Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GovPtL3T0bM2dOq7ULrgvMmz-jQ.roa
File: GovPtL3T0bM2dOq7ULrgvMmz-jQ.roa (raw, json)
Hash identifier: wpoxklLWy3qxPzNibdS/uvVMRBtZ+a4DeLmuwgHzOn0=
Subject key identifier: 1A:8B:CF:B4:BD:D3:D1:B3:36:74:EA:BB:50:BA:E0:BC:C9:B3:FA:34
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01926B59AF56A28743B0DFB037D16E6FAB8E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GovPtL3T0bM2dOq7ULrgvMmz-jQ.roa
Signing time: Tue 08 Oct 2024 08:58:12 +0000
ROA not before: Tue 08 Oct 2024 08:58:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61071
IP address blocks: 85.217.180.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 22 Oct 2024 14:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:59:af:56:a2:87:43:b0:df:b0:37:d1:6e:6f:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 8 08:58:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a8bcfb4bdd3d1b33674eabb50bae0bcc9b3fa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:26:df:68:a6:2c:a1:62:65:65:7c:d7:d2:dc:
5f:97:82:4a:3b:7a:97:2e:a2:27:b0:66:e9:06:5f:
1e:b4:75:24:66:69:8f:45:bc:f3:bd:69:1c:1f:7c:
04:07:31:20:0e:c3:a0:39:e9:6e:75:50:fb:4e:99:
87:37:71:13:32:27:01:7e:0d:24:02:f0:2b:2d:bb:
db:9f:c4:b4:27:16:14:c5:1f:54:6a:4c:73:79:54:
1b:81:93:b3:21:48:33:c5:c2:5a:15:ca:5b:36:8c:
b6:b4:80:fc:ab:28:52:ce:86:12:ce:ef:25:c5:ba:
5f:37:47:9b:04:ab:e2:dd:f2:8d:3e:6f:8b:3e:0a:
54:2e:bb:04:16:db:53:7e:f0:74:7a:97:a8:17:45:
0a:e5:7b:5a:cf:1e:b1:25:ba:ef:af:7e:11:04:86:
b8:02:21:c2:48:36:10:c0:28:27:86:12:a2:b5:b6:
b6:e4:e5:34:aa:90:e6:37:54:e5:b4:a7:ee:50:a8:
ab:68:df:0b:5d:e4:b2:39:60:11:b0:e2:5b:ae:54:
54:57:19:68:25:be:30:ae:a7:4d:ab:7d:1a:ea:2a:
d8:8c:a8:09:db:fc:94:3a:38:04:62:42:e7:e4:30:
2a:3c:ce:a6:bc:41:3e:e9:49:86:b2:0f:4a:23:c2:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8B:CF:B4:BD:D3:D1:B3:36:74:EA:BB:50:BA:E0:BC:C9:B3:FA:34
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GovPtL3T0bM2dOq7ULrgvMmz-jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:5e:3d:85:d1:a3:03:bd:98:45:88:fe:06:0d:65:d9:e2:16:
8f:1f:32:bf:4a:eb:f8:58:7b:78:60:36:12:fa:34:ef:06:98:
b3:63:b3:25:a9:84:6d:da:da:ad:a0:ca:b9:48:5a:02:66:09:
a5:18:05:b1:49:70:4e:a7:c7:44:53:5e:89:77:13:c1:91:e1:
49:f6:77:89:64:30:3d:c0:67:5d:3f:1d:61:42:91:f6:70:58:
a8:7f:1a:00:7a:a4:e9:58:21:84:13:a0:f7:70:7d:c1:69:31:
75:c5:7d:4e:a8:15:a3:30:c5:72:20:ca:5e:45:e2:71:0c:dc:
8c:ba:e4:66:14:cf:aa:bd:9f:2d:1d:a0:4b:31:6b:ef:aa:e2:
86:7e:99:eb:fa:9f:62:79:20:7a:a7:7a:b5:51:a1:1a:0a:94:
03:bc:a7:6c:29:58:7e:6c:5a:02:85:e1:b2:b6:ee:8b:52:5d:
6b:63:48:7d:c0:18:04:35:1f:b3:08:3e:17:40:a5:3b:f9:a6:
56:45:ee:98:24:76:48:8f:2c:eb:09:77:d6:bb:8e:56:22:18:
3b:8f:63:d5:bd:81:d9:35:ee:2b:ba:5b:29:14:53:99:0c:23:
45:e0:6a:fa:7b:59:ea:d7:f9:a8:da:28:77:04:93:2c:5f:dd:
e7:df:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:30:59 2024 by rpki-client on console-fra.rpki-client.org