Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/GHgRwpDgp2TKj2bPSfwnnWVLaR8.roa
File: GHgRwpDgp2TKj2bPSfwnnWVLaR8.roa (raw, json)
Hash identifier: KpZma9MSxl84+lR3++yxeczLkr/wyGwqD98yiIPBrMo=
Subject key identifier: 18:78:11:C2:90:E0:A7:64:CA:8F:66:CF:49:FC:27:9D:65:4B:69:1F
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 018CC6B7886A3D02190CA673510519C2C11E
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/GHgRwpDgp2TKj2bPSfwnnWVLaR8.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44387
IP address blocks: 83.143.200.0/21 maxlen: 21
91.199.115.0/24 maxlen: 24
46.151.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:88:6a:3d:02:19:0c:a6:73:51:05:19:c2:c1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=187811c290e0a764ca8f66cf49fc279d654b691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:0a:ca:e3:37:4e:4f:1b:45:a2:ab:fb:e4:
7c:87:14:0f:ef:c3:d2:5d:e9:5e:ad:12:25:a6:55:
9e:21:1e:35:21:1b:37:05:c7:61:8d:bc:be:26:da:
38:95:c7:c7:f2:21:8a:25:06:a5:53:fe:18:e3:39:
38:dc:79:73:93:a3:56:87:5a:9f:c3:52:e6:c9:43:
79:ad:df:5e:87:6c:19:b3:03:22:44:28:61:45:27:
a9:87:ce:83:23:bb:0c:00:af:81:b5:e9:cd:b9:d5:
00:35:14:30:ae:e6:99:4b:cf:b5:4f:e6:5f:bc:d8:
5f:c3:3d:48:48:fb:46:d8:ad:90:a0:20:e6:65:03:
45:07:57:f7:8a:f9:86:db:b7:17:f9:cf:ee:2a:6a:
17:21:62:25:a8:94:a9:e9:fb:ab:5a:90:be:ae:51:
68:e0:d9:3a:0d:56:8c:7a:e1:3f:6c:60:18:ef:e1:
d3:b1:96:45:a8:e9:0b:7b:c9:83:db:bf:b7:3a:c8:
22:75:43:d2:e7:1d:b7:9d:f5:2b:4b:f1:a2:0c:23:
e5:7a:6b:bd:35:1e:a6:19:f4:83:21:2f:b3:f5:bb:
d1:65:1f:17:8f:0d:36:4c:3f:7b:cb:ad:f3:df:ff:
05:2f:35:91:02:7f:9b:2c:85:40:88:49:fc:e9:6c:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:11:C2:90:E0:A7:64:CA:8F:66:CF:49:FC:27:9D:65:4B:69:1F
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/GHgRwpDgp2TKj2bPSfwnnWVLaR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.48.0/22
83.143.200.0/21
91.199.115.0/24
Signature Algorithm: sha256WithRSAEncryption
54:92:ba:fa:df:29:8c:2a:bd:1b:79:a9:78:89:71:38:8b:ce:
9e:0b:ea:7e:1f:04:d9:33:82:7d:6b:70:be:38:bf:3a:77:8f:
be:2f:89:31:7a:c4:cd:14:69:f2:da:4c:da:3d:63:a0:79:85:
3f:5a:73:03:44:93:ac:3e:79:1e:63:05:39:9d:96:b6:67:74:
c5:85:71:63:73:da:cb:db:5a:f0:61:b5:0e:d7:7e:da:5b:a8:
d6:76:27:9d:72:59:c2:88:ba:4e:9e:3f:a6:cc:45:e8:d1:16:
04:7f:1e:6d:ea:c0:95:7a:15:25:a9:82:47:ad:37:32:3c:f3:
d9:d5:90:53:82:84:37:fc:e1:ae:13:b1:49:4f:3d:b6:ed:c4:
43:39:59:6f:e5:21:33:10:07:1f:94:6d:7d:e7:f6:af:42:0c:
5f:50:63:66:fa:90:f8:01:e4:80:1a:6b:f8:cc:77:1d:3d:1e:
e6:c3:67:b5:57:87:f3:2e:0b:b6:ab:d5:7e:37:03:de:af:5d:
9c:ed:f3:95:3e:df:2a:6e:2b:b1:3d:bb:93:8c:a9:7c:02:c5:
be:b6:d3:26:df:22:84:e7:ae:24:39:22:4e:6f:f9:15:0a:a2:
7e:ca:76:b0:c9:9c:35:bf:10:9a:66:23:55:02:38:75:1a:99:
bf:68:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:03:39 2025 by rpki-client