Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GiBmMjndt-VbBji5l_wPegUYjdA.roa
File: GiBmMjndt-VbBji5l_wPegUYjdA.roa (raw, json)
Hash identifier: kNvQ+uUOuHgc2Y+b1YAONa6wshwv2rGgnyqVGBAjpQE=
Subject key identifier: 1A:20:66:32:39:DD:B7:E5:5B:06:38:B9:97:FC:0F:7A:05:18:8D:D0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D1C84A6C5CB71630357E1F40FE8F61146
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GiBmMjndt-VbBji5l_wPegUYjdA.roa
Signing time: Thu 18 Jan 2024 12:21:11 +0000
ROA not before: Thu 18 Jan 2024 12:21:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199239
IP address blocks: 185.226.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 12:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:84:a6:c5:cb:71:63:03:57:e1:f4:0f:e8:f6:11:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 18 12:21:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a20663239ddb7e55b0638b997fc0f7a05188dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:54:d9:cd:9e:8f:66:b5:7f:2d:4b:2d:e2:
46:5e:b5:72:2c:95:53:8d:7a:5b:4d:3e:8e:5b:61:
41:8e:17:c3:95:08:1d:a6:d1:fc:56:c3:ad:98:d8:
44:53:94:1d:1c:49:6c:0f:e4:d9:95:2a:43:db:75:
38:d4:41:a3:9b:6c:a9:61:61:9f:00:a4:0b:30:72:
05:c5:4e:70:13:3a:cf:ec:65:38:a7:c0:0a:cc:6c:
02:43:f0:b8:88:e3:77:2a:b3:33:b4:18:0b:ac:ee:
d9:d8:81:f2:5f:5d:1e:10:52:24:46:21:63:d0:3d:
44:93:b8:04:58:3c:90:15:a2:94:45:04:70:e6:4a:
90:c9:17:95:e6:84:26:7e:7d:8a:32:78:07:df:3e:
f0:6f:8f:40:94:d7:29:01:a6:0e:9d:ae:9c:8e:39:
83:a5:bb:70:73:a1:e4:b9:5e:d1:a6:02:47:8c:a9:
fd:84:06:e3:5f:7d:b5:9e:91:61:8d:a0:52:90:49:
71:27:25:af:c4:59:59:bf:25:2d:63:44:90:80:85:
cc:52:5c:be:6e:75:78:70:f8:79:8f:24:3e:8f:a2:
d7:5f:46:67:d4:b1:45:66:5d:d1:3a:b7:30:22:e6:
6f:fa:aa:58:39:a0:6d:fa:7d:a1:76:b1:5e:81:c2:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:66:32:39:DD:B7:E5:5B:06:38:B9:97:FC:0F:7A:05:18:8D:D0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GiBmMjndt-VbBji5l_wPegUYjdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ec:31:e9:ed:86:82:b9:d9:6f:53:7d:ae:78:51:79:40:c6:
5d:59:cf:f9:ac:16:90:49:87:dc:e0:fa:bb:6d:e7:fe:65:b0:
2d:b3:74:30:aa:a4:03:ea:92:00:67:d2:5f:5e:77:8f:b7:5f:
59:0d:9b:bf:6c:f4:71:43:ad:72:d1:bf:b4:69:e4:21:a8:fb:
5e:f6:97:b8:35:5e:f7:5e:8a:54:65:de:3d:5d:ed:60:e7:f6:
22:46:af:0f:cb:d5:8c:c2:d1:ec:70:d5:05:aa:34:89:ac:85:
99:ea:64:0d:29:78:8e:31:22:ce:01:96:db:dc:c6:2f:52:64:
c0:19:f5:98:e0:0b:d4:70:16:fa:e6:9e:0d:e4:ab:46:c2:73:
f4:2f:ee:f3:f7:b4:e4:81:f1:49:34:ef:ac:4f:0f:bb:0b:8a:
6d:46:0d:9a:ee:20:81:96:db:af:38:08:d6:e6:7a:02:dc:cb:
e0:94:08:a8:14:b3:56:d6:3e:7e:21:b4:31:38:1d:6e:af:6f:
d7:92:4a:92:24:96:a8:f2:4b:dd:18:b7:9d:d8:40:8c:b5:63:
2d:c9:69:c2:09:30:64:52:ac:3a:20:dc:23:ce:ab:88:f0:34:
47:f1:08:90:95:e8:ea:da:12:b8:41:50:5b:16:64:e8:51:5c:
e1:ea:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 17:09:50 2024 by rpki-client on console-ams.rpki-client.org