Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/gd7Il8EzGcZ9yfruAd9jlTjwfR8.roa
File: gd7Il8EzGcZ9yfruAd9jlTjwfR8.roa (raw, json)
Hash identifier: 29E///SocS85NySTBUpHf/wqFqkgBa0fdLux3s4TsB8=
Subject key identifier: 81:DE:C8:97:C1:33:19:C6:7D:C9:FA:EE:01:DF:63:95:38:F0:7D:1F
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01896499DBBCE3464C4382BA2AEB5D9AB6D2
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/gd7Il8EzGcZ9yfruAd9jlTjwfR8.roa
Signing time: Mon 17 Jul 2023 16:05:52 +0000
ROA not before: Mon 17 Jul 2023 16:05:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 194.156.122.0/24 maxlen: 24
193.32.190.0/24 maxlen: 24
194.156.26.0/24 maxlen: 24
77.83.72.0/24 maxlen: 24
45.92.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 19:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:99:db:bc:e3:46:4c:43:82:ba:2a:eb:5d:9a:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 17 16:05:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81dec897c13319c67dc9faee01df639538f07d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:96:07:30:5b:e6:0e:21:b8:9b:84:4d:d5:
ba:09:98:d9:83:22:9e:ac:0f:d1:fc:cd:db:c9:b0:
10:f3:49:0d:3b:18:aa:c1:d4:bc:52:11:2e:bd:47:
e3:18:62:c5:1b:d6:cf:45:d1:b4:68:af:98:28:1c:
2a:a7:81:17:86:88:2f:14:11:63:f5:1d:c0:47:cb:
f4:7a:89:80:bd:70:9d:75:25:39:f2:da:a7:59:1d:
ee:30:67:f3:c7:40:d4:10:27:13:ca:02:04:2f:cb:
f1:3f:e1:b8:52:85:6f:19:98:e7:4c:e7:0a:d7:88:
ee:de:da:57:1d:ef:f3:cc:4c:0e:36:a0:a9:b8:b4:
45:0c:d2:00:9f:f1:73:f9:78:36:80:8d:d9:5d:68:
2e:67:18:63:28:c4:04:78:30:d1:d4:ee:ae:7f:4a:
32:f9:0e:e4:0f:bb:0a:a6:03:6b:29:bb:55:71:03:
d3:25:bd:fc:51:12:11:2d:27:58:ba:2f:52:47:a9:
e3:88:d5:39:91:e9:5c:16:ab:92:7c:2c:55:ae:06:
6c:62:2e:c5:46:30:b8:0b:c8:d3:df:2b:a1:78:8b:
fe:f1:70:44:06:a6:95:38:e2:60:e2:01:e7:48:bb:
55:32:a9:a2:0b:95:1c:85:b2:a9:01:19:fc:16:5e:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:C8:97:C1:33:19:C6:7D:C9:FA:EE:01:DF:63:95:38:F0:7D:1F
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/gd7Il8EzGcZ9yfruAd9jlTjwfR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.174.0/24
77.83.72.0/24
193.32.190.0/24
194.156.26.0/24
194.156.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:15:c2:a9:86:b8:d9:89:84:dc:6c:ca:39:1f:27:13:57:f9:
a8:56:e0:27:83:af:c0:06:9c:b0:d8:ef:e0:a2:71:12:ad:4d:
dd:b4:8f:79:4a:02:26:99:32:06:a5:93:1f:6e:e9:64:db:b1:
a2:c8:a9:31:fd:77:5a:95:d3:41:f8:2b:68:40:a0:47:5e:dd:
fb:b2:46:8b:f4:dd:21:67:69:93:d6:48:e3:cd:3d:92:db:74:
61:94:8d:aa:20:a7:37:b2:7c:2b:42:53:09:2a:c0:eb:fe:d9:
ea:18:10:58:75:b9:fb:8d:c1:a4:33:11:c3:b3:1b:c9:9a:d4:
71:bc:35:21:64:6d:80:f4:de:68:54:0d:95:16:95:ba:e1:91:
7c:03:c4:c3:aa:41:88:fa:0e:41:d6:f1:e3:97:c3:6a:6c:1c:
27:9d:bd:08:54:f9:d4:0e:e3:51:17:fe:1d:e4:cf:df:c8:ed:
26:76:76:48:85:20:62:b8:6c:27:12:46:df:46:37:26:d3:56:
58:11:81:6e:3a:3c:fa:6f:d6:10:41:0d:a0:54:de:23:37:2a:
07:55:4d:de:c9:e0:b6:bc:6e:8e:5b:4e:6d:a4:4f:1c:d9:49:
e5:01:6a:d4:7a:70:9a:23:1d:2b:74:43:b4:aa:64:12:d6:d8:
12:5d:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org