Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/GCGK9f-VA1-eaJZ9pYoexaq7TIY.roa
File: GCGK9f-VA1-eaJZ9pYoexaq7TIY.roa (raw, json)
Hash identifier: AArswfL3F6lxVLeCCUSu8qQj/uCBuz9gxDC/90sswak=
Subject key identifier: 18:21:8A:F5:FF:95:03:5F:9E:68:96:7D:A5:8A:1E:C5:AA:BB:4C:86
Certificate issuer: /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial: 018570306B61D94126E8916B05A610F3ACD4
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/GCGK9f-VA1-eaJZ9pYoexaq7TIY.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28757
IP address blocks: 217.16.216.0/22 maxlen: 22
217.16.216.0/21 maxlen: 21
217.16.220.0/23 maxlen: 23
217.16.222.0/24 maxlen: 24
217.16.223.0/24 maxlen: 24
80.80.178.0/24 maxlen: 24
80.80.179.0/24 maxlen: 24
80.80.176.0/23 maxlen: 23
185.71.108.0/22 maxlen: 22
80.80.176.0/21 maxlen: 21
80.80.176.0/20 maxlen: 20
80.80.184.0/21 maxlen: 21
80.80.180.0/23 maxlen: 23
80.80.182.0/24 maxlen: 24
80.80.183.0/24 maxlen: 24
80.80.191.0/24 maxlen: 24
217.16.208.0/21 maxlen: 21
217.16.208.0/20 maxlen: 20
2a02:6b00::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 11 Oct 2023 21:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6b:61:d9:41:26:e8:91:6b:05:a6:10:f3:ac:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18218af5ff95035f9e68967da58a1ec5aabb4c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:e8:16:7d:27:04:30:5b:ae:d2:67:04:60:
d5:2c:9d:ad:c1:ff:a7:90:e6:06:f9:56:22:df:56:
30:d2:e5:71:0e:c4:77:62:36:c6:7d:aa:c4:80:df:
b1:17:22:d3:9f:8c:41:5c:12:81:72:90:d5:93:8c:
9e:7a:7d:79:fd:43:e5:6e:67:60:0c:b2:6a:17:5a:
68:7d:e3:37:72:66:26:86:27:a7:de:6a:37:98:35:
c3:f6:68:31:ec:9c:3e:e4:07:be:47:77:0e:57:b1:
46:4f:71:e9:95:e5:4f:3e:89:a6:5d:a6:4a:66:4c:
1f:0e:ea:ff:a5:c1:a2:e1:50:56:42:e4:e2:11:46:
7c:c3:ec:a0:8b:86:98:1f:a6:65:a6:c7:4d:6e:3f:
0f:fe:57:82:fa:aa:f5:db:b1:87:ca:8d:a3:a7:73:
b1:27:04:fb:29:cd:32:d5:d5:c4:c4:b7:17:c2:4e:
39:ad:74:ae:75:50:87:86:a5:c6:37:33:21:e6:06:
c7:35:bd:8e:d3:95:63:66:7a:4a:21:e7:e7:b9:7e:
a4:09:82:3f:17:0a:5b:53:e2:56:69:33:e6:c1:5a:
64:fe:48:aa:5b:05:82:6e:a3:b8:ae:6f:01:97:99:
1d:ac:ad:81:4c:f6:1f:4b:ef:f4:e6:ae:90:9e:0b:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:21:8A:F5:FF:95:03:5F:9E:68:96:7D:A5:8A:1E:C5:AA:BB:4C:86
X509v3 Authority Key Identifier:
keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/GCGK9f-VA1-eaJZ9pYoexaq7TIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.176.0/20
185.71.108.0/22
217.16.208.0/20
IPv6:
2a02:6b00::/36
Signature Algorithm: sha256WithRSAEncryption
77:2d:c6:ab:ee:34:9c:db:06:1c:38:3e:d3:43:5c:45:df:b3:
8e:e5:07:2d:a6:94:90:00:54:60:9c:e9:1b:2c:3d:da:a6:f3:
ab:0a:da:aa:8b:e5:2e:17:e5:79:ca:08:63:be:04:67:2c:8f:
80:c0:88:9a:c9:84:e2:cf:6b:7b:e2:56:aa:a5:9b:31:ba:27:
b0:fa:03:b2:2a:67:7b:23:85:71:69:d3:13:44:f4:4d:49:43:
57:5e:83:02:e0:4d:0d:94:5c:97:13:56:c8:d0:2d:0e:c1:35:
e0:2d:e7:89:72:01:d8:16:9d:e2:6a:01:12:22:82:af:a3:b9:
e8:ed:84:f6:44:03:7d:91:b2:dd:67:6e:f6:e3:af:36:a6:4b:
b5:a7:24:e7:7e:cf:49:b1:a7:f7:57:c6:6a:51:1c:da:00:31:
b2:72:b0:99:2b:72:f6:8f:43:5b:61:55:6e:3a:83:c5:d1:1d:
01:2f:25:2c:ea:83:a9:fb:ee:ef:a0:d3:b0:ca:f0:f3:6b:be:
44:03:5a:db:60:4c:ce:db:e8:53:99:45:b5:59:ae:e5:3c:03:
08:60:a0:43:fa:5e:c3:86:01:c1:74:9c:d6:5b:81:49:a0:b5:
f9:87:c6:35:a9:f6:43:4d:5a:19:bb:7b:94:1c:d9:f3:0f:01:
14:27:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:23 2024 by rpki-client on console-fra.rpki-client.org