Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/gD0CwiMZXV9dMBk9GyMF0f9maBM.roa
File: gD0CwiMZXV9dMBk9GyMF0f9maBM.roa (raw, json)
Hash identifier: 6b+tXIW6aigzauWIDpP96yYMnv6LN1gubbLYjOCtzGQ=
Subject key identifier: 80:3D:02:C2:23:19:5D:5F:5D:30:19:3D:1B:23:05:D1:FF:66:68:13
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0185730389ACB2570F708843D0145BAAD340
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/gD0CwiMZXV9dMBk9GyMF0f9maBM.roa
Signing time: Mon 02 Jan 2023 15:04:49 +0000
ROA not before: Mon 02 Jan 2023 15:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 77.74.230.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:89:ac:b2:57:0f:70:88:43:d0:14:5b:aa:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 2 15:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=803d02c223195d5f5d30193d1b2305d1ff666813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:7f:ec:20:54:dd:66:c6:f2:1b:23:80:b2:
02:cd:58:8c:57:ae:53:24:a8:b4:f3:11:09:af:7f:
61:d4:33:4e:6a:c8:07:19:57:1d:05:d8:36:3a:0b:
70:d4:a7:47:16:13:98:1c:9d:3c:00:6f:bd:ed:cd:
c0:34:74:9a:17:79:20:90:28:d7:f1:76:d2:98:4b:
58:19:d2:cd:b5:1a:23:7b:43:da:78:17:f1:c7:30:
4b:05:ed:ba:2e:77:c0:85:84:90:70:94:e3:44:d3:
42:05:f8:24:c8:83:29:19:87:53:72:ad:69:d8:42:
86:0d:3b:f7:ac:30:a8:0d:95:50:55:b8:03:8f:e7:
ce:b9:05:6d:78:f4:62:c3:3c:0f:6b:7c:ce:a9:b0:
c7:40:44:c0:9d:5e:13:9b:90:ab:aa:86:ee:c2:00:
90:07:b3:ab:47:6c:13:da:99:b3:96:ad:a1:62:f0:
1d:55:69:05:27:ab:a4:ca:51:19:60:d1:87:c9:c7:
34:c5:08:b8:a4:3e:b6:38:e0:2c:6c:cb:a0:f2:34:
ca:8d:24:99:ec:62:d4:e3:13:2a:70:26:a1:61:97:
6a:4a:8e:eb:63:60:7f:f6:f8:b0:66:10:bd:9b:98:
d4:3b:84:e1:5f:f2:04:6d:bd:79:36:2d:59:aa:df:
99:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3D:02:C2:23:19:5D:5F:5D:30:19:3D:1B:23:05:D1:FF:66:68:13
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/gD0CwiMZXV9dMBk9GyMF0f9maBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.230.0/24
109.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5d:80:c1:28:7b:66:16:87:7f:b2:02:df:5a:fe:15:d2:f3:
7f:b3:97:18:a4:57:dc:44:90:e4:ac:07:4e:b4:ff:ea:ab:ab:
90:33:e3:97:50:ee:29:52:e2:d1:42:49:e3:25:bc:57:ce:4f:
c1:c7:91:39:b5:11:c4:21:81:f6:67:70:64:6e:93:64:94:62:
5c:6f:a0:cb:4d:57:ed:ef:3b:66:1f:d9:08:73:65:53:9a:18:
38:83:cf:b9:8d:0b:fb:8f:44:75:be:94:9c:6d:41:6d:97:5b:
14:3d:94:2a:6a:3f:62:61:47:27:90:9e:49:29:40:cd:3f:8d:
d4:33:db:57:fd:9e:0f:b3:a0:e9:03:5b:5d:8c:a7:39:bb:22:
6d:7d:00:55:65:75:43:0f:db:1d:fd:df:f6:7b:48:dc:08:13:
95:d2:07:bd:9e:fe:0b:ad:9b:7a:3a:c9:40:40:9a:5b:cc:5a:
5f:28:9e:98:2c:7e:2a:29:88:5f:ed:ec:d6:1e:36:8e:e8:b5:
11:37:38:1c:80:b5:41:8b:aa:4e:6e:a4:86:4e:56:41:10:ba:
3b:b1:c7:52:bc:40:a6:a4:0c:b0:0f:eb:d4:1d:31:b2:76:92:
1c:19:03:63:64:c4:3f:d1:6c:58:cf:fc:02:32:7f:5a:44:7a:
8f:e5:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org