Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/GzZP44BfqcrvI8iVmx6Xpd_IEqw.roa
File: GzZP44BfqcrvI8iVmx6Xpd_IEqw.roa (raw, json)
Hash identifier: tuf5kKaYLXzwzsXczQT6lnuR3wwt/qZKahYujTaG/90=
Subject key identifier: 1B:36:4F:E3:80:5F:A9:CA:EF:23:C8:95:9B:1E:97:A5:DF:C8:12:AC
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 018847967F252A9FA008C7B59C41571AB2F0
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/GzZP44BfqcrvI8iVmx6Xpd_IEqw.roa
Signing time: Tue 23 May 2023 07:50:25 +0000
ROA not before: Tue 23 May 2023 07:50:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204108
IP address blocks: 185.229.232.0/22 maxlen: 24
185.229.232.0/23 maxlen: 24
185.229.234.0/23 maxlen: 24
185.253.42.0/23 maxlen: 24
185.253.40.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 08:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:96:7f:25:2a:9f:a0:08:c7:b5:9c:41:57:1a:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: May 23 07:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b364fe3805fa9caef23c8959b1e97a5dfc812ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:13:6d:ea:d3:47:58:d1:7f:2f:ca:65:30:
bc:12:51:a5:cc:ad:19:bc:98:84:e0:73:08:2e:48:
05:1b:d9:4f:6e:62:50:f0:f7:1f:37:d9:8c:7f:98:
79:22:3d:1f:dc:81:9e:21:0a:a9:0b:f5:f0:9b:68:
40:d4:35:b8:a2:41:2d:49:fb:d3:fd:ab:fc:db:5e:
39:7e:d4:6c:40:10:5e:4a:74:77:55:a5:3b:ef:e1:
02:21:76:65:9f:e9:0c:41:e0:2b:6c:f1:0a:54:17:
a0:3b:4e:8c:33:08:ef:5c:c9:a1:0a:b6:8e:14:78:
46:a8:3e:ba:30:33:c9:28:fc:42:e9:0c:bc:78:78:
b9:6b:b7:62:61:eb:3d:99:82:45:0c:52:ff:28:27:
de:02:22:02:9c:ca:72:81:8a:f0:91:07:6f:6b:36:
ce:f0:f2:79:e5:28:f8:94:cc:fe:45:35:ef:dd:a3:
42:30:15:b8:32:a6:9f:5d:fc:92:b5:7a:23:dc:0f:
fa:cb:54:4b:9a:8c:fe:2b:9f:ec:cc:0d:8b:8f:26:
66:f0:f0:13:8c:ae:e2:47:08:5d:f4:c2:04:cc:9b:
38:39:a4:23:82:27:e2:96:41:08:6d:e4:24:16:f8:
a3:69:65:13:17:3f:f7:a4:19:46:b8:9e:86:90:de:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:36:4F:E3:80:5F:A9:CA:EF:23:C8:95:9B:1E:97:A5:DF:C8:12:AC
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/GzZP44BfqcrvI8iVmx6Xpd_IEqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.232.0/22
185.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
63:a1:5a:e4:e0:b8:23:48:c6:ea:85:f2:df:c9:65:4f:20:16:
a1:4b:97:9d:31:b5:43:f4:4d:16:ba:f0:c9:40:14:80:84:1a:
a3:39:65:3a:76:02:73:91:ac:6f:b3:a5:4d:c4:03:3a:c6:85:
c0:bf:ba:fd:09:2c:d4:48:28:fa:1e:71:fc:cc:93:35:f4:5a:
88:6b:5b:e7:5a:84:47:6a:fa:94:a3:f4:76:51:89:ac:37:07:
e8:53:98:6e:19:dc:6d:92:4f:f9:d9:71:07:52:58:29:70:24:
a1:2d:31:d7:d7:f7:6d:d4:c9:53:13:89:e1:f8:bc:64:13:50:
8c:1e:51:1b:3e:2f:5b:2d:0b:a9:d5:fd:c8:c6:aa:84:74:9d:
14:9e:8c:95:42:62:c7:93:03:a7:90:8a:60:8b:a3:73:1b:f6:
92:5c:94:b0:51:96:5b:7d:9a:d9:fc:64:b3:5d:c1:49:3b:75:
da:d5:cc:fb:f9:e2:3b:cb:ad:ac:13:69:7f:ce:44:1d:03:a2:
33:d7:d4:56:ac:ce:0a:8d:a0:88:dd:65:aa:39:c0:19:26:28:
f7:e0:b3:c8:c3:70:84:b9:30:ca:bb:d6:46:75:f8:17:a9:79:
5c:56:cf:82:27:0b:bd:7b:ee:ab:5d:08:12:5a:41:d0:77:11:
38:54:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org