Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/GGkKfOqUySPK95ghxT80d50DCIw.roa
File: GGkKfOqUySPK95ghxT80d50DCIw.roa (raw, json)
Hash identifier: dyK2elcwl5biOf8Rd2fYICDlydWhQ7I9OCQKAKM8N/E=
Subject key identifier: 18:69:0A:7C:EA:94:C9:23:CA:F7:98:21:C5:3F:34:77:9D:03:08:8C
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 01914593DFF8E133C2EA4C06D57DC7FE884A
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/GGkKfOqUySPK95ghxT80d50DCIw.roa
Signing time: Mon 12 Aug 2024 07:53:24 +0000
ROA not before: Mon 12 Aug 2024 07:53:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49371
IP address blocks: 185.124.12.0/24 maxlen: 24
185.124.13.0/24 maxlen: 24
185.124.14.0/24 maxlen: 24
185.124.15.0/24 maxlen: 24
185.236.28.0/22 maxlen: 22
2a03:9000::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 05 Sep 2024 06:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:93:df:f8:e1:33:c2:ea:4c:06:d5:7d:c7:fe:88:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Aug 12 07:53:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18690a7cea94c923caf79821c53f34779d03088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:f5:42:a1:17:35:4a:98:fa:ba:08:9e:b0:
8f:71:de:ef:8b:57:a7:48:52:c4:04:0c:34:11:f5:
29:6c:14:d8:86:5b:0d:9f:e1:5b:5e:8d:0d:54:35:
a6:1b:6d:cc:50:0b:0f:cb:a4:68:00:6b:9f:2d:c1:
25:3b:e1:16:7e:4c:3b:5a:d9:3e:dc:bc:d8:08:7e:
bb:ed:79:f5:fe:13:fc:9c:13:5e:2c:f2:43:92:d8:
19:50:b2:5c:c4:2d:eb:30:5d:b2:72:55:97:3d:75:
cb:1f:11:0c:e2:44:5d:e3:cf:ae:9a:7f:f7:5b:5c:
74:d9:02:65:17:2e:30:bc:ed:23:74:a6:a5:72:e6:
4b:48:cd:d0:64:56:40:d2:33:4f:74:21:16:0e:c7:
a9:4d:93:5e:1e:03:3f:a7:01:0d:37:14:0d:2a:89:
b4:1c:5c:65:29:4c:1d:82:56:7e:84:b0:82:90:b0:
6f:29:52:67:18:07:e7:96:2c:34:e2:9d:29:a2:fa:
65:39:24:6b:4e:1a:d7:3d:5b:ab:7a:3b:8a:f2:76:
ae:84:32:94:86:e0:b5:e9:dd:9a:52:34:44:6b:94:
ae:3d:90:52:b4:3c:6a:12:f8:d9:dc:e8:ad:88:14:
0d:3c:33:14:37:a0:92:91:e1:51:5c:b4:42:0c:c5:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:0A:7C:EA:94:C9:23:CA:F7:98:21:C5:3F:34:77:9D:03:08:8C
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/GGkKfOqUySPK95ghxT80d50DCIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.12.0/22
185.236.28.0/22
IPv6:
2a03:9000::/32
Signature Algorithm: sha256WithRSAEncryption
33:60:d0:e0:13:86:73:38:94:27:62:d5:85:8b:84:79:be:74:
41:99:22:fa:4f:4d:cd:99:bd:be:ea:b6:e4:ae:a5:fd:c2:10:
11:e5:9b:be:77:8e:45:08:0f:cf:82:dd:b6:6f:d5:d5:23:b6:
e4:cd:dd:20:a6:9f:9f:4c:fd:a4:1d:d2:f9:81:2d:c8:2d:c5:
6b:06:86:37:ad:db:f7:d0:83:ef:38:d2:c0:47:3e:eb:80:16:
8c:e3:ad:86:a5:43:59:cb:ff:db:aa:78:1a:8f:56:b5:4a:0d:
49:9e:2e:b2:bf:db:d4:6b:10:7a:c3:70:91:a1:ec:2a:12:29:
67:4a:56:92:fc:49:a1:e2:bd:83:31:c5:49:c4:bf:25:64:78:
5c:16:03:c5:1a:27:f5:39:b9:88:a3:01:de:82:9a:15:03:f0:
16:a3:7c:41:a4:c2:b1:8d:9a:42:24:b9:89:ce:d5:f3:34:e3:
fb:12:83:60:54:60:77:81:02:a9:c5:f9:d1:82:62:35:33:b6:
9e:71:45:54:6b:f7:8d:3f:a7:7f:ff:a8:ed:12:47:8f:b8:65:
bb:65:bf:ff:91:7f:40:6a:75:89:98:ce:e4:9d:59:0b:af:49:
11:5f:f4:99:c6:d0:68:e5:fe:6d:5e:3d:f8:e5:c7:d6:b2:a2:
a4:88:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 07:58:47 2024 by rpki-client on console-fra.rpki-client.org