Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G5-0-xtieHY5uawKhZBE7JvtxEU.roa
File: G5-0-xtieHY5uawKhZBE7JvtxEU.roa (raw, json)
Hash identifier: cPYxL8z2OYcTbzmTtxnn4NOgqwHmOHSA0tlb9KEMVzs=
Subject key identifier: 1B:9F:B4:FB:1B:62:78:76:39:B9:AC:0A:85:90:44:EC:9B:ED:C4:45
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A9C969B31BC8734E5473232E23098270A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G5-0-xtieHY5uawKhZBE7JvtxEU.roa
Signing time: Sat 16 Sep 2023 06:03:50 +0000
ROA not before: Sat 16 Sep 2023 06:03:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 92.52.214.0/24 maxlen: 24
88.209.253.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.210.252.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9c:96:9b:31:bc:87:34:e5:47:32:32:e2:30:98:27:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 16 06:03:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b9fb4fb1b62787639b9ac0a859044ec9bedc445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:4b:b8:76:75:5e:2c:2d:b6:33:5f:6b:4c:
97:30:d8:77:ca:2f:22:af:f4:a5:d0:f0:af:92:bd:
70:5d:a8:50:6f:15:88:77:f3:5f:65:90:eb:80:b7:
e1:d4:10:42:cd:51:76:52:3f:4e:50:3b:3e:d1:ee:
68:c3:2e:63:2f:92:61:65:df:fe:44:c1:be:b4:17:
c0:09:a9:32:bc:54:93:d4:dc:5d:2e:04:8d:4b:0a:
12:bf:8e:fa:fa:f4:60:1c:20:f0:b0:a7:f2:20:4d:
16:ea:ba:14:c2:ed:bf:ff:ea:ed:15:60:56:25:db:
94:a2:11:57:eb:63:68:04:ba:31:57:f4:ce:0d:cc:
11:55:d8:56:72:23:74:d5:50:8d:f3:50:c3:fc:d6:
8f:9d:5c:e2:51:4e:f1:7c:a7:9c:c1:5f:65:ba:08:
07:e9:22:0d:a9:75:50:ce:e7:70:c9:4e:1e:5b:0c:
1b:2e:c2:d4:8d:1d:7f:e3:90:4f:ba:4c:9f:f6:3b:
28:c1:d9:9c:13:b3:09:64:81:6c:59:66:50:bf:e6:
d5:a4:c2:ff:d4:26:90:cd:2e:4c:28:68:74:ee:db:
1f:ba:a1:2e:54:35:09:7c:12:d9:32:b6:0c:a8:31:
2b:bf:85:43:c2:9c:50:25:fd:2d:c2:61:9b:93:48:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9F:B4:FB:1B:62:78:76:39:B9:AC:0A:85:90:44:EC:9B:ED:C4:45
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G5-0-xtieHY5uawKhZBE7JvtxEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.62.0/24
88.209.226.0/24
88.209.253.0/24
92.52.214.0/24
178.210.248.0/23
178.210.251.0-178.210.252.255
Signature Algorithm: sha256WithRSAEncryption
0e:8e:26:87:3c:8c:7e:29:c5:c9:cd:22:f8:66:9b:37:8d:94:
2e:42:7a:75:43:9c:91:60:19:ae:a9:08:9d:bf:90:e1:4f:df:
d4:1b:3a:77:93:97:2c:73:37:13:43:a2:38:77:72:7a:60:9c:
73:00:31:5e:fd:93:32:5a:0f:79:3d:38:aa:d3:24:9b:3e:1c:
4a:c5:05:5b:dd:74:ec:d8:e7:11:91:04:cb:d0:15:a2:f9:45:
4a:d7:1a:11:d5:75:7a:e3:24:19:3c:ca:7b:11:34:55:d7:9a:
bf:bb:02:84:da:df:c7:1a:11:da:37:fb:f6:56:f0:33:dd:d3:
ea:fc:ac:52:80:7b:60:8b:28:30:57:60:ca:8e:9a:bb:6b:68:
98:3a:d0:d4:f8:ba:ba:d7:f0:97:ce:81:db:a5:86:e6:b3:26:
03:d7:2c:98:f9:af:66:1c:15:a9:f8:4f:2b:ca:9e:b6:90:bf:
a6:6d:2b:71:c2:9f:b4:fb:a9:28:f9:25:3c:85:d3:cd:70:36:
e1:aa:54:30:2c:97:8a:ac:96:a1:5b:8b:dc:96:c8:09:99:5b:
31:b9:8d:8e:a2:43:a3:b3:aa:eb:a9:58:a2:f8:a9:da:84:c5:
69:3e:07:2a:c1:b4:5c:a4:1b:23:75:95:78:b5:f6:cf:96:85:
ce:bd:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 23 10:01:10 2023 by rpki-client on console-fra.rpki-client.org