Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/GKF3_Pkzo9EltLudHTlWJDNK_aI.roa
File: GKF3_Pkzo9EltLudHTlWJDNK_aI.roa (raw, json)
Hash identifier: tKbTTaGq6gTHOoqqjDkwms5lPCRsaz+M63Wu13HkmCc=
Subject key identifier: 18:A1:77:FC:F9:33:A3:D1:25:B4:BB:9D:1D:39:56:24:33:4A:FD:A2
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 018CC4250C64F5F690563ECDB8B65382D6EA
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/GKF3_Pkzo9EltLudHTlWJDNK_aI.roa
Signing time: Mon 01 Jan 2024 08:30:11 +0000
ROA not before: Mon 01 Jan 2024 08:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.64.73.0/24 maxlen: 24
185.64.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 09:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:0c:64:f5:f6:90:56:3e:cd:b8:b6:53:82:d6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Jan 1 08:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18a177fcf933a3d125b4bb9d1d395624334afda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:43:59:49:46:3a:0a:cf:38:af:82:8f:67:
6d:df:c2:52:46:bc:43:d4:20:35:da:30:01:ff:8f:
31:cc:44:fc:e2:48:11:44:05:d4:66:3c:74:38:f8:
6a:cd:cd:f1:b8:4d:f2:fc:2d:3d:39:ca:aa:2d:3d:
14:f6:17:de:c2:ef:16:d0:58:fe:a4:a2:71:49:d5:
7f:c6:f8:2e:57:0f:db:2d:a7:11:1b:5d:fa:b3:e4:
d1:8b:06:0a:8f:82:be:d8:1e:01:5f:fe:a0:62:d1:
64:d7:c9:ab:7b:eb:e4:0b:60:7e:f6:17:eb:18:7f:
97:17:a6:42:75:f3:e4:39:d3:1b:89:b8:0f:83:d8:
ad:c2:49:98:48:b8:e9:99:b1:ab:f4:7d:e2:a8:11:
58:0b:2c:5e:70:64:2b:56:a9:83:6e:ca:cb:40:5e:
5f:25:e7:b8:12:fe:d8:f0:bb:89:8b:cf:57:61:99:
75:b0:ad:82:62:05:1b:06:b1:cc:57:39:76:3d:52:
f9:97:44:4a:74:54:d0:63:a8:54:6a:9c:90:1a:d0:
76:0a:ae:f5:11:01:1f:cb:3b:21:63:b0:11:7e:59:
dd:f6:5e:cb:6e:26:45:68:af:f9:2a:12:75:39:e1:
70:ca:0d:2f:5b:60:5b:61:b2:49:b2:cc:07:7d:29:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A1:77:FC:F9:33:A3:D1:25:B4:BB:9D:1D:39:56:24:33:4A:FD:A2
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/GKF3_Pkzo9EltLudHTlWJDNK_aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.73.0-185.64.74.255
Signature Algorithm: sha256WithRSAEncryption
68:05:9b:fe:4f:b2:bf:40:24:02:95:b2:1e:9e:2b:3c:81:fb:
fb:ed:9c:80:1a:dd:86:d3:a4:cd:20:2c:10:e3:55:81:20:af:
64:d6:1c:7e:df:57:e6:ff:e4:89:ce:c3:7d:12:22:30:a6:fe:
e2:6c:e9:11:90:e3:53:47:ae:42:36:b2:97:94:ff:14:e8:22:
ea:d0:38:c5:3d:17:1f:cf:4e:11:c9:ce:d1:72:9c:bd:1f:93:
d5:87:fd:bc:ba:c8:82:15:4d:81:07:c8:cc:ff:99:9a:a2:53:
d1:d7:5c:d3:3f:d9:45:64:87:8f:01:ee:64:62:71:41:86:6d:
a2:a4:fe:77:51:75:4d:a2:02:da:a3:fc:11:32:fa:25:bc:ce:
97:22:80:5a:37:89:45:66:7d:d9:7c:42:d9:a8:df:7b:a7:80:
37:e7:5a:6a:c5:59:1e:fb:c0:a4:fd:0b:a6:5c:68:c1:b6:07:
44:b0:06:0c:f8:9f:db:5f:6d:9c:eb:24:4a:74:c8:49:52:1f:
22:10:25:e8:15:76:6a:eb:26:af:f6:17:fc:fa:32:ad:38:8c:
a5:f1:fe:42:02:3a:65:40:f0:01:2a:61:76:17:27:1e:75:9f:
64:ec:26:1a:e5:29:c9:de:f3:eb:85:ec:a8:69:d5:03:a4:c6:
d1:15:01:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:51 2024 by rpki-client on console-ams.rpki-client.org