Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/glCx08P4ZFHotEShm0pWhWYWBCU.roa
File: glCx08P4ZFHotEShm0pWhWYWBCU.roa (raw, json)
Hash identifier: m9kg+hX1DYaALTShw0tFNfxTS6VKuepkpzd2XfWRkKw=
Subject key identifier: 82:50:B1:D3:C3:F8:64:51:E8:B4:44:A1:9B:4A:56:85:66:16:04:25
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018F6B9BB1940A62F2388B30F3CB3681051F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/glCx08P4ZFHotEShm0pWhWYWBCU.roa
Signing time: Sun 12 May 2024 07:01:56 +0000
ROA not before: Sun 12 May 2024 07:01:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.164.0/23 maxlen: 23
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 12:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6b:9b:b1:94:0a:62:f2:38:8b:30:f3:cb:36:81:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 12 07:01:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8250b1d3c3f86451e8b444a19b4a568566160425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:c6:15:d9:e3:a0:18:b3:05:93:92:a9:0c:
ca:cc:43:28:1e:1c:52:09:45:b5:e8:da:2e:b9:ae:
f8:b8:e7:b2:62:7d:a7:e9:d0:d7:bb:ee:4d:fd:52:
ea:34:88:b5:86:19:02:6c:00:bc:81:8d:78:a2:0e:
24:da:4b:68:43:3c:b4:08:9a:42:60:60:ae:00:d0:
8e:72:de:a3:a1:7e:0f:a0:62:7e:09:3c:15:b4:c9:
ea:f3:61:d2:6f:ae:f8:25:cb:b9:b7:bc:c4:4e:8a:
f9:95:6a:34:8a:e6:9f:3b:dd:6f:c2:69:a3:ad:cb:
ed:b0:ee:08:6a:2b:cc:95:3d:34:43:17:a3:cc:60:
56:72:13:aa:41:d6:ec:16:ef:31:57:dd:29:b1:d7:
1a:54:75:fb:33:be:b8:ce:8f:ca:b8:7a:28:43:04:
7a:c4:20:64:39:bf:07:2f:6f:5f:70:dd:ca:0e:67:
e7:4e:af:3a:ce:ab:0c:58:d8:c6:d2:49:ea:8d:ad:
f0:60:87:2e:84:1f:94:6e:40:e0:0c:ae:ad:6b:77:
d7:c4:dd:64:38:de:87:6e:13:10:db:2d:2c:3c:58:
f9:18:0e:6d:53:85:3a:4d:c3:68:f4:c7:31:3e:0e:
21:8a:1f:19:ae:2b:e8:70:c7:75:6d:a6:14:43:98:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:B1:D3:C3:F8:64:51:E8:B4:44:A1:9B:4A:56:85:66:16:04:25
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/glCx08P4ZFHotEShm0pWhWYWBCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.204.0/22
94.241.164.0/23
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:dd:b5:24:20:b7:cf:a5:4a:4b:41:58:19:98:0f:0e:93:35:
5b:9b:5b:4b:cf:e2:5f:4f:7d:ff:5f:bc:9f:80:13:a4:37:68:
f7:52:71:96:60:fb:81:98:0f:90:4a:e7:41:a7:c2:c3:93:20:
5c:4d:32:11:09:b8:06:20:e3:06:a3:96:4c:e2:25:57:c7:98:
29:49:9c:c5:24:29:4a:b4:9c:2c:c5:4e:9f:88:ee:ff:23:aa:
d4:66:21:99:77:ec:6a:10:dc:c2:19:9e:8f:79:f8:77:a9:ec:
45:a6:8a:0c:2e:39:b1:67:53:cd:5b:b6:5b:0f:a8:f1:e3:1a:
6b:cb:c4:62:fa:8f:14:6a:1e:81:ea:78:4a:ce:2b:29:d1:f6:
a4:67:9d:0f:fa:80:8f:50:e8:19:bd:18:f1:04:1b:69:f6:ed:
af:20:60:c9:1a:c1:7e:2e:02:68:a3:c4:ae:e4:75:76:e2:4c:
eb:a4:4b:af:ca:59:05:bd:47:8c:76:a1:ce:47:99:78:13:1e:
e1:ff:bd:0f:16:ad:4f:cc:e0:a2:ac:89:1e:59:92:15:0a:fb:
ea:38:35:a7:27:e0:68:37:03:eb:50:0e:50:9f:29:f2:1e:46:
a8:11:a6:ab:b9:fc:1f:13:2d:29:de:50:11:35:82:fe:ce:5e:
2e:c1:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org