Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/gCqRTTctxWKmkF2gmm-kscQ_RLA.roa
File: gCqRTTctxWKmkF2gmm-kscQ_RLA.roa (raw, json)
Hash identifier: 4cey8WNVBkS3fjbn3V6QKf+uzUtYiRsGUWx4vMfn9E8=
Subject key identifier: 80:2A:91:4D:37:2D:C5:62:A6:90:5D:A0:9A:6F:A4:B1:C4:3F:44:B0
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 01874CAE76431B3D5B3352B274F49E7C5A50
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/gCqRTTctxWKmkF2gmm-kscQ_RLA.roa
Signing time: Tue 04 Apr 2023 14:31:54 +0000
ROA not before: Tue 04 Apr 2023 14:31:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211995
IP address blocks: 185.136.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 21:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:ae:76:43:1b:3d:5b:33:52:b2:74:f4:9e:7c:5a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Apr 4 14:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=802a914d372dc562a6905da09a6fa4b1c43f44b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:a8:4d:6f:67:9a:60:b4:da:b7:08:17:ae:
71:4d:66:f3:c7:a5:00:e4:bc:f2:01:95:e9:a5:4c:
41:67:2d:18:8d:42:53:62:d3:ed:cb:72:fc:81:57:
26:5d:97:27:7b:68:9a:44:08:3f:2e:ce:3b:42:dd:
e3:74:a9:cd:a6:2f:4b:fa:5a:93:04:97:4b:b1:3e:
f5:9f:fc:82:ac:b9:89:7f:e1:d5:d0:c5:f6:b0:26:
ca:72:f4:05:4a:30:c0:17:c2:c4:97:69:5c:6a:38:
1e:e6:61:8f:79:1f:ba:08:06:3d:20:c6:de:0c:ba:
6d:60:cc:7e:3d:d3:ed:a2:15:11:58:ce:89:f5:1f:
bb:71:62:c7:17:8f:11:75:9e:13:43:5c:a5:1c:fc:
23:0b:c0:47:cb:0d:b1:f7:98:03:d4:3d:a9:a0:7c:
1b:4c:3a:1b:c1:c8:17:55:48:20:55:b4:db:31:bf:
f2:16:7d:37:15:be:38:77:8f:3c:c2:fd:8c:d0:e3:
08:87:c1:b9:1f:f9:e0:f6:96:62:d3:d6:ca:4f:d6:
d3:6f:e3:7f:8c:66:8a:50:03:35:ca:ff:6c:0d:19:
eb:a0:17:18:e2:73:62:7e:2c:ca:dc:52:0b:b9:e6:
f4:ef:f6:76:ca:a8:18:76:c2:6a:83:64:68:49:dd:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:91:4D:37:2D:C5:62:A6:90:5D:A0:9A:6F:A4:B1:C4:3F:44:B0
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/gCqRTTctxWKmkF2gmm-kscQ_RLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.207.0/24
Signature Algorithm: sha256WithRSAEncryption
54:60:52:15:8a:ee:c3:ee:42:d7:d3:f4:60:74:bb:07:24:bd:
3a:65:f1:0f:f2:7e:f9:44:d2:42:72:d0:9e:aa:b7:32:ff:f1:
21:3c:ea:7d:c8:b6:3b:e4:c6:ee:3f:2e:38:78:18:cf:d1:89:
b2:26:eb:ce:7d:d0:45:2c:c6:d6:24:e9:7c:d6:f5:d4:27:12:
9d:66:ab:20:c9:f8:82:f6:9a:fe:0e:f4:8b:29:66:3e:dc:f4:
07:5a:c4:3e:7a:d5:41:9a:02:33:ac:e3:cf:4d:08:56:d3:51:
b5:03:2b:70:82:69:c1:ea:92:f9:1b:08:d8:53:55:d7:e5:a4:
3b:44:15:81:6a:51:ae:0d:2d:1b:b4:22:d5:80:1f:1f:89:ce:
2a:83:89:29:54:af:4a:42:ea:5a:32:fc:8e:5e:7c:8c:24:09:
de:53:95:65:76:cc:d4:8a:7d:48:69:ab:a7:b3:ee:33:93:1a:
f6:e5:ac:fb:e2:8e:dd:29:84:b4:82:b2:f3:67:a9:5a:90:13:
58:50:b4:58:48:f1:f4:86:a3:15:b1:fb:52:84:4b:04:c8:fd:
15:24:b8:0a:70:18:ff:ab:ea:80:24:88:7b:d0:e0:98:9a:57:
22:31:10:4b:92:43:3c:22:12:63:8f:af:e5:cf:0b:c7:12:92:
56:35:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:53 2024 by rpki-client on console-fra.rpki-client.org