Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/Gy3XwmjIvGrPndAv-lgTAeBz15U.roa
File: Gy3XwmjIvGrPndAv-lgTAeBz15U.roa (raw, json)
Hash identifier: 3Kof0lBPfTbowqyjiKjpQAPDBgVIUNkGsHi9CUzZGHY=
Subject key identifier: 1B:2D:D7:C2:68:C8:BC:6A:CF:9D:D0:2F:FA:58:13:01:E0:73:D7:95
Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial: 018CCA2BA215BB2796EE0DBAF3C3DA9189B8
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/Gy3XwmjIvGrPndAv-lgTAeBz15U.roa
Signing time: Tue 02 Jan 2024 12:35:06 +0000
ROA not before: Tue 02 Jan 2024 12:35:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201579
IP address blocks: 193.138.195.0/24 maxlen: 24
185.91.69.0/24 maxlen: 24
91.237.124.0/24 maxlen: 24
2a13:2480::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 18:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:a2:15:bb:27:96:ee:0d:ba:f3:c3:da:91:89:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Validity
Not Before: Jan 2 12:35:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b2dd7c268c8bc6acf9dd02ffa581301e073d795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:89:5c:4e:19:f0:e7:68:88:d7:ea:e3:6f:
ba:a0:bb:2f:80:e8:70:8b:1a:d3:d7:2e:35:1c:87:
50:9a:f8:96:a5:e1:43:de:f8:e9:81:65:47:09:10:
4d:28:c4:35:73:df:16:ec:2c:72:7e:93:be:27:3d:
93:f4:53:b9:4a:08:9e:22:3d:d2:ae:19:b4:f1:11:
4d:48:75:4d:2b:ab:3f:60:f6:b2:cc:d0:b9:06:f4:
a4:c4:43:13:2e:fe:b8:37:7e:37:93:1d:cf:01:84:
4d:14:c6:75:e7:ef:af:8c:b6:76:1b:30:b8:2e:04:
41:40:23:b8:a4:83:d3:63:42:c2:b4:57:fe:62:5f:
8f:48:d4:34:68:ce:a7:16:52:91:b1:ee:e5:25:e8:
9e:f5:40:59:3f:c7:8c:a0:d0:0e:ee:b2:82:2f:89:
55:9e:e0:f4:c7:cb:91:92:6a:c5:19:ac:88:1b:0e:
27:f6:78:b5:b3:64:79:c3:14:0d:12:e9:91:ee:62:
cb:25:8c:8c:d0:d2:76:87:24:db:fb:f6:4f:71:e2:
e5:2e:27:53:0b:ff:7d:a0:96:d4:f7:f7:a4:d0:a8:
c4:29:45:4f:3b:01:fe:77:32:77:f7:da:32:77:63:
99:75:f7:e7:a3:17:17:6f:55:ad:d6:ea:4b:e3:40:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2D:D7:C2:68:C8:BC:6A:CF:9D:D0:2F:FA:58:13:01:E0:73:D7:95
X509v3 Authority Key Identifier:
keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/Gy3XwmjIvGrPndAv-lgTAeBz15U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.124.0/24
185.91.69.0/24
193.138.195.0/24
IPv6:
2a13:2480::/29
Signature Algorithm: sha256WithRSAEncryption
58:ec:c5:0d:55:69:8b:26:c7:10:09:42:34:d6:0f:ee:39:94:
6a:ac:43:1e:ce:30:e8:5d:0b:da:8a:07:d0:51:1d:7f:d8:ce:
ba:00:2e:30:41:0f:0a:8d:f5:dd:35:88:84:fe:dc:d0:03:f4:
76:55:2e:0f:89:9a:c7:04:02:2a:81:12:81:7a:0a:cf:be:4e:
f5:19:38:0e:1b:68:c3:14:e3:cf:d4:dc:56:71:d2:a3:5f:a8:
e8:26:34:1e:f3:a8:d4:fd:60:40:49:a1:16:e8:d4:58:b7:cf:
7b:2e:72:8a:0a:f0:2d:03:04:87:d9:9d:04:4e:56:6b:85:57:
95:6d:40:b1:5e:23:f6:82:be:5a:1b:6b:91:59:0b:64:d3:fc:
53:5a:52:19:ef:13:de:de:fc:3e:54:24:d3:90:8d:5d:3b:3e:
38:b2:fa:4e:f2:be:f4:21:40:b8:3a:29:4e:23:82:55:41:71:
44:48:2f:dc:90:1e:82:c8:cf:68:a1:2c:c9:b3:41:b3:8b:1b:
2b:4c:80:aa:36:e0:ac:a6:c5:c7:09:f1:26:4e:85:fa:a5:12:
5a:27:b3:12:63:cd:95:b0:38:ae:c7:98:59:3b:da:e4:2a:c0:
4c:3c:61:6f:91:6e:23:5a:df:12:7d:c8:88:60:53:39:4b:1f:
54:fc:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:25 2024 by rpki-client on console-ams.rpki-client.org