Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/gk1Vxctd_UGuITF32f9trKFgWMk.roa
File: gk1Vxctd_UGuITF32f9trKFgWMk.roa (raw, json)
Hash identifier: tiZ6wqRzRJaSOpiJjkk2wlRNcJQZHpkRYpWRddJNL3c=
Subject key identifier: 82:4D:55:C5:CB:5D:FD:41:AE:21:31:77:D9:FF:6D:AC:A1:60:58:C9
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 01856F5DD523257A0563E10C2B7E298215CA
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/gk1Vxctd_UGuITF32f9trKFgWMk.roa
Signing time: Sun 01 Jan 2023 22:04:58 +0000
ROA not before: Sun 01 Jan 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19551
IP address blocks: 149.126.72.0/21 maxlen: 24
149.126.75.178/32 maxlen: 32
185.11.124.0/22 maxlen: 24
149.126.75.177/32 maxlen: 32
2a02:e980::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d5:23:25:7a:05:63:e1:0c:2b:7e:29:82:15:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Jan 1 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=824d55c5cb5dfd41ae213177d9ff6daca16058c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:bf:14:17:7f:ca:34:4a:4b:19:a7:d4:f3:
60:f1:29:7e:b4:00:23:e7:c6:a8:81:0f:5f:46:d2:
5e:36:e2:83:01:7b:1c:4c:e6:91:2d:f5:30:f2:e8:
69:fc:a0:4b:a0:91:ee:67:a8:6d:73:e8:73:b5:da:
f4:45:17:05:52:1e:fd:99:fd:cb:23:af:91:c9:63:
6c:a3:51:95:e4:c9:c5:7f:ea:4b:b0:23:6c:cf:46:
f0:34:2f:79:df:49:24:91:b8:4c:73:18:30:f0:17:
2b:6d:d9:a3:89:5f:44:3a:e0:ed:fb:d4:32:8a:81:
60:18:1b:98:1e:1b:6b:ab:c3:8f:56:04:1d:be:a1:
37:ec:01:45:46:0f:b3:71:d6:69:f4:7a:cf:99:5a:
3e:25:80:ff:5c:0d:67:9c:5b:cd:0f:08:50:fb:48:
c0:93:27:63:ad:f8:7e:39:49:0a:1b:7c:bf:ad:13:
ec:bd:4d:73:45:7a:fa:98:eb:49:0e:a3:a4:e3:a4:
36:28:2a:b4:02:8c:21:d8:04:24:f8:fe:8c:56:be:
fd:be:75:69:2b:f9:bc:6c:4f:54:e8:f0:4a:a9:a3:
80:36:f9:3b:9e:e5:bc:90:40:b1:72:2b:6b:53:30:
19:af:9d:e2:ba:05:3d:d0:de:9b:8f:cc:d0:7e:30:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:55:C5:CB:5D:FD:41:AE:21:31:77:D9:FF:6D:AC:A1:60:58:C9
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/gk1Vxctd_UGuITF32f9trKFgWMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.72.0/21
185.11.124.0/22
IPv6:
2a02:e980::/29
Signature Algorithm: sha256WithRSAEncryption
1d:ae:c0:5c:a0:25:bb:80:af:71:ba:cc:56:52:04:47:8b:29:
f7:2f:1d:1a:5b:7f:37:65:20:42:29:02:c3:1f:a9:5b:cd:87:
89:cd:a7:31:2f:4a:22:37:15:04:1f:20:bc:8b:ce:84:04:95:
4e:80:c4:79:95:90:9b:8a:fa:33:d5:05:98:5d:b6:76:3e:7c:
f4:12:5a:95:c7:d8:3a:85:01:fb:dd:f4:d8:d9:52:1f:d1:c1:
bf:92:70:93:ac:51:98:21:4b:80:6a:64:ae:c5:0f:c4:df:ba:
a6:29:72:78:e6:bf:fb:e5:c7:e7:c8:08:35:16:b7:d4:46:9b:
81:9d:45:9b:cc:68:2a:62:a4:31:b4:52:93:2c:ae:dd:75:06:
1d:9a:1a:a5:17:5a:d4:52:55:21:97:9c:3e:3d:99:3b:05:51:
45:8d:1e:cd:20:83:d8:b7:4a:ec:23:44:32:17:40:c3:93:21:
0c:3f:47:de:dc:73:8f:78:14:c1:df:bf:1d:47:f6:89:88:9a:
a2:d8:be:1e:2d:3c:0e:e5:cb:55:02:54:e0:0c:2b:ee:73:a9:
0b:3e:89:d6:94:95:ae:80:5c:1a:7c:35:26:d0:10:ce:6b:57:
f5:c3:ae:62:32:85:78:b7:17:0c:06:b1:8a:17:e8:cb:40:fc:
88:0d:2e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org