Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GH0u05DKuKjMnCqK2-OYFHNJNxo.roa
File: GH0u05DKuKjMnCqK2-OYFHNJNxo.roa (raw, json)
Hash identifier: 6fTxNzlF1sZ3wJitjDkZVMvbNA6g+6c/+pmw135zTak=
Subject key identifier: 18:7D:2E:D3:90:CA:B8:A8:CC:9C:2A:8A:DB:E3:98:14:73:49:37:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192599327EC0EF219102BA69040E8D25E12
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GH0u05DKuKjMnCqK2-OYFHNJNxo.roa
Signing time: Fri 04 Oct 2024 22:07:49 +0000
ROA not before: Fri 04 Oct 2024 22:07:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214943
IP address blocks: 87.120.84.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:59:93:27:ec:0e:f2:19:10:2b:a6:90:40:e8:d2:5e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 4 22:07:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=187d2ed390cab8a8cc9c2a8adbe398147349371a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:2f:76:d9:67:08:da:05:aa:3e:fc:41:84:
1a:a4:8c:43:f3:eb:12:64:22:c2:05:b0:78:7f:47:
8f:59:be:77:ce:f5:d8:a2:c8:ca:23:ea:c4:d8:1b:
5a:78:85:c5:15:41:02:63:9a:9b:6d:a1:2c:98:fc:
5c:7e:9a:4b:81:d1:8a:b7:10:35:1c:87:70:76:76:
1e:3c:6f:1c:51:38:1d:7f:f7:91:a1:40:c4:b4:11:
f8:61:f6:37:66:f5:c7:58:d7:de:02:24:5d:6f:37:
64:d7:64:22:63:14:14:bf:e7:12:5d:af:87:36:b6:
c5:bf:66:ee:d2:66:b1:0c:c2:7a:71:18:1c:26:46:
79:be:4c:9c:31:d5:27:0c:10:da:4b:92:ba:8c:d9:
8c:4c:46:df:f9:37:df:9c:b9:c4:95:44:a8:48:2e:
58:d7:0d:8a:25:21:ed:12:ae:2c:a6:9c:21:77:0b:
39:39:14:89:4a:50:47:9a:bc:2e:d6:36:ce:ff:6c:
a6:33:6f:c7:99:61:fb:ee:74:34:d5:ff:9d:42:70:
e8:96:1e:da:c3:1f:3b:ad:25:23:75:e5:6e:9d:34:
74:45:bc:a7:bc:fe:11:a7:9b:99:80:f0:cf:fc:bf:
f7:90:f9:89:47:93:8e:6d:5b:b3:35:92:5a:ba:55:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7D:2E:D3:90:CA:B8:A8:CC:9C:2A:8A:DB:E3:98:14:73:49:37:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GH0u05DKuKjMnCqK2-OYFHNJNxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.84.0/24
178.215.236.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c1:29:15:dc:b4:e7:80:ba:92:a5:4b:31:32:4a:b4:04:b1:
3c:06:1d:9e:ff:63:08:16:4c:d9:a1:40:75:92:fd:6c:c3:83:
54:68:b2:e7:35:83:29:ea:dd:e8:93:89:99:95:39:2a:04:fd:
91:f1:b8:ea:bf:cd:ab:09:b5:1b:18:3f:eb:fd:a6:eb:74:7d:
6f:43:b6:11:fe:b6:33:f8:12:83:c7:7a:d7:f8:ac:d4:b5:12:
97:2d:9e:f8:17:be:74:33:70:1d:7e:f4:05:ec:f2:3b:1f:83:
90:d0:29:2a:14:0e:e8:bd:cb:e9:65:bb:0e:65:cb:7b:bc:bb:
21:02:e7:85:b9:8d:85:1d:27:86:26:ad:4f:d1:bd:35:b9:2b:
ee:4c:12:7a:62:aa:52:08:c1:60:cd:d7:19:b5:24:da:67:8d:
2d:2b:59:c9:7e:91:8a:a2:db:cd:c5:b1:54:6c:ba:f9:55:1b:
01:e9:66:50:33:7a:a5:5a:55:40:a3:6c:0c:81:c4:e9:c7:3e:
51:ae:8c:a1:ec:48:8d:66:80:ad:cd:88:76:4b:c7:d2:20:a2:
75:c3:37:78:8a:85:8b:7f:60:d2:1a:17:c0:af:fd:d1:3a:10:
72:e3:a0:83:fc:96:dd:69:be:76:99:9c:8a:28:d1:f0:e8:3a:
07:b5:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 16:59:05 2024 by rpki-client on console-fra.rpki-client.org