Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/GTI9y5cxzLo6H2CBxoMZCSo65_U.roa
File: GTI9y5cxzLo6H2CBxoMZCSo65_U.roa (raw, json)
Hash identifier: L2RLnYe2svvH2VKBunTqQj3E07xg3BD0PVHViPkBxZw=
Subject key identifier: 19:32:3D:CB:97:31:CC:BA:3A:1F:60:81:C6:83:19:09:2A:3A:E7:F5
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01889C79403864E72B0427AFBA860A941C3F
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/GTI9y5cxzLo6H2CBxoMZCSo65_U.roa
Signing time: Thu 08 Jun 2023 19:26:11 +0000
ROA not before: Thu 08 Jun 2023 19:26:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 5.183.94.0/24 maxlen: 24
185.244.8.0/23 maxlen: 24
185.244.11.0/24 maxlen: 24
45.82.223.0/24 maxlen: 24
193.42.226.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:79:40:38:64:e7:2b:04:27:af:ba:86:0a:94:1c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jun 8 19:26:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19323dcb9731ccba3a1f6081c68319092a3ae7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:6e:4d:d1:40:a5:19:00:a7:bd:75:93:4c:
10:f8:b6:b5:9d:b3:0b:74:db:d3:9c:bd:d5:25:99:
81:88:06:cf:c2:80:e3:49:b2:ba:a5:78:21:b6:8e:
40:69:9a:c2:68:cd:7e:e0:af:e5:12:c7:88:27:24:
e4:43:ed:e3:53:80:0c:fa:65:e8:d2:f7:60:55:d7:
0f:a1:21:09:eb:39:e1:d0:aa:09:2a:6f:65:27:54:
a9:fc:9c:c0:59:4c:83:58:15:97:dc:89:6c:11:79:
b9:4c:00:4e:74:2a:45:41:01:35:40:15:85:f1:83:
36:ce:05:68:18:7e:e7:35:01:a2:8c:41:db:f7:7f:
e0:29:21:f7:2a:cd:c7:36:c4:c1:ca:4c:c4:cd:f5:
96:26:91:72:ed:15:a6:7b:29:e5:37:43:19:a1:95:
7d:c3:32:ab:e5:a6:9e:67:d3:35:13:58:61:88:dd:
4c:50:7a:30:41:d1:8b:61:e2:af:9e:c9:4a:0e:cb:
d7:e1:10:c5:c6:e7:73:15:bd:f4:4e:bf:12:39:2a:
37:e9:27:17:15:8b:aa:95:ee:49:af:6b:93:f2:56:
bc:43:bb:5e:0d:09:e3:13:53:a2:62:b3:62:91:b8:
96:f6:e7:03:f8:b6:26:f8:81:e0:2e:ff:03:5a:14:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:32:3D:CB:97:31:CC:BA:3A:1F:60:81:C6:83:19:09:2A:3A:E7:F5
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/GTI9y5cxzLo6H2CBxoMZCSo65_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.94.0/24
45.82.223.0/24
185.244.8.0/23
185.244.11.0/24
193.42.226.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:53:3e:cd:e0:92:7d:19:e3:13:4a:cb:e9:5e:15:00:8e:fb:
47:15:d1:c9:73:6c:97:36:61:49:26:52:be:0d:31:47:76:d3:
92:c2:56:fc:78:60:9a:ba:92:3d:80:67:17:13:15:8d:7f:48:
f6:40:97:38:ce:28:b5:87:ed:6c:6f:28:4d:e8:6d:30:16:a4:
2f:e7:27:b5:78:21:7f:0a:51:14:01:e6:6c:94:58:12:e5:33:
ce:88:86:c2:3f:87:92:92:48:b1:c1:d5:86:71:36:31:af:91:
b4:10:70:90:a0:63:4a:be:e7:52:ba:a2:20:4f:65:99:23:70:
93:c5:f5:1c:ed:d0:d9:19:a6:b9:48:ee:90:27:66:56:dd:30:
81:66:8d:4a:ec:58:ee:e6:b3:b6:f6:85:05:65:17:e8:63:e3:
d4:3c:10:1f:f4:cb:9e:f0:70:6b:c1:60:d3:29:0e:cd:4a:7b:
04:c6:c4:c1:dd:48:f5:2c:db:ef:62:1b:79:97:8d:2b:39:12:
37:4a:3c:0b:96:18:a3:8d:28:91:c5:15:28:93:e8:a8:4e:9f:
84:5f:b3:50:ac:9c:a2:9f:29:b1:4f:73:c9:d7:9c:a8:42:f1:
d4:f9:c0:18:38:24:a0:cf:ab:fe:6f:77:9f:96:9e:6c:09:e5:
3e:95:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org