Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GmAePMJEKLtL7MeDbKI9iiiuSno.roa
File: GmAePMJEKLtL7MeDbKI9iiiuSno.roa (raw, json)
Hash identifier: fysjZdQ1K7jKHzzUwzm8uuXt9uYv0eR6dlLtH86Q4SM=
Subject key identifier: 1A:60:1E:3C:C2:44:28:BB:4B:EC:C7:83:6C:A2:3D:8A:28:AE:4A:7A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0191CBA262E35B0562176531E513108DCF1E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GmAePMJEKLtL7MeDbKI9iiiuSno.roa
Signing time: Sat 07 Sep 2024 08:38:22 +0000
ROA not before: Sat 07 Sep 2024 08:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 2.58.171.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.59.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.209.192.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 08:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cb:a2:62:e3:5b:05:62:17:65:31:e5:13:10:8d:cf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 7 08:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a601e3cc24428bb4becc7836ca23d8a28ae4a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:52:5f:bf:a4:a8:44:0a:0c:33:66:d0:19:
3e:76:c6:95:b2:e8:d5:ca:99:5e:4e:2c:7a:96:68:
ed:a1:89:ba:1f:86:a9:11:04:61:08:cb:9b:d6:9b:
28:73:6e:43:e6:d9:68:86:94:92:9c:1a:2f:21:d1:
c1:20:e4:57:0c:26:dc:d2:3b:78:a7:19:40:a2:ba:
fe:61:94:f7:20:d2:84:c9:09:cb:73:c5:54:2f:f1:
24:78:39:60:7a:8e:88:51:89:d8:15:46:6d:18:01:
c3:af:05:ca:71:c1:09:a9:12:77:e2:b1:a5:a1:f5:
d5:76:b3:e1:8f:a6:1f:9b:55:84:d5:22:9d:41:dd:
a5:60:2a:2e:cb:47:bf:40:fb:33:40:f0:91:7c:4f:
56:ec:e3:3f:02:9d:6c:31:8b:69:b1:fb:cb:49:72:
fb:b7:46:b8:e5:cc:a4:cf:c4:4b:7b:e6:39:f4:0d:
94:95:11:3f:7c:e7:fc:10:d9:f3:78:31:58:e2:91:
6a:ac:e6:1c:ff:bd:52:92:58:16:72:87:da:ec:60:
3f:84:1d:c3:c0:eb:93:75:f7:9b:e5:02:e9:ff:be:
cd:da:b3:66:53:d0:26:b7:05:7b:a4:00:ab:a7:08:
45:57:45:da:3a:10:d1:b8:c0:aa:93:c6:ad:a5:8a:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:1E:3C:C2:44:28:BB:4B:EC:C7:83:6C:A2:3D:8A:28:AE:4A:7A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GmAePMJEKLtL7MeDbKI9iiiuSno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.171.0/24
88.151.56.0/24
88.151.59.0/24
88.151.61.0/24
88.209.192.0/24
88.209.194.0/24
88.209.207.0/24
88.209.209.0/24
88.209.221.0-88.209.222.255
88.209.224.0/23
Signature Algorithm: sha256WithRSAEncryption
01:09:27:72:17:66:43:4d:af:07:a1:97:36:ce:73:e0:4f:79:
6a:67:1d:55:41:62:27:2b:da:dc:1b:03:76:4d:6f:e8:17:f3:
ea:b1:fe:0e:2d:57:1e:1a:a0:e5:76:1d:9a:84:af:0e:b6:85:
21:a9:4c:c4:2d:14:51:ae:e8:aa:89:40:c4:bc:a5:70:d6:1a:
39:24:93:33:2e:59:7d:99:63:57:21:ff:3c:79:86:6c:4a:75:
20:84:54:f0:5c:fa:bc:8e:5d:4f:90:b9:8a:6d:ed:47:fb:ed:
89:f4:5e:0d:a1:36:61:ef:d6:89:22:92:8c:4d:c6:c0:a1:04:
56:e6:e7:7a:48:1f:fa:99:f0:4f:55:41:57:2a:1d:b1:08:b3:
2d:d8:b5:32:12:b6:22:e6:13:e1:88:59:f6:ba:e9:71:db:bf:
a7:be:00:4f:5e:02:4c:6e:b9:80:bb:1f:f5:9f:58:22:a3:d6:
aa:67:f4:ee:ac:24:59:bc:e6:d6:50:e8:20:8b:e2:47:fb:04:
f8:69:f9:e0:a4:a9:73:fe:1f:da:e7:b5:dd:82:db:e9:91:3f:
b2:d6:29:05:1b:fe:5d:74:4a:ac:24:fc:79:a5:c7:99:a9:a6:
fa:ee:bc:6c:23:dd:0e:eb:3d:7c:5a:c2:36:38:d5:99:5d:af:
cd:de:72:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 17 10:55:44 2024 by rpki-client on console-ams.rpki-client.org