:f4:01:b4:10:6e:f8:39:04:e7:8d:19:61:c7:
5e:92:9a:af:cd:0f:43:dd:61:9e:3f:9d:fe:6c:87:
3c:23:66:5c:92:5f:6e:3a:66:68:88:58:8c:4c:45:
6b:34:14:3a:05:b9:0b:1d:19:1a:eb:da:e4:21:01:
23:d5:3c:42:52:4a:fa:a5:52:34:a5:cb:bf:d3:6b:
df:f5:48:88:1a:68:f9:5b:55:7b:ca:c0:06:ac:a1:
80:c6:fd:e9:b8:5c:3c:09:23:cf:5d:c3:77:05:f1:
0d:9e:a6:9e:7b:70:20:6b:50:e4:5e:67:76:8e:36:
d5:1a:f6:0f:64:d4:29:5a:3c:4e:da:cd:f9:37:97:
d0:7a:cd:46:5c:5c:ed:d3:a3:aa:06:09:86:71:e5:
9a:65:66:c7:cd:b9:16:be:d5:7f:4e:ba:47:32:fa:
4c:0b:a0:45:b4:3c:49:39:b1:b8:ab:e1:d7:d1:d6:
12:59:f2:39:90:2a:35:34:08:22:89:15:5a:a4:79:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D0:D2:DA:6F:44:E8:EA:CC:5B:EB:34:15:29:88:EE:A5:76:B3:0D
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/gNDS2m9E6OrMW-s0FSmI7qV2sw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.104.0/21
89.46.152.0/21
Signature Algorithm: sha256WithRSAEncryption
02:c1:45:b0:e5:54:7f:04:cf:ad:88:73:75:80:a8:61:6e:86:
74:b2:d6:f9:ae:e5:52:7a:1f:cb:3d:9c:60:3f:a8:0c:f2:79:
ce:5e:99:de:c1:8f:7c:be:51:17:a7:9b:7d:4d:20:16:3f:2d:
9d:74:8d:9a:8e:14:d6:f8:0d:a4:9d:f2:45:77:03:84:90:8d:
cd:93:f4:8b:4e:19:f7:cd:03:8d:e0:58:77:75:b1:80:0b:6a:
e0:93:d4:67:ec:58:59:19:07:18:c5:66:dd:97:a1:62:88:1f:
dc:93:fd:04:97:c1:15:ae:0e:3b:6e:a9:63:ce:4e:f1:d4:bc:
47:36:70:a7:df:4c:6e:14:da:3c:7e:19:08:e4:8f:4e:2a:09:
50:a9:c3:fb:1c:22:f0:45:ed:54:6d:8a:e7:ba:3c:76:ae:33:
bd:70:2e:5f:6e:96:4f:b9:12:45:00:07:f5:a9:87:c7:84:2f:
8c:ae:46:f1:ce:11:cb:8e:a2:82:8f:16:8a:dd:56:be:17:0f:
12:f4:2b:c2:e4:e9:07:dc:a6:e1:10:9a:f5:a0:0a:e7:85:d8:
e8:09:19:60:e7:95:7d:a9:28:12:e7:17:96:23:3a:e3:4f:aa:
9f:7e:41:8c:05:2e:7d:46:f6:c3:00:70:4d:c4:34:1b:76:3c:
0e:d9:09:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:24 2024 by rpki-client on console-ams.rpki-client.org