Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/gUbakZi47VvkahKgDLNp-sHYals.roa
File: gUbakZi47VvkahKgDLNp-sHYals.roa (raw, json)
Hash identifier: b4/LWMCegQCNQh0ybQv4Zver3ULHNd4CEDFODIrfKoA=
Subject key identifier: 81:46:DA:91:98:B8:ED:5B:E4:6A:12:A0:0C:B3:69:FA:C1:D8:6A:5B
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 018958425C96A958937EDAA30024D70ACD05
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/gUbakZi47VvkahKgDLNp-sHYals.roa
Signing time: Sat 15 Jul 2023 06:34:51 +0000
ROA not before: Sat 15 Jul 2023 06:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 185.229.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:42:5c:96:a9:58:93:7e:da:a3:00:24:d7:0a:cd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Jul 15 06:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8146da9198b8ed5be46a12a00cb369fac1d86a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:82:07:fe:c5:87:2b:0b:6d:b2:ab:3e:05:
27:50:1b:c6:7a:c7:a9:90:78:c3:47:b5:c8:1d:70:
17:fa:da:1e:76:6f:c4:d2:31:69:21:05:4e:66:f3:
cc:f3:bc:82:b3:72:3f:f1:cb:08:1d:99:d2:b6:98:
08:cb:a9:91:ac:83:4e:a0:81:f8:86:6e:b4:1f:0d:
bb:23:46:76:27:7f:e8:a3:4d:fa:40:a2:6a:bb:cb:
41:1e:01:03:71:dc:66:26:85:f7:cb:96:e2:b2:9f:
e2:9c:5b:50:2a:3c:ed:a8:16:84:13:ef:68:c6:61:
67:5f:46:74:0c:29:c0:47:5a:67:92:cc:77:52:df:
0b:e7:cb:91:7c:87:24:c0:a1:f9:c8:53:49:ff:2b:
a9:f3:e9:c4:5f:fd:af:ae:08:92:cc:85:65:eb:45:
3e:6d:90:61:73:d8:d5:16:9a:ad:91:e9:c9:1a:f2:
40:aa:62:8a:eb:34:55:48:70:67:aa:29:3f:f0:d9:
4b:da:72:9c:b5:a7:b3:e4:69:ae:d5:66:ff:e5:8a:
47:8e:6f:80:70:7f:54:9b:78:df:60:ac:14:36:06:
e5:29:8c:83:51:73:13:a9:42:74:3d:21:72:42:23:
3d:11:76:c1:46:e2:e6:ff:05:bb:b5:77:33:41:ef:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:46:DA:91:98:B8:ED:5B:E4:6A:12:A0:0C:B3:69:FA:C1:D8:6A:5B
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/gUbakZi47VvkahKgDLNp-sHYals.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.133.0/24
Signature Algorithm: sha256WithRSAEncryption
48:27:cc:9e:72:b4:a1:d0:12:cc:7b:10:5a:b8:5b:97:fc:f4:
11:6b:15:da:c8:2a:60:8d:73:f0:3d:47:37:8e:e0:43:fd:58:
a0:f9:91:0e:30:8c:8c:74:58:d1:3b:7a:9b:b0:51:6a:2d:2a:
24:10:49:e7:51:d4:cd:96:c8:2a:10:50:94:05:6d:51:3a:a9:
e5:d8:74:fa:1d:65:69:73:79:50:d3:c6:3f:e1:47:7c:6a:a6:
df:94:b4:a5:ab:af:c5:f6:3f:fa:1c:11:cb:c8:0f:02:8c:ef:
07:21:43:1d:4f:dc:8e:bb:85:a0:2b:95:a6:f3:35:39:7d:07:
c6:ab:39:53:67:3b:48:c8:78:21:2a:d0:97:16:cb:87:8d:53:
32:08:b8:fc:a6:65:94:a6:d5:51:49:48:ac:e2:63:d4:45:41:
ae:83:04:db:d4:7f:92:c4:af:c5:84:e8:a6:50:3c:27:a3:87:
5f:54:e0:31:af:ac:7a:42:68:f2:d6:7c:58:21:35:e2:84:84:
87:4e:78:f4:d2:2a:9d:36:78:5a:e9:6e:5e:84:de:c4:18:72:
21:55:98:f0:26:44:d0:64:98:f0:ef:f1:0a:94:04:07:f8:bb:
ee:9f:3d:e9:34:a1:46:82:78:06:5a:37:74:d5:2b:1a:52:66:
52:be:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:48 2024 by rpki-client on console-ams.rpki-client.org