Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/GGW5d5JybZZfZkAe-K4WVDw4iaA.roa
File: GGW5d5JybZZfZkAe-K4WVDw4iaA.roa (raw, json)
Hash identifier: e1xrs92vQHqkRy8jVr42vPTCB6Rh2V7jugO8Dk8BNUg=
Subject key identifier: 18:65:B9:77:92:72:6D:96:5F:66:40:1E:F8:AE:16:54:3C:38:89:A0
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 018ABD15CD82B7D88605BD43B84172651EF4
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/GGW5d5JybZZfZkAe-K4WVDw4iaA.roa
Signing time: Fri 22 Sep 2023 13:30:37 +0000
ROA not before: Fri 22 Sep 2023 13:30:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48101
IP address blocks: 91.151.240.0/20 maxlen: 22
134.19.192.0/22 maxlen: 22
134.19.196.0/22 maxlen: 23
185.122.192.0/22 maxlen: 22
185.16.160.0/22 maxlen: 24
98.96.160.0/20 maxlen: 23
134.65.128.0/21 maxlen: 21
134.65.136.0/22 maxlen: 22
91.228.232.0/23 maxlen: 24
134.65.144.0/22 maxlen: 22
134.65.140.0/22 maxlen: 22
91.228.234.0/24 maxlen: 24
134.65.148.0/22 maxlen: 22
199.15.232.0/22 maxlen: 22
134.65.152.0/21 maxlen: 21
37.25.44.0/24 maxlen: 24
199.15.237.0/24 maxlen: 24
199.15.236.0/24 maxlen: 24
199.15.239.0/24 maxlen: 24
199.15.238.0/24 maxlen: 24
37.25.45.0/24 maxlen: 24
37.25.46.0/23 maxlen: 23
2a04:200::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:15:cd:82:b7:d8:86:05:bd:43:b8:41:72:65:1e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Sep 22 13:30:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1865b97792726d965f66401ef8ae16543c3889a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:be:ed:f8:e8:94:56:2f:6e:1a:9a:c6:8a:
50:a2:79:2c:f8:60:1d:33:cc:7e:17:c8:16:f5:a4:
88:41:9b:7e:f9:02:b5:8d:a8:57:b6:11:10:06:54:
45:84:7b:9e:b3:c7:2b:b9:f7:ab:0b:da:58:46:91:
35:e2:cc:7a:d2:a8:f3:9b:84:0b:60:2f:93:03:f8:
53:58:a9:e1:22:f4:84:2a:c7:78:71:3d:8b:a5:7b:
47:86:db:3a:97:01:af:61:3d:bb:34:d1:71:37:12:
f3:1d:86:f4:03:e6:8b:0b:c2:d3:8d:ef:e0:2a:22:
ad:1b:e0:9d:71:38:d1:11:09:7d:a9:15:53:a7:cc:
ea:8f:72:8a:26:1e:52:08:c6:58:c0:20:fd:9e:1a:
93:d7:2f:8c:cc:ab:bd:fa:b2:96:0f:ab:8f:48:e4:
66:e7:8e:79:2a:45:be:51:08:2c:0b:50:2c:79:d7:
c0:9a:f1:e7:3b:bf:f8:f8:96:c8:90:fa:1c:7b:ae:
e0:92:b0:1c:f2:8c:7f:58:e5:92:02:83:a9:39:16:
13:47:80:1c:94:52:23:b5:29:a8:19:6d:8c:cc:93:
61:0c:4f:68:79:96:c7:d1:45:b6:c0:de:30:fd:c5:
05:1d:f9:aa:8e:26:5a:b5:b2:cc:4c:65:f1:df:77:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:B9:77:92:72:6D:96:5F:66:40:1E:F8:AE:16:54:3C:38:89:A0
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/GGW5d5JybZZfZkAe-K4WVDw4iaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.44.0/22
91.151.240.0/20
91.228.232.0-91.228.234.255
98.96.160.0/20
134.19.192.0/21
134.65.128.0/19
185.16.160.0/22
185.122.192.0/22
199.15.232.0/21
IPv6:
2a04:200::/29
Signature Algorithm: sha256WithRSAEncryption
29:bb:f7:1e:e0:4a:72:60:1e:3a:4c:87:e4:ba:c4:21:29:46:
4e:4e:4c:49:10:5b:60:5c:a0:09:26:df:fd:41:4d:84:4b:13:
77:ca:47:82:b3:e0:29:26:bb:76:25:8f:03:56:d2:61:68:f0:
ff:6f:0c:02:b8:b1:07:9a:d5:5f:69:03:cc:4a:09:5b:10:77:
f8:4e:12:9c:ae:bf:90:f1:4d:d7:8b:f1:d6:73:72:a1:be:5c:
bb:44:2a:39:31:f4:ff:d0:bd:0f:54:96:3b:fa:e8:81:47:53:
d2:aa:df:69:b9:e7:ce:67:85:c3:18:e0:04:9c:b4:b2:57:ae:
bc:ec:e9:80:7d:3b:bd:72:9c:d5:35:69:c3:ac:88:18:f5:88:
80:8e:5d:9c:5d:c4:5d:4b:11:b7:f5:ec:8b:e3:56:72:e8:ce:
7e:fe:c6:74:8f:3b:70:f6:f9:75:cc:85:0c:b3:ef:19:7c:bd:
b9:c0:f7:87:76:25:17:a6:d9:a8:3c:de:b2:3b:ed:48:c9:0a:
cd:47:4a:a5:20:b8:4d:4a:04:a0:cb:84:ca:cc:30:c6:e6:72:
82:5e:70:9c:70:78:e9:8e:1d:60:92:ac:4d:ed:2c:65:85:be:
b6:fa:46:ec:6d:3d:3d:7e:81:11:19:49:ba:4a:91:31:cb:8d:
81:86:0d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:23 2023 by rpki-client on console.sobornost.net