Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/GPzRU6cmgEFV-MtubmogXQEBZZA.roa
File: GPzRU6cmgEFV-MtubmogXQEBZZA.roa (raw, json)
Hash identifier: YvQQ2oUXSvRPqVyY6dNveWABbE1O1ELkHAVNrIyT04Y=
Subject key identifier: 18:FC:D1:53:A7:26:80:41:55:F8:CB:6E:6E:6A:20:5D:01:01:65:90
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 018571954093C84ABCAE2293072295E5DAB7
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/GPzRU6cmgEFV-MtubmogXQEBZZA.roa
Signing time: Mon 02 Jan 2023 08:24:44 +0000
ROA not before: Mon 02 Jan 2023 08:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211921
IP address blocks: 176.103.212.0/24 maxlen: 24
176.103.213.0/24 maxlen: 24
176.103.215.0/24 maxlen: 24
176.103.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:40:93:c8:4a:bc:ae:22:93:07:22:95:e5:da:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Jan 2 08:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18fcd153a726804155f8cb6e6e6a205d01016590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:15:c0:e5:7d:70:7d:30:e7:23:37:55:53:
2e:32:25:88:af:5b:64:54:de:3a:f8:fc:cd:0c:cf:
e0:f4:22:5a:34:2f:c4:a5:5f:06:4a:b0:e6:fd:ea:
12:b0:ce:3a:ec:8c:0b:94:97:9c:5a:35:95:ee:34:
38:92:1d:06:59:e3:a4:7b:38:7a:b0:d1:22:0a:c7:
a8:79:c5:11:e2:ef:0a:2a:28:91:54:a1:52:fd:07:
3c:03:ea:24:4b:d8:0f:46:b6:b4:b2:08:d8:d6:8d:
e9:f1:ee:d5:8a:1f:9a:2b:6c:41:b7:7b:9b:8f:b1:
b0:b7:3e:5e:04:36:fb:4d:6a:2d:ac:19:98:9d:37:
a0:e8:41:e3:8e:e2:46:bb:14:89:aa:33:e7:f3:75:
5f:b4:7c:bb:4b:aa:ef:6b:90:85:f6:d1:47:43:6d:
2b:5f:98:b3:d4:f8:c6:dc:2e:da:c6:47:c1:69:b3:
58:36:e4:e8:25:59:37:cc:7e:18:79:83:ec:b5:50:
7c:26:99:d7:a5:5c:e1:dc:ae:11:a9:cc:96:92:d1:
7b:06:a5:8a:c2:be:e5:f6:70:d0:d4:80:bb:37:0f:
b6:cb:dc:c2:8f:a7:92:3a:39:cc:9a:f9:d9:0e:3d:
96:c5:b2:64:84:62:58:a1:2b:2e:7d:46:e5:10:fd:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FC:D1:53:A7:26:80:41:55:F8:CB:6E:6E:6A:20:5D:01:01:65:90
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/GPzRU6cmgEFV-MtubmogXQEBZZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:b7:e6:0c:0b:af:04:6a:d6:7d:66:c6:dc:fe:a9:8d:ae:50:
02:ac:78:18:fc:a3:dd:f2:f1:98:72:9d:c1:f0:8a:d9:45:2a:
4e:4a:62:97:5d:9c:c4:90:9b:b8:91:d9:e2:ca:65:3b:38:1b:
3e:6e:2d:93:27:63:b5:55:69:bb:bf:ea:31:20:10:3e:ef:61:
07:79:f7:30:29:56:66:9b:fa:ce:00:73:4e:2e:d0:35:22:1a:
cd:1f:38:dd:5b:df:63:7a:77:64:0f:c8:f3:20:c0:7d:84:09:
01:d3:d8:b7:bf:4f:11:8e:d7:97:60:00:49:52:61:71:b7:bb:
8a:6e:80:fe:15:84:6e:01:1f:15:d2:dc:32:9c:c3:35:bc:0b:
6e:22:a1:ed:10:c8:da:85:59:26:3b:d0:a8:91:0e:e9:4f:ba:
45:36:67:5a:6c:d6:05:cb:d5:9b:54:9f:45:1f:18:52:e2:30:
aa:6d:bb:b3:c7:12:df:c3:5d:fc:9a:14:4d:21:8b:53:3b:59:
fb:25:24:cf:89:5f:c0:b8:63:43:20:9f:20:3b:42:7f:c7:df:
4e:f4:6e:32:98:09:b6:78:46:73:0c:ec:a2:27:f7:4e:ce:1f:
3b:3e:0f:03:bb:42:83:41:11:76:13:3c:c3:4e:42:d5:f3:5c:
e8:cd:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:40 2024 by rpki-client on console-fra.rpki-client.org