Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/GBTdUdYf_p8yQCRYnnyQO9N9G1k.roa
File: GBTdUdYf_p8yQCRYnnyQO9N9G1k.roa (raw, json)
Hash identifier: /NekmUI5wwH6e55rztTSZguSX0OpIWNGWET93QISjlo=
Subject key identifier: 18:14:DD:51:D6:1F:FE:9F:32:40:24:58:9E:7C:90:3B:D3:7D:1B:59
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0189D414C597690ADD065D32281A91D45F1D
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/GBTdUdYf_p8yQCRYnnyQO9N9G1k.roa
Signing time: Tue 08 Aug 2023 07:37:58 +0000
ROA not before: Tue 08 Aug 2023 07:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 185.121.227.0/24 maxlen: 24
185.188.143.0/24 maxlen: 24
185.188.140.0/24 maxlen: 24
185.121.226.0/24 maxlen: 24
185.121.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 07:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:14:c5:97:69:0a:dd:06:5d:32:28:1a:91:d4:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Aug 8 07:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1814dd51d61ffe9f324024589e7c903bd37d1b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:88:5c:23:52:3f:ff:11:d9:37:27:37:53:
2b:39:53:16:a9:d2:3c:77:f7:85:8a:37:51:28:71:
65:13:1f:ca:62:e5:e6:f4:76:05:f3:b2:ea:7e:a0:
01:15:71:69:ae:16:91:d5:ed:29:5c:94:6e:ae:93:
0e:e3:6d:c6:4f:88:81:73:85:db:2b:9e:c7:19:98:
a9:cb:20:e7:3f:ae:fd:4b:90:b6:9b:69:aa:ab:78:
f0:a7:bb:df:77:b5:9c:08:e4:be:e1:51:88:89:ab:
2e:ee:2c:01:cc:6d:5f:1b:13:07:81:99:9c:67:d4:
6a:aa:6c:da:b1:86:54:0a:7e:27:e1:2f:45:97:28:
35:1f:8f:b9:3d:1a:f2:b9:ef:bc:62:dc:a4:7a:5c:
33:2a:e1:c6:6a:2f:1b:01:6d:63:31:9f:17:c5:25:
93:63:55:59:3a:29:d2:3e:0d:aa:43:3b:65:04:2a:
83:23:6e:28:31:01:12:fa:9a:58:f0:e5:91:c3:94:
bf:bd:88:77:d3:19:9a:39:26:84:63:2a:c7:ee:c4:
87:5d:d4:70:37:76:50:84:c7:9c:e5:28:a3:c7:6c:
a5:16:90:53:c5:e5:06:a9:68:83:9e:69:51:61:18:
ad:2b:d4:7b:ef:46:5e:df:10:0f:38:39:dd:91:ef:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:DD:51:D6:1F:FE:9F:32:40:24:58:9E:7C:90:3B:D3:7D:1B:59
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/GBTdUdYf_p8yQCRYnnyQO9N9G1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.225.0-185.121.227.255
185.188.140.0/24
185.188.143.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:9a:5d:6b:d9:23:38:3e:93:76:d6:7b:c2:2b:92:ed:08:27:
38:97:e7:26:dd:af:1a:fa:bd:de:5a:6d:36:c9:b3:f1:ea:ee:
b2:1a:d1:1a:ba:4c:6f:d7:00:66:3c:d4:8c:ce:d2:07:46:0d:
71:5f:04:1a:71:fa:b3:5f:50:8c:00:8c:b4:ed:bb:cd:06:e1:
6d:9e:1e:d5:59:25:12:3f:a9:31:c3:ac:d5:d3:2c:72:0f:03:
d5:05:ac:dd:61:07:f8:15:91:a6:8a:83:7f:aa:8c:99:37:48:
a6:96:47:6f:3e:47:6b:8a:f4:9b:65:a7:6a:da:f7:e4:43:10:
d5:e9:c7:78:63:87:ad:71:fa:64:81:a4:e6:09:3a:9d:34:ca:
79:76:ea:a7:76:34:e8:2d:92:40:cc:56:cc:0b:4b:13:24:f0:
a2:fa:d9:2d:49:5d:b2:d0:f1:39:02:08:9c:c5:a7:f6:73:62:
72:d4:d6:88:96:8b:8b:44:67:ef:9b:d1:39:bf:45:71:93:6d:
a2:70:42:fe:c5:c4:32:07:10:c8:57:39:e2:de:78:c4:75:ac:
16:85:17:2e:ea:8f:7a:47:34:e7:a4:1a:da:9a:2a:e6:79:ec:
2f:7e:91:0d:18:55:44:19:a8:a2:6a:c9:82:4e:d3:67:25:2f:
4d:99:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:54 2024 by rpki-client on console-fra.rpki-client.org