Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/G_8E0MvZ8GxzxTcjRyCnDWbCEdM.roa
File: G_8E0MvZ8GxzxTcjRyCnDWbCEdM.roa (raw, json)
Hash identifier: ZuAfBHVW/0cQTfUZDfuTUAEHr+zfeS4DUGI3Wsx6Czg=
Subject key identifier: 1B:FF:04:D0:CB:D9:F0:6C:73:C5:37:23:47:20:A7:0D:66:C2:11:D3
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 018A4B20F0C32E1933D169F5DE767B388983
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/G_8E0MvZ8GxzxTcjRyCnDWbCEdM.roa
Signing time: Thu 31 Aug 2023 10:26:04 +0000
ROA not before: Thu 31 Aug 2023 10:26:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12779
IP address blocks: 185.128.77.0/24 maxlen: 24
185.128.76.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:20:f0:c3:2e:19:33:d1:69:f5:de:76:7b:38:89:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Aug 31 10:26:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bff04d0cbd9f06c73c537234720a70d66c211d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:23:4c:ab:c0:4c:9a:32:2d:3f:5a:09:4d:
c8:60:03:42:f4:25:6f:ae:a7:e3:d5:80:2c:bf:94:
57:a4:2e:2a:64:d6:b0:78:b9:48:ce:16:d0:4d:4d:
49:3f:c9:52:29:7b:80:66:25:f4:12:e4:e9:1a:09:
be:66:f8:6c:44:45:89:fa:8f:be:d6:b2:89:a0:61:
f8:61:42:7b:32:19:39:bd:f1:e8:2e:96:ce:f5:5e:
12:47:6b:c1:c7:1a:cf:e4:e1:7c:34:b8:98:7d:fb:
45:d6:1f:35:fb:93:68:bb:23:b6:4a:a4:5c:34:54:
54:22:a2:45:b0:91:df:a0:bf:c3:2f:84:f9:1b:7b:
e1:9b:2d:18:7a:0c:b6:7f:0e:df:9f:0c:aa:1f:09:
d0:63:31:02:bc:4a:c8:45:54:2e:d5:10:0e:3c:d2:
27:1b:13:a1:66:5e:7a:34:4b:13:e8:4c:ac:5b:cf:
3c:4a:21:b4:d7:99:11:48:27:de:1d:b8:08:df:9c:
32:b3:a2:9e:61:26:6f:b5:f9:df:2b:2e:dc:fc:dc:
06:bd:4f:d6:a4:6c:46:95:d1:76:e4:d7:1d:fd:ec:
20:f2:c9:77:0c:3f:bc:8d:b5:6c:c1:fb:63:42:c5:
2e:d2:ff:ff:43:a3:00:cd:0e:f0:a4:cb:61:5e:a1:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FF:04:D0:CB:D9:F0:6C:73:C5:37:23:47:20:A7:0D:66:C2:11:D3
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/G_8E0MvZ8GxzxTcjRyCnDWbCEdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.76.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:86:d7:ee:3d:1f:e9:3b:f4:94:d9:9b:ba:90:30:26:9f:70:
1a:b9:a6:66:b5:8d:44:a5:0b:b9:ff:a9:18:5f:77:22:76:26:
84:90:3b:84:3c:ea:3b:fc:46:57:2c:91:e1:81:84:db:e5:0d:
ca:29:c9:f4:1f:ab:67:4e:5a:82:49:a8:39:23:a3:20:f3:cf:
c6:d9:ef:0b:46:c2:32:d5:2b:3f:a0:1e:2c:04:8b:57:8f:28:
5c:9c:cf:a4:46:a5:1e:27:e1:f7:69:ce:ac:6a:c6:99:56:47:
db:25:c5:29:09:d0:2e:d4:95:32:bb:29:ef:77:6f:45:b4:94:
68:5c:e6:df:63:81:ca:cb:9d:ab:c4:97:fc:28:3c:11:8e:63:
6d:88:e1:db:91:bd:bf:69:35:b2:5e:7e:96:e4:e7:4b:26:42:
3b:51:fa:d0:78:e4:b1:1e:2a:7f:4b:e8:46:d6:be:b8:64:87:
db:4a:a2:27:24:30:fb:7c:97:f0:1b:db:f2:d3:59:fd:8b:f8:
db:6f:7f:5e:40:30:a3:06:12:df:e3:ba:97:7c:c1:3a:02:98:
b0:3d:61:b8:17:4f:09:15:8a:28:5e:c7:3d:59:c5:c0:d7:a6:
fb:03:67:75:02:cf:11:f9:54:56:5c:d2:89:ad:35:ae:e1:81:
78:aa:f6:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpLIPDDLhkz0Wn13nZ7OImDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDY4N2EzZWU2MzIyYjc1N2RlODFlN2Y1M2M1ZDMyZWVi
ZTMzYTYwHhcNMjMwODMxMTAyNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmZmMDRkMGNiZDlmMDZjNzNjNTM3MjM0NzIwYTcwZDY2YzIxMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMkjTKvATJoyLT9aCU3IYANC9CVv
rqfj1YAsv5RXpC4qZNaweLlIzhbQTU1JP8lSKXuAZiX0EuTpGgm+ZvhsREWJ+o++
1rKJoGH4YUJ7Mhk5vfHoLpbO9V4SR2vBxxrP5OF8NLiYfftF1h81+5NouyO2SqRc
NFRUIqJFsJHfoL/DL4T5G3vhmy0Yegy2fw7fnwyqHwnQYzECvErIRVQu1RAOPNIn
GxOhZl56NEsT6EysW888SiG015kRSCfeHbgI35wys6KeYSZvtfnfKy7c/NwGvU/W
pGxGldF25Ncd/ewg8sl3DD+8jbVswftjQsUu0v//Q6MAzQ7wpMthXqEHcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBv/BNDL2fBsc8U3I0cgpw1mwhHTMB8GA1UdIwQY
MBaAFNBGh6PuYyK3V96B5/U8XTLuvjOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYt
OTdiZTQyNmEyMzM0LzEvR184RTBNdlo4R3h6eFRjalJ5Q25EV2JDRWRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYtOTdiZTQyNmEyMzM0
LzEvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYBMMA0G
CSqGSIb3DQEBCwUAA4IBAQAfhtfuPR/pO/SU2Zu6kDAmn3AauaZmtY1EpQu5/6kY
X3cidiaEkDuEPOo7/EZXLJHhgYTb5Q3KKcn0H6tnTlqCSag5I6Mg88/G2e8LRsIy
1Ss/oB4sBItXjyhcnM+kRqUeJ+H3ac6sasaZVkfbJcUpCdAu1JUyuynvd29FtJRo
XObfY4HKy52rxJf8KDwRjmNtiOHbkb2/aTWyXn6W5OdLJkI7UfrQeOSxHip/S+hG
1r64ZIfbSqInJDD7fJfwG9vy01n9i/jbb39eQDCjBhLf47qXfME6ApiwPWG4F08J
FYooXsc9WcXA16b7A2d1As8R+VRWXNKJrTWu4YF4qvbq
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:01 2024 by rpki-client on console-ams.rpki-client.org