Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/cGYA553L-49HC2zOKjd7IORO34Y.roa
File: cGYA553L-49HC2zOKjd7IORO34Y.roa (raw, json)
Hash identifier: 3v/5vaejtEtuP551JyaBoKTtj2Iy2GJXVSpa9wFrPd0=
Subject key identifier: 70:66:00:E7:9D:CB:FB:8F:47:0B:6C:CE:2A:37:7B:20:E4:4E:DF:86
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 018B47BF133DE5F033B4880604418193F53F
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/cGYA553L-49HC2zOKjd7IORO34Y.roa
Signing time: Thu 19 Oct 2023 11:43:06 +0000
ROA not before: Thu 19 Oct 2023 11:43:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197709
IP address blocks: 185.238.60.0/24 maxlen: 24
91.242.231.0/24 maxlen: 24
192.162.144.0/22 maxlen: 22
193.227.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:bf:13:3d:e5:f0:33:b4:88:06:04:41:81:93:f5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Oct 19 11:43:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=706600e79dcbfb8f470b6cce2a377b20e44edf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:79:52:91:a9:74:c4:fa:3e:12:76:6a:ef:30:
39:f8:65:fa:78:cb:46:2b:37:5c:d9:71:da:95:70:
ee:00:79:5f:65:50:0d:80:3d:f6:b7:7f:df:88:af:
1e:b6:54:f5:37:19:4c:5f:e7:e1:88:f5:97:74:17:
2b:03:15:fb:2c:86:eb:47:5a:54:7a:15:f5:84:53:
ee:3d:9a:37:06:ec:e6:dd:c8:0f:1f:98:7d:72:31:
3d:14:9b:4e:7c:ca:c4:f6:b1:ca:c9:73:8d:89:92:
45:ad:5f:60:57:96:35:2c:9a:8c:c3:9c:4b:07:57:
f3:38:e8:e7:76:62:d2:1a:89:34:bd:15:8b:4b:1c:
c4:14:5c:dc:0e:7a:ed:12:3b:d1:2e:61:51:17:78:
81:17:96:74:13:ff:be:ee:d5:14:6c:1f:88:1d:e1:
c4:5a:8c:7f:c4:7a:cc:5b:45:9a:10:70:b1:97:b3:
82:8c:bf:61:f1:13:cc:28:b9:88:64:26:cb:76:8c:
9c:54:0d:0f:ec:2a:12:a5:45:d7:5f:f9:ba:42:68:
a2:4f:da:5b:48:6f:b8:d1:d0:33:81:d9:22:27:38:
a9:76:9e:e2:a1:fd:24:1c:65:72:a6:7b:87:cc:a6:
c5:2c:c4:81:16:75:ef:af:d8:56:31:f3:43:c1:93:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:00:E7:9D:CB:FB:8F:47:0B:6C:CE:2A:37:7B:20:E4:4E:DF:86
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/cGYA553L-49HC2zOKjd7IORO34Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.231.0/24
185.238.60.0/24
192.162.144.0/22
193.227.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:16:06:fd:2f:c1:57:ad:ff:3a:ba:b6:bb:06:94:8a:98:87:
b0:1c:86:d4:6c:a3:54:1d:62:49:fb:dd:7a:aa:cd:fb:86:6f:
9c:fe:4f:79:c8:2a:58:2f:8a:56:05:26:af:1a:fc:2d:e0:fd:
2a:a7:ad:94:c6:2a:05:29:af:8e:06:57:29:2d:3a:fd:b5:c3:
de:44:ed:8e:15:da:88:09:02:53:04:66:70:cc:3c:4f:d4:5b:
48:58:2f:1b:8d:1f:4e:9c:36:3f:79:f5:93:08:e8:bc:03:b1:
4e:3c:25:b7:22:60:9d:6b:49:a8:2d:58:a6:53:b5:ef:8d:db:
e7:56:3a:4a:b7:f1:c7:07:21:61:53:27:c0:bb:64:bf:75:1b:
f0:c4:02:8b:4d:36:f9:d6:58:7d:51:6b:4f:cd:f2:43:e0:41:
f1:df:90:34:19:fc:f4:d5:18:7a:27:8e:63:03:83:cb:89:4c:
75:d4:ee:31:b4:87:01:92:46:55:32:9c:75:82:69:ee:d1:fc:
ca:9d:fd:72:b4:19:6d:4e:5c:65:71:a4:e8:e4:94:2d:05:2a:
3b:08:dc:d3:55:2f:1c:1d:e2:02:82:00:3e:98:8a:3a:51:14:
eb:77:6c:90:56:02:66:be:f2:01:b0:45:9d:d8:b2:f8:6d:4b:
21:4c:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:44 2024 by rpki-client on console-fra.rpki-client.org