Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GcoS7lcdgnNfDiWDnJ6SCB_E-t4.roa
File: GcoS7lcdgnNfDiWDnJ6SCB_E-t4.roa (raw, json)
Hash identifier: dT40lGQh4sHXzB80PRPuWumgUo7flcOaqV41W3+W0Zs=
Subject key identifier: 19:CA:12:EE:57:1D:82:73:5F:0E:25:83:9C:9E:92:08:1F:C4:FA:DE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01922CF8B25377119A5442051CE3E52031BA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GcoS7lcdgnNfDiWDnJ6SCB_E-t4.roa
Signing time: Thu 26 Sep 2024 06:15:49 +0000
ROA not before: Thu 26 Sep 2024 06:15:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 45.66.228.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 07:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2c:f8:b2:53:77:11:9a:54:42:05:1c:e3:e5:20:31:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 26 06:15:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19ca12ee571d82735f0e25839c9e92081fc4fade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:66:cb:31:1e:d7:f7:71:b0:84:af:1c:73:
23:eb:a1:2e:9e:2e:6b:4b:6f:db:54:c4:45:1c:de:
2c:97:f7:24:a9:6c:34:79:c8:e0:2d:18:e0:f7:d8:
05:08:58:a9:2b:d4:6a:8a:1c:b3:1d:a2:53:3f:26:
3a:05:f0:ed:90:00:b8:35:c5:3a:6b:e7:46:3d:12:
22:c2:ad:7c:17:a8:66:38:6d:11:a3:ce:8c:2f:bf:
85:73:7c:e0:5e:89:0f:e0:06:d8:82:91:be:64:6b:
28:b9:a6:66:57:83:e6:bd:d1:59:0c:c0:16:e9:1b:
8e:b1:28:e6:a4:36:48:a8:a2:57:e9:ea:ac:0b:f7:
68:7f:82:e5:5b:3f:80:a2:17:69:ac:d3:fb:f4:8a:
51:d3:86:98:31:9b:eb:c4:67:18:81:21:27:36:28:
00:f3:c1:9e:8a:3a:a4:3b:3d:a1:c2:6d:83:66:64:
d5:c2:55:26:f2:7c:1f:36:06:5a:6d:83:1f:1e:61:
57:8a:15:72:b5:e7:e8:74:1d:23:19:40:a3:fc:a5:
22:09:40:3f:c2:6b:1a:7f:b3:9d:53:1b:3e:5a:51:
9f:df:b7:ce:95:58:e3:f8:55:cb:7c:ac:25:9b:6e:
44:33:25:85:9a:fa:59:19:10:9b:be:99:e9:4c:dc:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CA:12:EE:57:1D:82:73:5F:0E:25:83:9C:9E:92:08:1F:C4:FA:DE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GcoS7lcdgnNfDiWDnJ6SCB_E-t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
171.22.31.0/24
185.246.223.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fc:2b:ac:3a:1c:5e:fa:53:9b:ab:40:41:a2:e3:47:10:49:
e9:6f:64:ad:f2:4f:21:62:46:48:c4:e2:79:dc:ee:9e:31:80:
6b:46:01:e0:f7:91:14:ec:8c:2e:78:ef:50:f0:d0:a7:6f:23:
c3:ca:a5:69:52:d2:e9:72:d6:c6:23:79:8a:63:29:d7:54:f4:
33:41:3b:0d:80:31:b7:57:f2:1d:36:20:be:fd:fb:b6:af:ae:
aa:85:47:78:5c:44:8f:d0:9e:b8:62:0b:82:4d:8b:35:b4:f2:
60:01:02:a3:b0:5b:76:50:bb:d0:69:18:40:f3:c0:59:fb:d7:
dc:e5:c4:09:8c:c9:71:e9:12:50:6f:8a:0a:bf:33:6e:aa:7f:
a8:bb:38:74:df:e1:06:60:25:79:df:de:b8:57:6a:77:ab:b2:
1a:7a:9d:32:5e:7d:95:9c:70:ae:9d:08:a9:2d:7c:a3:83:b9:
67:cf:7f:86:64:99:2f:ae:93:e3:ce:1b:e1:4c:db:10:15:1d:
99:cf:83:b2:98:ad:9c:1a:15:9c:61:64:b3:59:a3:2e:d5:6d:
97:d2:0e:f8:95:b3:e2:b3:16:8a:52:4c:e4:5f:a8:c1:f8:af:
27:21:06:48:e4:f0:76:92:3d:2a:a3:dd:ca:5d:9d:0d:a9:f9:
f5:4e:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 10:42:24 2024 by rpki-client on console-ams.rpki-client.org