Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GFglWTvikOv8gJVjBcNgjfjyXIw.roa
File: GFglWTvikOv8gJVjBcNgjfjyXIw.roa (raw, json)
Hash identifier: lUJZzgz6UvGHNWhLp8gwUMS/DSzT7pjYsmx2L51C1/U=
Subject key identifier: 18:58:25:59:3B:E2:90:EB:FC:80:95:63:05:C3:60:8D:F8:F2:5C:8C
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018C44F8911E5AC7B86DB747169E7582AA0C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GFglWTvikOv8gJVjBcNgjfjyXIw.roa
Signing time: Thu 07 Dec 2023 15:49:49 +0000
ROA not before: Thu 07 Dec 2023 15:49:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.255.99.0/24 maxlen: 24
45.67.117.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
194.56.153.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
185.40.105.0/24 maxlen: 24
194.213.10.0/24 maxlen: 24
194.242.28.0/23 maxlen: 24
185.173.247.0/24 maxlen: 24
92.118.108.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
91.242.71.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:f8:91:1e:5a:c7:b8:6d:b7:47:16:9e:75:82:aa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 7 15:49:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=185825593be290ebfc80956305c3608df8f25c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4d:58:0a:b5:02:41:ca:fe:59:f2:4f:6a:79:
8d:65:84:df:db:ac:ac:6d:d5:94:4c:d4:47:64:97:
c1:72:99:bf:ab:d4:e9:ad:17:8f:97:2a:c5:e1:f4:
1d:ac:67:f6:8f:5d:32:64:2e:90:f7:c5:1f:ac:0b:
c5:d8:1d:29:f3:3f:57:c9:f1:df:b8:2e:18:48:2d:
9e:87:c7:07:fe:66:5b:3a:b8:31:43:65:13:fe:cd:
d5:7c:19:c9:cb:1c:9f:19:21:4d:81:7a:26:87:c9:
8e:e4:b0:67:46:1a:9f:b0:5c:ba:96:77:0a:67:fc:
9e:09:9c:92:b2:34:76:be:ae:6c:34:ca:1e:a1:60:
98:0d:b7:f7:bb:ed:ff:7c:df:62:25:0f:cd:1d:02:
c7:8e:f6:0f:98:93:1f:26:2b:18:e5:6d:0e:33:c7:
80:0d:f8:40:70:17:01:58:26:b2:a2:f3:eb:dd:88:
b4:99:3f:8f:f9:f2:91:f7:65:cc:1e:83:02:a2:6d:
8c:5b:b2:80:1a:51:fb:15:4c:6f:c9:c4:6d:f2:4a:
f5:f0:3c:47:73:dd:1a:06:80:1b:44:62:4a:a3:7e:
f8:e8:10:07:f2:28:f9:56:e7:1e:15:72:2a:25:18:
43:c3:4a:f8:fa:c7:96:d9:b8:a0:60:b0:13:c8:45:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:58:25:59:3B:E2:90:EB:FC:80:95:63:05:C3:60:8D:F8:F2:5C:8C
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GFglWTvikOv8gJVjBcNgjfjyXIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
91.242.71.0-91.242.73.255
91.242.75.0/24
91.242.103.0/24
92.118.108.0/24
94.231.198.0/24
176.126.223.0/24
185.40.105.0/24
185.173.247.0/24
185.212.11.0/24
185.255.99.0/24
194.56.153.0/24
194.180.238.0/24
194.213.10.0/24
194.242.28.0/23
Signature Algorithm: sha256WithRSAEncryption
41:50:b5:89:b6:e5:c7:08:34:e5:63:92:d1:ab:0f:09:5a:b9:
b3:6d:84:2e:c2:f9:eb:0a:4e:d3:dd:4d:42:9f:f3:66:d5:3a:
03:e2:78:c9:0e:e8:71:e0:f3:a7:6e:0b:ee:6f:4c:69:e3:68:
02:69:69:27:17:2a:83:77:72:ee:a0:a5:d9:6d:a4:2b:2b:6b:
7f:99:92:98:2d:0f:37:2c:8f:9d:bc:4b:74:31:5b:dc:3c:5d:
e8:a5:3c:25:b1:9c:bc:9d:0a:58:72:e8:15:23:37:b1:c8:7b:
f8:fd:c3:84:4d:3f:1a:53:40:d4:51:17:ec:af:5b:d7:9f:b7:
77:94:df:4f:f1:0f:4e:b4:37:98:1d:44:6c:fb:e5:78:d1:b1:
e8:c6:72:01:df:46:4f:b5:75:e5:a4:59:5f:26:62:58:d0:38:
18:cc:bc:76:1b:4a:4f:79:2c:8c:55:35:db:fc:06:56:21:e5:
c4:81:1c:02:58:09:08:85:c3:5a:e0:ac:02:ab:54:dd:fb:b6:
4c:c8:a9:96:1d:2f:c8:85:03:b9:66:9b:79:b4:2c:91:fc:07:
b8:69:a3:41:da:b4:bc:de:86:6f:44:1b:00:0a:ec:16:e2:7b:
d7:24:cf:d8:7c:91:e0:21:e8:43:b2:88:8f:b8:26:01:88:85:
8f:2c:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 10:36:34 2023 by rpki-client on console-fra.rpki-client.org