Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gTML-euKYBiaMYOpQKTOz5qqizU.roa
File: gTML-euKYBiaMYOpQKTOz5qqizU.roa (raw, json)
Hash identifier: bnXhnZ2e3m15T7118y2qwJfXdTIOhmUDCoE2bVphz+s=
Subject key identifier: 81:33:0B:F9:EB:8A:60:18:9A:31:83:A9:40:A4:CE:CF:9A:AA:8B:35
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187D20D06421FE229CF1A9CD335726E9EB5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gTML-euKYBiaMYOpQKTOz5qqizU.roa
Signing time: Sun 30 Apr 2023 12:04:41 +0000
ROA not before: Sun 30 Apr 2023 12:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d2:0d:06:42:1f:e2:29:cf:1a:9c:d3:35:72:6e:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 30 12:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81330bf9eb8a60189a3183a940a4cecf9aaa8b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:eb:b6:75:45:55:f2:ba:16:78:24:95:7d:
0a:4a:4a:69:38:c6:ac:a8:a2:71:e5:ae:5a:32:c0:
42:d2:c5:21:9c:a0:eb:14:45:55:ff:54:9e:e9:a3:
a2:e9:4d:ec:7f:d9:e4:59:03:60:3c:c4:03:8e:d5:
69:80:60:c1:5b:6b:ef:95:92:00:03:9c:98:30:e6:
47:7e:38:52:39:a6:20:23:74:e9:8c:b2:dc:57:be:
db:f2:13:d8:72:80:3e:2e:4e:c8:19:a9:46:aa:2b:
f4:74:ad:36:d4:80:c6:9d:80:71:ab:5b:06:04:71:
c9:b9:98:70:43:d7:52:bc:ab:11:b6:31:f8:36:ae:
20:a4:36:1a:2d:04:37:4d:a7:08:4f:95:ca:82:bf:
6c:80:71:2e:6e:2e:dc:0d:5a:b0:cd:77:f8:43:df:
cc:37:a6:77:a2:f8:1e:ac:9f:b3:77:6e:c3:8a:56:
b8:37:52:76:0c:1a:76:19:8f:8b:0e:d5:bc:bf:5f:
51:e2:58:cd:0e:ed:5d:79:3c:6a:dd:e7:71:5a:10:
9e:57:40:12:05:b2:c9:94:d1:98:ea:1e:01:0c:5b:
8f:bf:cf:0e:01:69:2e:b5:d4:55:f8:81:8b:d5:e9:
71:f4:c1:0a:8d:15:eb:77:a7:3c:d7:24:ff:f9:ca:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:0B:F9:EB:8A:60:18:9A:31:83:A9:40:A4:CE:CF:9A:AA:8B:35
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gTML-euKYBiaMYOpQKTOz5qqizU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
77.81.88.0/24
77.81.100.0/24
86.107.51.0/24
89.34.219.0/24
89.35.129.0-89.35.131.255
89.45.35.0/24
89.47.55.0/24
94.198.171.0/24
176.223.188.0/24
188.214.107.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
25:07:a1:96:16:aa:e4:48:7a:6c:b5:46:0d:42:3c:4b:87:70:
45:31:e6:b4:23:e2:ae:e4:c1:f7:0f:28:30:ee:15:c3:60:2e:
67:30:e0:63:82:0c:f5:94:57:8a:57:0a:7a:30:62:a5:bf:58:
66:8f:48:ab:bf:8e:d6:72:4e:e3:01:64:37:ee:3e:c6:9c:63:
dc:f2:20:11:03:bb:f4:d7:3b:83:7a:fa:ad:60:44:4d:dd:26:
76:6d:e8:71:3a:46:bf:b9:b5:75:51:a7:c5:5e:79:e8:bf:6b:
f4:2f:84:4c:88:19:a3:2b:7a:cb:0e:70:b8:77:01:7f:7d:2d:
a2:29:13:cd:de:b8:b8:e3:8a:07:af:3c:91:50:0d:c9:46:f9:
a2:da:72:1c:fc:94:47:ea:9c:ef:35:31:10:34:74:62:a6:0e:
1c:56:c7:21:9e:16:1d:76:0e:b9:40:2d:3f:dc:bd:c3:08:95:
6f:60:a1:29:f3:82:e7:09:2e:97:b6:20:6e:82:e2:82:d8:58:
8c:5d:57:f3:13:db:26:81:e8:3d:fb:42:ba:bb:8a:80:15:b6:
5a:3a:23:0c:f5:e9:b3:85:22:78:15:38:1e:5d:8d:e0:98:bc:
d7:cd:d3:5d:e5:eb:dd:bf:97:95:13:29:e8:46:c3:05:b9:ea:
f4:24:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:38 2023 by rpki-client on console.sobornost.net