Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Gf8HjmTJ3LjPjAPsE3g5ASKaYrk.roa
File: Gf8HjmTJ3LjPjAPsE3g5ASKaYrk.roa (raw, json)
Hash identifier: HHz5cTShTZku/Vma9d7SZtZP17Qs9D1BDMHOAWpM+LI=
Subject key identifier: 19:FF:07:8E:64:C9:DC:B8:CF:8C:03:EC:13:78:39:01:22:9A:62:B9
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 018AB3A2FA54A01FEC34B3C93AA13724E904
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Gf8HjmTJ3LjPjAPsE3g5ASKaYrk.roa
Signing time: Wed 20 Sep 2023 17:28:37 +0000
ROA not before: Wed 20 Sep 2023 17:28:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202973
IP address blocks: 195.10.205.0/24 maxlen: 24
185.157.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 10:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:a2:fa:54:a0:1f:ec:34:b3:c9:3a:a1:37:24:e9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Sep 20 17:28:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ff078e64c9dcb8cf8c03ec13783901229a62b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:08:cb:3a:15:77:42:fd:d2:f9:c7:08:aa:
29:66:4a:95:86:4d:c9:10:76:9d:70:40:b3:84:c0:
2f:09:06:b7:a2:5f:2e:31:08:29:fd:5c:04:cb:ef:
b9:eb:ef:91:a5:2e:c0:60:93:d2:bc:7b:8c:ad:e4:
2b:79:bf:e4:a9:7a:63:c2:74:a6:63:f8:54:68:70:
ad:e6:95:84:c7:05:e7:33:98:3b:d0:fb:73:dc:0b:
66:27:34:23:42:62:8e:1c:c9:aa:44:cb:3a:aa:c3:
c5:b2:f1:68:6a:36:ae:a5:e6:4a:ab:3f:1c:74:bc:
2a:f4:c9:c6:50:ed:9b:f8:df:f1:04:3a:af:2c:b6:
59:9e:08:a5:0c:fc:3f:58:85:12:cb:75:04:4e:40:
b3:18:27:b9:be:a8:b0:ef:4e:97:9e:8d:3e:1c:f9:
4c:b0:49:13:3f:31:c0:6f:be:e5:e1:ed:3d:8c:1b:
3e:97:75:a3:0b:10:d8:5a:9c:36:fc:20:bb:bc:bf:
ad:4a:46:6b:7c:1a:ca:6b:76:98:4a:5f:e1:08:a3:
4f:8a:3c:17:bc:80:5a:52:17:14:68:7a:e8:ac:37:
18:66:23:c1:bf:3f:da:a7:0f:fd:bc:a6:04:1f:5b:
c5:ba:4e:21:8a:45:f3:7f:a2:f6:04:93:5a:c8:87:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:07:8E:64:C9:DC:B8:CF:8C:03:EC:13:78:39:01:22:9A:62:B9
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Gf8HjmTJ3LjPjAPsE3g5ASKaYrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.120.0/24
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
50:03:de:c8:ae:3b:d3:69:3e:fe:d9:e2:eb:65:94:a6:01:ca:
c6:1e:3d:c4:55:92:e7:23:67:99:c7:d4:3b:04:e3:86:df:ee:
be:8c:9e:b2:2d:5d:61:ee:d2:75:90:3f:22:79:b2:9a:49:f7:
47:d1:d1:5d:69:b2:e3:1c:a2:1d:bd:41:8e:cc:5f:bc:94:2e:
af:3d:d0:8e:38:8c:7c:11:b6:ca:61:b7:db:35:05:9b:c8:8e:
92:e1:c9:c5:f6:0b:b9:a2:fd:52:d9:ea:3b:c2:c4:f0:22:01:
ae:b4:a8:63:53:c4:d5:22:32:18:62:d0:a1:79:23:74:93:cd:
e4:67:e9:32:30:37:c9:ac:71:23:42:89:08:cd:8b:12:8e:13:
ec:83:7c:8d:f7:49:84:63:67:ba:6f:66:41:32:c2:dc:f8:fb:
ea:ee:38:13:6e:21:6d:80:ff:0a:da:d8:e9:c9:12:1f:bf:68:
f4:7a:5f:e9:4c:7e:d6:6c:d8:e2:b9:4d:21:cb:4d:1c:28:46:
e1:3a:7d:4b:e1:6d:ab:a3:a5:d8:10:94:28:73:d2:9b:1a:12:
1b:4b:29:8b:99:30:71:1c:e6:66:e3:c4:2f:e7:7c:c5:51:1f:
e6:3e:74:78:1e:f8:8d:ca:40:76:af:08:77:d8:68:0a:b6:c3:
01:29:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org