Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/68844e-9216-4b1b-96d0-16d9769b0eca/1/GqZ9PL8HHVAWOwkz_XMLEoxqsP0.roa
File: GqZ9PL8HHVAWOwkz_XMLEoxqsP0.roa (raw, json)
Hash identifier: ndyg6w2tPSdKcCQNyI58qC9b7/ip+TtjkjCLETnSSFc=
Subject key identifier: 1A:A6:7D:3C:BF:07:1D:50:16:3B:09:33:FD:73:0B:12:8C:6A:B0:FD
Certificate issuer: /CN=f832463d4dabd2034f8fafc786351dfb293613f8
Certificate serial: 018964C051C87AA65ED4A7001C396CC65CDF
Authority key identifier: F8:32:46:3D:4D:AB:D2:03:4F:8F:AF:C7:86:35:1D:FB:29:36:13:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJGPU2r0gNPj6_HhjUd-yk2E_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/68844e-9216-4b1b-96d0-16d9769b0eca/1/GqZ9PL8HHVAWOwkz_XMLEoxqsP0.roa
Signing time: Mon 17 Jul 2023 16:47:52 +0000
ROA not before: Mon 17 Jul 2023 16:47:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 88.151.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:51:c8:7a:a6:5e:d4:a7:00:1c:39:6c:c6:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832463d4dabd2034f8fafc786351dfb293613f8
Validity
Not Before: Jul 17 16:47:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aa67d3cbf071d50163b0933fd730b128c6ab0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:78:ee:22:73:74:21:88:83:fe:1d:1d:04:
78:9f:64:62:5e:a9:14:c1:66:c2:f3:c2:20:61:73:
89:65:e4:1d:bd:ab:d1:7d:0f:db:ea:3f:18:c8:1a:
52:4a:8b:3a:f4:b3:a2:4a:80:8e:9a:bd:1b:27:ed:
95:aa:bd:72:a5:27:f2:dd:37:6f:ca:e3:4d:48:93:
66:e8:13:14:86:21:b9:e7:81:d6:26:14:c0:4a:59:
23:7d:d5:96:50:d3:15:ab:92:f9:2f:57:75:32:29:
13:42:db:f0:8e:ed:60:06:8c:f7:f6:9e:b2:5d:2e:
06:67:a9:bc:f1:0f:ba:82:c3:6b:eb:7d:2f:15:3b:
6f:c6:e8:37:af:f8:90:5a:83:1a:11:b4:d6:8d:ad:
91:2a:9e:41:ba:e6:92:b7:3e:da:f8:65:3c:e1:8e:
4b:11:c3:7e:a8:a9:de:00:5d:f3:24:c9:cf:d2:f7:
23:bd:68:a4:73:8a:52:f7:94:3a:f1:e4:e5:17:86:
37:b8:20:55:c5:b6:04:93:af:d8:c1:be:b7:51:e9:
c0:39:8d:56:21:2a:c4:8d:c8:2d:2a:02:16:13:03:
ce:9a:e5:3a:6f:3e:91:64:1d:b7:04:44:c7:53:a3:
d6:5e:d1:0f:a5:c6:ca:dc:9d:05:49:37:cf:bd:13:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:7D:3C:BF:07:1D:50:16:3B:09:33:FD:73:0B:12:8C:6A:B0:FD
X509v3 Authority Key Identifier:
keyid:F8:32:46:3D:4D:AB:D2:03:4F:8F:AF:C7:86:35:1D:FB:29:36:13:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJGPU2r0gNPj6_HhjUd-yk2E_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/68844e-9216-4b1b-96d0-16d9769b0eca/1/GqZ9PL8HHVAWOwkz_XMLEoxqsP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/68844e-9216-4b1b-96d0-16d9769b0eca/1/1-DJGPU2r0gNPj6_HhjUd-yk2E_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:2a:1f:f5:18:7d:72:48:f2:fe:4c:a4:cf:53:dc:20:25:2d:
c1:86:cb:82:4e:7d:9c:c5:d5:1d:3e:73:7b:3e:37:3e:20:33:
88:36:a5:a6:06:20:e4:7b:ba:85:c4:dc:ab:de:b3:d4:c8:96:
2c:9a:17:15:f0:7a:a0:c9:b0:c4:2e:89:02:60:91:da:c8:57:
fc:2d:cb:3c:2c:cc:b6:2f:d3:c4:d7:0f:55:b7:97:40:65:b0:
ec:ef:de:2d:cd:70:a4:01:2f:2d:63:da:c7:ab:ae:d0:7f:3c:
fd:7e:14:63:3a:f5:a5:40:14:b8:3f:45:52:9e:81:2e:cc:c7:
43:5f:fb:12:96:b7:49:ca:67:2c:2f:e8:f7:57:31:16:cc:1c:
28:69:bc:a4:f3:0d:79:24:f8:40:e8:6c:c9:c7:55:28:94:18:
b1:2f:3b:f4:97:ed:91:9b:3e:8b:f9:2f:f6:d7:b9:58:6b:eb:
cc:15:e2:4b:a1:f3:cd:fe:3d:97:b8:e1:86:42:e4:9c:ef:68:
bb:4a:ea:8e:3b:ad:53:80:b8:df:20:42:18:e1:1b:5a:c7:f9:
1b:f3:20:32:2a:a5:4b:ba:6f:88:09:a1:a2:84:e2:d9:9c:1c:
97:83:4b:52:16:05:b7:15:3a:8d:f7:33:9d:b3:c1:f9:f2:be:
3e:c5:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:18 2024 by rpki-client on console.sobornost.net