Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/gfJk1Nb4yWWCiKTL8qoydk0IL4A.roa
File: gfJk1Nb4yWWCiKTL8qoydk0IL4A.roa (raw, json)
Hash identifier: XSLBj4p5QA2LjbchAIDUAdOXO2+ME71lZkYYL3gnT6A=
Subject key identifier: 81:F2:64:D4:D6:F8:C9:65:82:88:A4:CB:F2:AA:32:76:4D:08:2F:80
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 01856DCACD8C619FD2D948997417A1742674
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/gfJk1Nb4yWWCiKTL8qoydk0IL4A.roa
Signing time: Sun 01 Jan 2023 14:44:45 +0000
ROA not before: Sun 01 Jan 2023 14:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31331
IP address blocks: 83.150.160.0/20 maxlen: 20
83.150.184.0/21 maxlen: 21
83.150.128.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:cd:8c:61:9f:d2:d9:48:99:74:17:a1:74:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Jan 1 14:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f264d4d6f8c9658288a4cbf2aa32764d082f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:64:7d:2f:22:45:1e:e0:16:12:65:bd:52:
50:c6:88:2d:48:8f:d1:34:73:d9:1d:95:d2:65:05:
f9:a3:46:67:31:80:ea:87:ee:a7:b6:d4:ec:34:3e:
a1:4c:ca:16:0b:ca:1f:36:80:0c:a4:77:e6:1e:46:
ce:38:7e:aa:76:a3:38:37:d5:28:24:8e:05:bb:e3:
22:df:a1:bb:52:33:ec:11:b1:af:f7:8f:97:92:b3:
d3:90:90:01:2a:8c:cb:44:65:3c:c5:82:33:f3:8d:
62:1f:c3:b5:cb:fc:67:00:01:4d:0e:79:06:f8:e4:
ee:c9:d8:c5:50:86:aa:8b:de:25:f4:7d:57:9a:68:
cd:1d:3c:c6:3d:2c:cc:6c:71:22:44:02:86:43:6d:
ae:d2:81:8c:f6:b1:fb:38:d1:f1:ae:f5:56:9c:1c:
5d:88:37:43:98:42:9e:59:6b:fc:55:30:ae:9f:30:
dc:5e:c3:67:77:b6:84:68:9c:0f:b7:66:56:2a:7d:
8c:5c:5e:f1:6b:89:19:cc:68:7f:96:49:1a:a8:de:
16:51:67:06:6d:22:ba:87:2c:90:09:14:03:86:20:
f1:83:28:70:5e:fe:b7:95:5a:76:67:ea:35:87:01:
4f:f4:d0:6c:9b:16:4a:ee:1d:f3:56:28:45:d4:b9:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:64:D4:D6:F8:C9:65:82:88:A4:CB:F2:AA:32:76:4D:08:2F:80
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/gfJk1Nb4yWWCiKTL8qoydk0IL4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.128.0-83.150.175.255
83.150.184.0/21
Signature Algorithm: sha256WithRSAEncryption
c4:fe:32:71:d2:36:2a:0e:32:39:46:5b:18:0c:b3:fd:23:99:
30:ec:1e:e3:7d:5f:59:95:7d:3e:05:8f:b0:ad:ec:b1:d2:f1:
cf:bd:b7:03:ab:41:b9:2b:bb:3e:98:9e:29:51:7f:2d:be:52:
39:0b:b1:57:a1:3a:ba:36:ac:73:93:51:9b:0e:30:c6:d9:07:
bd:4d:e1:66:d4:0a:67:74:9d:5a:44:ad:eb:8d:cb:de:29:b3:
f0:f8:a8:84:10:ce:74:9b:54:ca:a1:9d:b4:59:5c:71:01:bf:
7f:13:96:81:8c:db:ce:ba:20:39:73:33:6d:7d:61:1f:2e:a9:
0f:1b:14:b3:a2:39:1d:df:8d:f2:c3:8e:84:17:04:0d:0d:2d:
0e:80:ec:0a:23:22:cc:d4:3d:3b:64:cf:f8:5c:f0:9c:7f:14:
3a:13:68:58:5a:14:a8:a8:46:7d:f6:bd:2f:64:4c:37:ae:2e:
87:d4:3f:97:b3:17:86:bc:6e:33:51:d3:4f:ed:17:65:0f:0d:
de:65:ec:60:4e:43:b2:56:0d:08:58:6f:e6:98:c5:d3:3f:a0:
8b:31:d6:b7:87:9e:b7:f3:5f:ba:f2:81:97:e2:4b:18:36:87:
9d:be:4f:f7:8d:e6:67:8e:02:3c:92:33:b1:89:d7:80:c6:c8:
fb:05:a5:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:51 2024 by rpki-client on console-ams.rpki-client.org