Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/Gw6pQd_lXi3sIQaVS6QTRUOn0c8.roa
File: Gw6pQd_lXi3sIQaVS6QTRUOn0c8.roa (raw, json)
Hash identifier: CElSVPTQVkZcZdPXUTsdlrRs+PyCZGP8RxR/Bn6dNVM=
Subject key identifier: 1B:0E:A9:41:DF:E5:5E:2D:EC:21:06:95:4B:A4:13:45:43:A7:D1:CF
Certificate issuer: /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial: 018572E8051E4011C8B4651D9A1F74A78F51
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/Gw6pQd_lXi3sIQaVS6QTRUOn0c8.roa
Signing time: Mon 02 Jan 2023 14:34:46 +0000
ROA not before: Mon 02 Jan 2023 14:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39655
IP address blocks: 5.61.27.0/24 maxlen: 24
185.73.113.0/24 maxlen: 24
185.73.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:05:1e:40:11:c8:b4:65:1d:9a:1f:74:a7:8f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Validity
Not Before: Jan 2 14:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b0ea941dfe55e2dec2106954ba4134543a7d1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:25:3e:55:7c:48:1f:0d:2c:23:ae:0b:be:
b7:15:87:fd:97:2a:fd:01:cf:d0:84:b4:d1:7c:6a:
34:ed:60:f6:53:e7:57:96:25:60:bf:c7:94:db:3c:
7b:92:4e:ca:0e:51:dd:94:08:59:ba:10:c3:4c:0e:
c4:c8:b2:47:a2:49:72:0b:a3:b0:eb:9d:bf:91:9e:
03:65:5d:c7:47:cc:a5:13:b4:27:fb:6d:9b:49:f2:
85:68:70:de:0a:37:74:88:df:bb:43:4f:c0:c7:7c:
e2:53:49:ae:0e:de:a8:5e:c0:3d:a1:dd:de:e7:e4:
b8:c8:73:b5:f2:fe:bd:44:0e:29:a6:ee:51:50:e7:
22:72:48:b3:83:8f:1e:b4:53:64:e1:4d:05:b6:72:
a6:69:9c:b0:89:35:50:50:d7:2b:28:6c:de:c9:6d:
a3:2d:a2:4c:99:91:c1:09:85:a1:19:38:f4:87:d4:
a3:64:d5:fe:de:d3:b6:5e:25:2d:67:43:2f:11:01:
4e:0e:dc:82:5b:7e:0e:7b:25:88:d2:db:af:0b:66:
b2:fe:94:32:bb:a4:6a:a3:51:7e:4b:ba:18:91:65:
33:fc:3d:3e:a9:3e:05:ab:0d:a7:be:78:4b:5d:1a:
0a:4a:f9:b9:e8:00:8a:2f:6e:c6:5d:c6:6c:1a:b7:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0E:A9:41:DF:E5:5E:2D:EC:21:06:95:4B:A4:13:45:43:A7:D1:CF
X509v3 Authority Key Identifier:
keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/Gw6pQd_lXi3sIQaVS6QTRUOn0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.27.0/24
185.73.113.0/24
185.73.115.0/24
Signature Algorithm: sha256WithRSAEncryption
27:18:41:92:2c:a7:f8:e8:53:01:65:21:56:0b:e5:53:5c:7c:
ec:d2:7b:44:85:11:d9:ed:66:80:e6:97:04:0e:23:e2:ff:13:
ea:92:96:ca:e1:dd:46:29:1b:b0:20:76:3f:95:de:89:77:b9:
32:7b:b1:8c:d7:2b:f7:a1:15:c7:4d:0c:92:7d:a7:c2:77:7c:
bf:d1:35:f4:53:b6:85:22:f9:b5:21:87:2c:6e:0e:e5:55:7a:
d2:b4:e1:98:1a:63:d3:fb:4a:71:ab:34:f7:48:04:db:f9:27:
4e:24:81:c5:3e:64:7a:98:83:d6:97:99:a4:17:ed:33:45:57:
27:79:8b:9b:9c:8c:04:76:06:ab:07:91:1f:a2:23:2f:4d:4d:
8a:c5:65:ed:21:73:3b:7e:b5:54:8d:1b:a1:e4:ff:79:97:51:
f0:b0:e9:a7:fe:c1:33:e3:c2:a6:24:90:c4:ad:b4:45:ba:af:
da:39:cf:ad:7c:c5:d7:d8:63:10:c7:a4:57:2a:12:b9:9a:9c:
ed:62:37:60:1c:1c:15:b6:a0:21:fc:8b:d8:60:5d:82:d7:f9:
d8:ac:33:6c:d4:23:69:78:b7:3a:07:59:66:23:f7:16:78:42:
6d:30:77:0e:f7:df:34:f8:e2:e1:a1:80:bd:44:77:da:58:f3:
e0:75:49:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:42 2024 by rpki-client on console-ams.rpki-client.org