Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gwR_zANpVHgBbRyzuAgQx6p_NZ4.roa
File: gwR_zANpVHgBbRyzuAgQx6p_NZ4.roa (raw, json)
Hash identifier: /3X/8g62BnmEhMGKLlShxqaGYfEkEavqwh4Yd6roSy4=
Subject key identifier: 83:04:7F:CC:03:69:54:78:01:6D:1C:B3:B8:08:10:C7:AA:7F:35:9E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BCE8EA93510E746D6D0372311AB793C01
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gwR_zANpVHgBbRyzuAgQx6p_NZ4.roa
Signing time: Tue 14 Nov 2023 15:58:57 +0000
ROA not before: Tue 14 Nov 2023 15:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 212.193.25.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:8e:a9:35:10:e7:46:d6:d0:37:23:11:ab:79:3c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 14 15:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83047fcc03695478016d1cb3b80810c7aa7f359e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:66:76:78:f4:7d:58:ce:69:06:e4:f3:4c:
1f:4d:06:e7:aa:2f:be:b4:14:d1:db:8c:16:aa:a2:
f6:38:9a:67:62:7b:38:f6:16:0e:ad:ad:5f:4c:91:
3b:b9:42:a1:17:45:72:70:4c:34:2a:61:08:74:74:
8d:b8:84:fd:b8:be:2d:ca:9c:1a:26:74:d7:0a:89:
51:b6:81:05:35:bc:ff:72:9c:e6:a0:cc:80:57:1e:
d7:32:ca:af:d7:34:83:54:a4:fe:62:68:de:2f:d8:
f0:10:56:2b:f1:91:4b:be:b3:49:40:22:f4:0e:5c:
d5:3b:3a:0f:8a:0a:7e:13:35:ba:9e:2a:4e:71:a2:
42:bf:38:f0:16:82:7e:12:7e:6a:f9:3b:0e:4f:26:
2f:7e:e1:c0:8d:56:44:fc:c2:fd:b5:c7:5b:06:d5:
27:6c:10:6a:85:5d:14:1c:b7:7a:ab:52:98:71:e9:
18:3b:a3:49:1a:3c:6e:e7:ca:74:bf:25:51:a6:8d:
14:e7:e9:62:77:5e:26:73:eb:0f:c9:e6:d4:71:a8:
bc:d9:64:f9:02:c7:52:21:e4:b4:60:37:a0:96:82:
0d:ff:7d:c8:b9:c0:05:06:84:ce:ce:29:2e:8c:90:
0a:41:11:26:64:00:97:b8:80:32:e6:55:e0:5f:e7:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:7F:CC:03:69:54:78:01:6D:1C:B3:B8:08:10:C7:AA:7F:35:9E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gwR_zANpVHgBbRyzuAgQx6p_NZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
212.193.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:50:bd:81:38:30:c4:0f:1e:94:db:2c:94:ca:06:80:5b:f3:
09:2a:98:5b:ff:98:b3:a5:b2:8f:15:f9:e0:95:ba:10:67:bd:
e3:8e:89:c6:df:66:0c:d6:b6:0e:2e:2e:ef:84:16:27:c8:5a:
3d:b9:f1:64:db:df:0d:d0:1f:9a:e0:aa:61:ff:fe:fd:30:78:
06:61:c1:8e:19:f2:e9:59:3e:1a:3d:57:35:d9:21:5c:b8:86:
3f:a1:4c:b6:c1:00:17:cd:f4:c3:38:23:6e:f3:a2:78:4d:80:
7e:84:85:42:7c:54:a5:20:08:97:15:14:f2:e4:8b:57:c2:9f:
bc:2f:f9:4c:39:d5:26:04:8b:77:e4:7a:48:77:f9:08:31:78:
a7:00:25:dd:21:9c:a8:e5:be:19:43:87:9e:14:9d:5e:cb:77:
8b:e6:88:e8:77:c7:3d:b8:c7:15:b0:5f:bd:5e:cf:56:e3:46:
67:19:fb:b9:99:1c:1d:ed:db:ac:8a:c6:d9:f2:b6:94:1f:4d:
5b:e8:f0:8d:4b:bd:d4:37:b7:b8:58:53:5f:fe:5e:67:12:32:
77:4f:e4:3e:e6:8f:78:a0:10:17:57:cc:27:ac:e8:b0:1e:a1:
f0:46:1a:4e:68:3a:0a:87:cc:c8:77:86:ee:f5:12:f3:dc:37:
cf:dd:89:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:19 2024 by rpki-client on console-ams.rpki-client.org