Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-3GPn7gf6e1QwGtdCa8SVl9giSE.roa
File: 1-3GPn7gf6e1QwGtdCa8SVl9giSE.roa (raw, json)
Hash identifier: U7YbGUO9A4iVbmyqPBfizXWJf0hMkNt8XKDjFKrYjiI=
Subject key identifier: FB:71:8F:9F:B8:1F:E9:ED:50:C0:6B:5D:09:AF:12:56:5F:60:89:21
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018B812DADE8542E561EE4B6860D4FA38019
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-3GPn7gf6e1QwGtdCa8SVl9giSE.roa
Signing time: Mon 30 Oct 2023 15:22:16 +0000
ROA not before: Mon 30 Oct 2023 15:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 192.36.247.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
192.71.255.0/24 maxlen: 24
192.71.254.0/23 maxlen: 23
193.182.113.0/24 maxlen: 24
192.71.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:2d:ad:e8:54:2e:56:1e:e4:b6:86:0d:4f:a3:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 30 15:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb718f9fb81fe9ed50c06b5d09af12565f608921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:f4:cc:18:c4:2e:83:55:33:4c:2e:ed:2f:
99:eb:ef:b8:eb:f6:af:3b:79:b4:66:09:7c:da:02:
36:35:31:fb:b4:4a:ad:96:65:db:8b:d5:84:9e:aa:
33:f5:54:b8:e9:5b:5b:b7:23:02:41:24:9a:21:a4:
7d:6a:ee:38:f9:6e:13:f3:7a:bd:a1:38:65:5d:81:
a9:d3:d5:e6:18:8f:f4:fb:22:4a:19:91:cc:2a:d3:
18:02:1d:ef:28:fc:60:28:f7:93:ca:78:8b:64:62:
86:f3:e0:63:c5:ac:81:c6:d2:b5:0d:72:07:aa:b4:
19:2e:ee:b5:7d:52:75:78:14:aa:98:46:03:de:b4:
63:8b:c3:2a:b8:09:ea:f3:dc:b9:8a:56:8b:2c:93:
04:b1:8b:82:89:9e:c7:35:0a:37:e6:82:8d:e8:cb:
08:cc:8f:71:9c:1a:de:4c:b4:54:03:6a:23:cd:05:
92:91:44:f1:90:7b:ca:55:ab:a8:23:87:31:4c:9a:
65:c8:c2:8c:ab:02:21:87:f9:c5:9c:b9:1b:86:05:
5c:4e:aa:5f:03:07:0c:61:e9:7f:f8:14:06:2c:9b:
19:7c:ae:33:5e:1e:da:0d:bb:aa:a4:18:0b:df:d2:
85:15:4e:ff:b7:a4:f7:d8:c5:0b:42:a0:6f:76:50:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:71:8F:9F:B8:1F:E9:ED:50:C0:6B:5D:09:AF:12:56:5F:60:89:21
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-3GPn7gf6e1QwGtdCa8SVl9giSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
192.71.84.0/24
192.71.254.0/23
193.182.113.0/24
193.234.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:91:a7:76:37:9f:82:a6:cb:ba:18:17:95:cd:48:ca:1d:7f:
44:af:2a:f7:8a:10:95:18:68:30:a8:a0:b7:73:e9:ef:19:68:
e2:33:b9:e1:ae:87:3e:c3:36:09:c8:6f:75:0e:14:2a:e8:05:
53:71:ad:20:38:1a:e8:12:cb:c1:ba:ab:fa:c8:f6:1e:a2:0c:
60:60:d4:30:e0:40:55:a4:27:a3:6a:9e:77:57:a1:26:a7:91:
bc:77:86:30:1f:ae:cc:d6:ba:b0:34:a9:d6:f9:7e:17:52:f8:
44:9b:ae:79:88:41:91:3f:26:0f:d7:fd:33:d7:a9:4d:a8:bd:
b7:e0:f8:46:1c:f5:87:f4:57:8d:f4:74:ac:eb:7c:5f:b7:60:
f6:f4:b5:7a:ab:3c:ba:4e:1b:e2:f7:b8:31:87:4d:19:52:e8:
b9:7c:6c:5c:61:5e:19:d8:fb:51:cb:72:00:06:62:cc:a1:e5:
d9:d7:4f:b5:ad:ce:f9:92:9a:d3:a0:c3:b5:ef:58:3e:f1:bf:
ac:4f:68:7f:b3:66:37:63:4e:68:d3:40:55:92:ec:c6:b0:50:
26:b9:60:32:c7:55:07:c7:09:41:2e:3a:1b:f2:45:ed:b7:78:
6c:3f:08:1c:6d:d3:d1:17:85:23:42:02:c4:6f:2f:4a:43:30:
1e:9b:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org