Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/GaTKZ6RkzkGOmg_RznZ9Itbp_jA.roa
File: GaTKZ6RkzkGOmg_RznZ9Itbp_jA.roa (raw, json)
Hash identifier: 7FGyCaQ+kZlFgVotWiPv46DdjBoZlgiaCYRRi22q8Gg=
Subject key identifier: 19:A4:CA:67:A4:64:CE:41:8E:9A:0F:D1:CE:76:7D:22:D6:E9:FE:30
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 018C07B2AD430948C4B96606A363A892CCC4
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/GaTKZ6RkzkGOmg_RznZ9Itbp_jA.roa
Signing time: Sat 25 Nov 2023 18:16:39 +0000
ROA not before: Sat 25 Nov 2023 18:16:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.51.220.0/22 maxlen: 22
5.1.104.0/21 maxlen: 21
212.15.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:07:b2:ad:43:09:48:c4:b9:66:06:a3:63:a8:92:cc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Nov 25 18:16:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19a4ca67a464ce418e9a0fd1ce767d22d6e9fe30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:cd:13:79:89:de:6a:7f:44:ae:9e:77:4f:
13:2d:37:56:8f:23:41:bd:b8:07:4d:89:bc:26:de:
b2:eb:e1:aa:c5:6c:50:76:d2:4a:b9:d3:f6:fd:18:
eb:5d:ba:12:c8:e4:17:15:0a:71:2e:54:b2:2e:d5:
46:51:af:7f:3f:79:80:ce:6d:25:86:70:39:05:71:
da:ea:50:41:d5:c6:af:49:7b:52:93:b6:6c:ec:c3:
0a:53:68:b5:b5:b6:e6:aa:53:3e:dc:89:01:56:b2:
a6:e6:cb:b3:82:72:4b:7b:d0:47:c8:7b:f9:7f:5b:
2e:51:e8:82:62:a4:b4:30:71:80:c4:1d:83:23:2b:
27:b9:4b:6b:42:8c:e8:7c:0f:90:c2:03:77:52:02:
b2:07:5e:08:26:d5:7d:a4:7e:29:c0:14:36:35:df:
85:00:72:b5:c7:42:97:34:87:70:08:67:d0:c2:b1:
b2:e7:d7:d6:74:60:eb:8a:18:ba:99:d0:5d:e3:82:
c5:28:34:32:41:1b:2a:a3:83:97:76:39:05:42:26:
b9:3c:fc:d9:c1:5d:44:69:2b:9d:5e:98:ac:18:2b:
47:ba:2e:30:ad:f4:6d:dd:aa:db:03:07:b9:be:7b:
f2:39:60:6f:77:ee:42:70:00:7c:f3:53:4a:bb:01:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A4:CA:67:A4:64:CE:41:8E:9A:0F:D1:CE:76:7D:22:D6:E9:FE:30
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/GaTKZ6RkzkGOmg_RznZ9Itbp_jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
185.51.220.0/22
212.15.80.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:35:e5:71:81:f4:e0:42:3e:a2:81:6e:8a:7e:9b:99:c1:fa:
75:7d:32:c6:79:52:f2:0a:b2:3e:74:b9:79:43:5a:16:26:e7:
c1:c6:21:d3:02:4e:49:12:c9:d3:4e:75:86:b7:c0:ad:85:15:
fe:c9:56:b9:f7:c5:c7:87:35:a5:77:f4:f4:c5:d7:f0:5c:72:
68:81:39:29:c7:1e:97:1a:f1:6b:36:ac:cd:14:72:69:e6:8d:
62:06:2c:dd:ed:88:01:f6:b8:12:3f:da:53:f0:d9:da:5b:c7:
1a:26:b9:f6:71:b1:1c:b4:7d:0e:18:8b:07:c7:60:d5:2d:d9:
50:15:0d:6d:38:13:c2:b9:b1:c1:49:5a:f7:02:d7:30:33:d4:
32:48:2c:59:d1:1d:cd:bf:78:1e:b3:44:7e:95:13:2f:1a:97:
85:08:f1:77:24:57:91:43:1b:aa:f8:92:c2:00:73:86:99:50:
b6:b1:1c:f9:bc:ac:0b:67:9f:09:cd:f3:f7:3d:36:7c:40:ff:
34:53:48:0b:09:18:5b:f6:51:7a:06:1c:e0:19:2b:cb:f1:fd:
7d:d7:36:21:3c:66:4c:f6:e4:9a:0b:13:82:0d:55:f1:dc:08:
60:b2:a2:5d:13:85:5a:41:cf:74:47:9d:1a:6b:5e:f5:17:60:
a4:ab:cf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:57 2024 by rpki-client on console-fra.rpki-client.org