Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/gk_Cwm8AgwaBFxS7mlDjNWN4mPg.roa
File: gk_Cwm8AgwaBFxS7mlDjNWN4mPg.roa (raw, json)
Hash identifier: pjMCs4oasWOjqk5ZHm1pRrOOVqYlxo5CvPQM7MDpVbo=
Subject key identifier: 82:4F:C2:C2:6F:00:83:06:81:17:14:BB:9A:50:E3:35:63:78:98:F8
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01856E1D32F2748F6FFC09B630506176FC4F
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/gk_Cwm8AgwaBFxS7mlDjNWN4mPg.roa
Signing time: Sun 01 Jan 2023 16:14:45 +0000
ROA not before: Sun 01 Jan 2023 16:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210162
IP address blocks: 195.7.8.0/24 maxlen: 24
195.7.9.0/24 maxlen: 24
195.7.10.0/24 maxlen: 24
195.7.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:32:f2:74:8f:6f:fc:09:b6:30:50:61:76:fc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 1 16:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=824fc2c26f008306811714bb9a50e335637898f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:8d:1e:ad:30:32:b6:7e:8e:5c:6a:ac:80:
95:3d:19:a1:72:39:30:71:3a:b3:c3:0d:74:62:d9:
66:88:9a:5e:4b:60:21:34:4f:4c:c8:9c:e5:83:88:
b5:64:c4:67:ef:98:0a:1d:03:df:d3:cd:0b:59:17:
f2:db:93:0f:90:6b:1f:aa:22:69:93:bf:12:aa:36:
07:d3:63:e5:98:6b:27:cd:9b:f2:9e:7b:06:62:bb:
35:e7:7e:38:d0:9a:e7:60:8d:5e:8d:07:34:25:b2:
ec:c2:63:ea:3c:a8:4a:89:d8:e8:92:9b:05:1b:1c:
aa:a9:13:24:ba:ef:78:49:1a:fd:c2:67:23:fc:12:
d4:8b:08:ac:4d:88:f8:77:13:6e:b0:36:78:33:45:
e5:ad:83:7c:d8:7a:bb:5d:6b:19:8b:4b:4e:e8:0a:
6f:97:87:2c:44:e0:66:e0:b2:1e:c2:f9:32:38:ee:
b3:c4:22:35:de:7d:43:f4:f7:02:ea:08:e9:e3:32:
0c:1c:5d:75:10:40:c1:4a:8d:8b:28:86:a5:1e:74:
88:41:ee:7b:08:85:d0:05:46:16:40:2b:86:72:2c:
ab:c4:37:db:83:c3:b6:f2:fb:02:6c:36:d4:61:2e:
fb:4e:7b:59:23:c6:ca:cf:41:da:75:93:52:fc:ed:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4F:C2:C2:6F:00:83:06:81:17:14:BB:9A:50:E3:35:63:78:98:F8
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/gk_Cwm8AgwaBFxS7mlDjNWN4mPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.8.0/22
Signature Algorithm: sha256WithRSAEncryption
41:c2:ff:dc:60:df:f8:58:47:b6:18:a8:52:95:6f:ae:e9:56:
80:9a:2c:53:0a:cf:24:6f:a1:fc:ed:1a:bf:ac:54:15:aa:73:
24:bf:97:25:33:c6:b2:b8:64:6d:bb:b9:88:ad:ea:32:f8:db:
a2:92:ee:f6:af:83:75:ae:d4:f3:75:a9:bd:af:04:95:1f:51:
10:58:fd:0e:ba:5c:f6:cc:db:9a:2f:7b:ea:a4:f2:9d:98:a6:
93:99:43:76:06:64:d0:28:93:05:b3:9a:7a:cb:ee:8b:73:8a:
5e:7f:70:ff:00:93:53:cc:76:83:73:cc:13:40:fb:4c:36:c3:
0f:f0:11:00:8e:71:78:8a:ae:48:3a:bc:7f:e0:fc:c6:7c:27:
07:96:08:7a:ac:a8:75:66:b1:40:07:72:27:a6:c8:f2:74:84:
c2:0a:cb:76:46:eb:60:84:41:5c:6d:b5:0a:be:5b:89:24:ad:
b5:8c:f5:23:c5:a8:d3:c1:bd:16:3a:da:38:50:ea:19:8f:56:
c5:18:32:84:0c:e8:5b:a2:ab:79:6f:6a:e7:6c:a2:80:39:33:
fd:c2:3c:73:7e:b5:03:e2:4f:52:c9:3b:4a:42:ab:6b:d0:51:
29:7c:6a:be:89:46:5d:ff:81:08:ac:94:6b:98:42:32:36:38:
93:ee:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:46 2024 by rpki-client on console-ams.rpki-client.org