Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/GfbsWoJ5vOLxt1dMqbE4efiNe6o.roa
File: GfbsWoJ5vOLxt1dMqbE4efiNe6o.roa (raw, json)
Hash identifier: CPKTpmJDIgYU3/XRTMJcjcF4jU02nvFx35uWPhVzHDg=
Subject key identifier: 19:F6:EC:5A:82:79:BC:E2:F1:B7:57:4C:A9:B1:38:79:F8:8D:7B:AA
Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial: 018ADB2F68AFAFE3B5C18047F589A599C46F
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/GfbsWoJ5vOLxt1dMqbE4efiNe6o.roa
Signing time: Thu 28 Sep 2023 09:47:11 +0000
ROA not before: Thu 28 Sep 2023 09:47:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206984
IP address blocks: 185.169.244.0/22 maxlen: 22
2a0a:7700::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:2f:68:af:af:e3:b5:c1:80:47:f5:89:a5:99:c4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Validity
Not Before: Sep 28 09:47:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19f6ec5a8279bce2f1b7574ca9b13879f88d7baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:c1:86:6a:50:e2:d6:05:72:4a:cb:b7:97:
c5:78:86:d2:42:b9:bf:9c:6c:ea:cf:d7:b4:aa:b4:
4c:f6:5c:12:fc:8b:59:04:95:f2:67:10:10:82:cc:
02:4d:9c:5f:be:00:45:cc:c8:6f:56:84:29:d7:11:
b3:53:d1:35:9a:1d:41:6f:9e:64:9e:35:c3:ab:5d:
5b:e6:36:ec:92:42:2b:46:03:6e:e7:7c:b7:79:4f:
07:eb:34:95:a1:7b:6c:4c:4d:05:e7:40:a3:50:35:
06:c2:44:7d:e8:ad:b4:21:af:e7:9d:50:23:0c:61:
07:80:ba:8a:e0:3a:09:ed:56:ff:7e:ad:f0:69:15:
7d:af:c1:41:8b:99:b1:ea:89:9f:00:28:bd:53:e2:
e6:35:c6:78:89:04:75:09:a4:e9:17:03:93:e3:4e:
33:7b:79:6c:8d:aa:ef:4a:ff:de:d6:69:26:b6:9e:
42:a1:a2:c1:a1:13:66:4f:20:1d:40:fb:6b:b2:03:
c0:99:ab:69:fb:f7:26:26:c8:e0:eb:5d:cb:63:8e:
ed:3e:95:32:0c:32:85:12:67:97:a7:a2:87:0c:9e:
bd:4e:c9:7d:f0:37:f7:a3:d3:1e:94:74:e4:14:75:
23:8c:a5:57:d1:c3:19:34:21:75:c6:d8:85:38:f6:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:EC:5A:82:79:BC:E2:F1:B7:57:4C:A9:B1:38:79:F8:8D:7B:AA
X509v3 Authority Key Identifier:
keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/GfbsWoJ5vOLxt1dMqbE4efiNe6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.244.0/22
IPv6:
2a0a:7700::/29
Signature Algorithm: sha256WithRSAEncryption
37:3d:1e:32:20:69:2a:04:29:14:91:e2:7b:e9:3b:a3:fe:49:
4b:5c:9c:fd:2c:ac:5f:12:d8:20:a0:a2:3d:d6:a8:a9:f9:13:
6b:72:38:16:47:0b:f0:e1:35:f6:7d:0a:19:44:3e:6e:65:0a:
5b:be:0c:28:61:5b:ff:11:60:e5:dc:c6:bc:3b:2c:2c:ae:a5:
28:51:24:da:fb:ad:15:9e:14:fa:10:ca:bf:f8:25:c3:89:19:
13:74:b5:5c:4c:4f:17:c8:d5:ee:45:37:55:2a:e1:75:19:09:
2e:62:10:b8:ae:f4:32:ac:27:2a:b2:5c:be:be:aa:1c:86:0c:
28:76:d9:c9:ad:ef:e1:46:18:e2:73:f7:e3:19:17:8f:19:be:
04:90:b6:a0:41:41:bd:d6:da:0b:22:2c:eb:46:71:d9:3a:74:
80:5b:d5:05:ab:e0:69:c9:ac:51:c2:42:ee:0e:a6:79:30:05:
4d:d5:63:89:07:a0:1a:27:3e:18:ee:b8:20:57:cf:03:40:12:
13:23:a2:e5:c6:2c:22:70:d1:86:1a:69:b8:ee:74:99:f6:07:
04:99:9d:05:28:a4:ff:a0:dc:f5:15:cc:1a:f0:e5:fa:f7:0e:
4e:c8:d7:a5:dd:77:c9:55:c8:e8:65:e8:fd:70:85:d1:f3:32:
2c:de:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:47 2024 by rpki-client on console-ams.rpki-client.org