Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/GfDC9p22-eApvuBWkwzN5RQnp0s.roa
File: GfDC9p22-eApvuBWkwzN5RQnp0s.roa (raw, json)
Hash identifier: qI99Agptw3CxCCSk5rGd/9+XgvbcQVmpyfPJ783Fku8=
Subject key identifier: 19:F0:C2:F6:9D:B6:F9:E0:29:BE:E0:56:93:0C:CD:E5:14:27:A7:4B
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 0185708C919CF1EDDCBA3BDA0C7B4361F559
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/GfDC9p22-eApvuBWkwzN5RQnp0s.roa
Signing time: Mon 02 Jan 2023 03:35:38 +0000
ROA not before: Mon 02 Jan 2023 03:35:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212650
IP address blocks: 185.190.88.0/24 maxlen: 24
92.61.168.0/21 maxlen: 21
2a10:6540::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 03 Oct 2023 08:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:91:9c:f1:ed:dc:ba:3b:da:0c:7b:43:61:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Jan 2 03:35:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19f0c2f69db6f9e029bee056930ccde51427a74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:d8:6c:0d:b4:fe:36:96:df:83:d3:a6:03:
89:3a:93:94:2c:f4:ea:17:d5:01:43:4d:d2:ac:74:
bd:2d:ce:05:19:4b:97:48:61:c7:ff:a3:d8:96:4a:
a9:12:43:57:60:26:c8:ce:0c:4f:48:3f:79:7b:f4:
9c:bb:8b:b1:91:4a:59:b8:67:67:5b:2a:4e:41:24:
38:1d:99:ff:45:00:3c:7b:58:e3:ce:7b:ca:fd:83:
b0:4e:9b:5f:e8:1b:3e:e7:f2:c6:80:49:4f:e8:1f:
5a:13:5d:ec:fe:d5:b9:dd:6f:9c:c7:af:d0:b5:82:
e2:84:77:62:52:53:c6:20:bc:36:70:9b:fb:53:50:
91:ed:62:50:9c:79:5b:27:3e:35:30:35:29:12:33:
f6:47:75:38:f5:f9:b2:d4:8d:bd:c7:60:ad:df:29:
f0:27:4d:b3:67:df:a5:ce:29:4d:db:e7:89:3e:94:
1f:b8:4f:b1:9a:fe:28:29:8b:34:ce:0c:07:0a:b3:
ba:e4:8b:83:11:81:9d:b0:12:69:ea:70:d4:3b:fe:
59:9a:87:1e:07:8d:00:2f:9b:b4:ec:b4:03:da:2b:
02:f0:53:5f:fd:c1:d9:79:a7:da:ef:e6:18:8d:72:
43:3b:67:2a:61:b9:03:2d:1d:41:77:e2:f8:59:e3:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:C2:F6:9D:B6:F9:E0:29:BE:E0:56:93:0C:CD:E5:14:27:A7:4B
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/GfDC9p22-eApvuBWkwzN5RQnp0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.168.0/21
185.190.88.0/24
IPv6:
2a10:6540::/29
Signature Algorithm: sha256WithRSAEncryption
15:e2:65:c0:50:e1:86:37:bb:81:81:04:16:c5:53:13:10:f7:
71:00:17:56:35:c5:8b:72:3b:41:23:e4:e7:32:88:83:d8:30:
3d:8d:10:3c:ce:46:3a:3e:45:76:90:43:17:74:29:6c:3e:7d:
30:4a:68:3a:e4:34:6f:24:fb:60:11:a0:56:83:e1:4b:70:24:
88:be:86:92:fc:1f:ae:8d:27:98:5f:f7:ee:46:a2:7f:02:6a:
90:df:1c:22:a7:eb:ae:3d:1e:56:95:22:e6:42:ad:07:81:7c:
f6:84:6c:c0:2e:d2:3f:04:8d:ce:f2:a3:b0:27:d6:21:b7:72:
15:a3:11:e6:a0:1f:af:c7:d4:0e:8f:c2:45:6b:56:c4:65:42:
c8:b8:95:b6:bb:8e:dc:2a:97:48:a1:32:d7:9e:c5:ad:13:b2:
b0:b8:22:8a:b0:f5:96:1c:5c:fc:79:07:cf:62:f4:8a:79:b1:
cc:97:2a:3c:b0:7d:b2:14:1d:36:52:aa:a1:1f:ef:b8:cc:4b:
38:10:bc:6f:e9:65:22:bd:aa:d6:94:5e:8e:e8:63:fb:9a:ba:
f8:35:80:9d:51:d9:78:1e:f9:c1:35:57:ff:73:c0:a5:6e:1f:
b9:5b:3c:fc:4b:04:8e:58:9f:df:85:a0:c3:1d:8d:5a:c6:31:
70:7f:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:39 2024 by rpki-client on console-fra.rpki-client.org