Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GRU3KCb2IoAszwResYTYcbWmLQo.roa
File: GRU3KCb2IoAszwResYTYcbWmLQo.roa (raw, json)
Hash identifier: vfJBhMyFVm010PUOwg3i0ObEYIaUhg85F21GG0smz8c=
Subject key identifier: 19:15:37:28:26:F6:22:80:2C:CF:04:5E:B1:84:D8:71:B5:A6:2D:0A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01896F1B4B841C0CAABCBDA96321661929B7
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GRU3KCb2IoAszwResYTYcbWmLQo.roa
Signing time: Wed 19 Jul 2023 17:03:27 +0000
ROA not before: Wed 19 Jul 2023 17:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.180.238.0/24 maxlen: 24
185.145.80.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:1b:4b:84:1c:0c:aa:bc:bd:a9:63:21:66:19:29:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 19 17:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1915372826f622802ccf045eb184d871b5a62d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:fc:05:81:70:ed:f4:5c:7a:8a:51:23:4b:
76:57:5a:c1:fa:f3:a2:9a:0d:d7:b1:1b:91:ca:be:
3a:3a:97:41:75:d1:04:a6:96:5a:74:3a:cd:d6:c1:
e9:b8:7c:11:77:6c:1c:14:e2:3e:91:f9:64:9b:e3:
db:fe:61:0c:db:4e:78:9d:81:b9:a9:f1:1a:fb:db:
7c:87:6e:d7:77:f8:a6:19:11:cc:df:55:63:7f:29:
a9:df:72:92:aa:28:0c:aa:7f:11:d3:78:17:c2:de:
6f:ac:3c:7d:24:b6:b3:17:13:d2:ee:f5:fc:cd:3a:
93:18:0b:1f:dc:c1:25:ad:e5:95:13:74:95:91:52:
37:34:9f:44:19:0c:c9:00:1f:ad:5a:cb:01:2a:3f:
db:82:42:4a:f6:0c:71:39:18:2d:9d:8d:13:16:00:
53:da:4a:d4:f6:a5:ae:5d:56:7a:98:73:b2:b8:b9:
53:0b:23:6f:d2:7c:82:31:07:ee:de:e8:dc:ca:64:
25:c1:b5:34:73:29:f1:ec:ed:fb:8c:45:ed:a4:ab:
e4:99:ed:12:90:86:f4:bf:45:fd:d6:57:18:ab:0b:
24:ce:dd:85:53:5f:61:6a:43:24:db:d9:ac:d0:22:
d2:b4:63:76:c8:40:70:18:2a:8b:b2:04:c3:5c:86:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:37:28:26:F6:22:80:2C:CF:04:5E:B1:84:D8:71:B5:A6:2D:0A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GRU3KCb2IoAszwResYTYcbWmLQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.80.0/22
194.180.238.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cd:84:32:34:18:d3:c4:59:73:7b:10:65:e6:3a:61:3b:b6:
54:c8:9d:78:50:58:6d:ce:bf:51:77:6e:66:b5:62:d6:0a:ed:
83:c4:4c:3e:e7:65:fc:84:d4:48:9a:7f:01:ab:bd:51:a5:1e:
e4:e0:1a:88:fb:1c:79:e8:21:66:93:e7:fd:09:bd:74:04:2f:
a0:cb:3b:00:e5:27:1a:6c:fe:6a:ba:c6:4b:22:02:2f:49:f1:
cb:4f:e2:52:82:96:90:73:8e:8c:67:f0:48:52:e9:e2:3e:14:
c1:0a:a2:9a:cb:51:8f:81:67:8a:ae:28:52:72:7f:84:c7:2c:
f3:5d:9e:bc:45:21:c7:f1:fd:b6:2b:fb:72:a8:c4:18:e6:48:
87:e9:3b:ec:1f:a7:be:8d:e7:b9:1f:c0:ef:65:2d:86:04:c0:
00:08:25:38:e8:4e:8a:c6:7b:0d:6b:50:11:bf:96:7a:48:bb:
2e:6f:aa:8b:86:90:94:45:b9:6e:18:c5:de:2c:e9:c4:41:d3:
50:ee:01:3f:94:f8:25:86:da:87:a3:73:11:e0:0c:a8:57:3c:
9c:6f:a6:4b:3a:e7:b8:e0:45:52:e9:59:d9:49:e1:c7:49:86:
4e:6e:f3:db:d6:e5:de:7f:14:36:e3:6b:53:8a:f5:6c:1a:03:
25:1f:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 19:44:56 2023 by rpki-client on console-fra.rpki-client.org