Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/GYYrez0Hv2ddLEBRr4ZecOG6m0Y.roa
File: GYYrez0Hv2ddLEBRr4ZecOG6m0Y.roa (raw, json)
Hash identifier: 2KQ2/Pa9sCfT6UAtWk7ADwIRQQcW+07xtZYzLkOxcfM=
Subject key identifier: 19:86:2B:7B:3D:07:BF:67:5D:2C:40:51:AF:86:5E:70:E1:BA:9B:46
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 019270AEBAFA261FDA61445C30759483548A
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/GYYrez0Hv2ddLEBRr4ZecOG6m0Y.roa
Signing time: Wed 09 Oct 2024 09:49:12 +0000
ROA not before: Wed 09 Oct 2024 09:49:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 213.109.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 12:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:ae:ba:fa:26:1f:da:61:44:5c:30:75:94:83:54:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Oct 9 09:49:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19862b7b3d07bf675d2c4051af865e70e1ba9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:28:38:34:4a:c2:0c:c3:d2:64:b3:d4:96:
4f:a0:9f:53:c3:fe:8c:86:f1:d1:2b:b1:50:a4:56:
2e:b5:92:22:d0:02:df:27:cf:80:a7:22:14:61:65:
a9:25:52:4c:9b:cb:a2:04:06:67:75:2e:a8:fb:0c:
30:1a:7e:45:ba:98:16:9c:dd:72:3a:24:7f:fb:88:
92:de:5c:7a:ae:3b:cc:85:ce:a9:af:15:3c:09:04:
fc:bc:5e:9e:f9:40:6a:5f:e8:8b:6b:a8:e8:e5:66:
0b:52:3b:3d:09:ae:13:15:55:e8:de:c9:44:ea:8e:
99:d3:f5:7f:dc:68:ca:4c:19:6c:c1:2c:b6:8a:e0:
94:59:1e:a2:ac:ef:77:ec:3c:85:6e:c2:c7:cc:1f:
69:78:75:df:6f:87:1c:2e:50:eb:25:0d:5e:24:04:
44:bc:74:88:75:52:7b:35:56:e3:e2:5d:61:71:d5:
23:ef:7e:19:4c:61:79:5e:2b:d8:1e:0f:d8:28:2c:
1c:19:7d:5e:20:29:95:c2:94:40:ce:26:62:dd:9c:
42:6b:94:ed:c0:b3:e5:3a:91:2e:89:7e:69:9b:aa:
81:11:ce:23:a7:9e:13:28:03:b1:be:94:e8:49:74:
69:96:b5:66:a8:7a:9c:29:5b:5b:2b:73:a2:7e:94:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:2B:7B:3D:07:BF:67:5D:2C:40:51:AF:86:5E:70:E1:BA:9B:46
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/GYYrez0Hv2ddLEBRr4ZecOG6m0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0d:2f:de:93:f5:3e:11:99:98:f3:09:bb:06:7d:cc:bd:69:
c1:07:3b:ee:d4:4d:cc:54:da:dc:f1:5f:a0:29:0f:f6:5b:34:
17:46:8f:92:41:f1:83:77:15:e6:7d:72:4a:0a:d4:b2:c8:ab:
7c:96:b3:e8:3e:c4:20:5c:9f:4d:b0:9a:8c:bb:e0:a0:da:69:
98:39:36:e4:d3:ef:a4:78:c3:45:22:67:b5:48:6d:8f:e7:f0:
a1:88:53:08:77:34:56:d7:76:ec:82:71:8c:dd:7a:91:9c:46:
1d:42:3f:2e:f1:42:15:73:93:4b:ea:51:ea:d3:ef:53:49:81:
13:05:78:ed:6f:09:18:d5:5c:83:96:e8:ee:0c:73:6a:ba:85:
c4:f2:bf:00:11:9e:cb:fb:d7:15:09:3b:b2:26:17:33:a8:06:
e7:44:4e:7a:65:de:15:10:86:3f:6f:1b:c0:54:7a:67:e4:b9:
ea:96:32:a1:5b:a5:6e:4f:08:9e:b8:4e:3a:a9:f1:fc:0e:e2:
4f:27:a8:85:2f:12:0a:23:22:ea:5e:dc:9c:e0:d6:ea:06:ad:
a2:78:03:18:ca:5f:90:d7:f2:ce:85:53:ad:da:93:3d:b4:58:
72:d8:cd:6b:9e:9c:c8:f3:4c:83:27:3c:6e:7e:5b:42:90:f7:
ce:25:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 19:11:15 2024 by rpki-client on console-ams.rpki-client.org