Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/G2_TxgW7c684yV22b8EYkEwa9LM.roa
File: G2_TxgW7c684yV22b8EYkEwa9LM.roa (raw, json)
Hash identifier: Yo9uLjtsE7yBzkDt+Ab3+qjqH0C/QhkCyj4eR5wqgaE=
Subject key identifier: 1B:6F:D3:C6:05:BB:73:AF:38:C9:5D:B6:6F:C1:18:90:4C:1A:F4:B3
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018FA07AA282A46B962E6BBD004F0FE7D129
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/G2_TxgW7c684yV22b8EYkEwa9LM.roa
Signing time: Wed 22 May 2024 13:25:42 +0000
ROA not before: Wed 22 May 2024 13:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 85.208.46.0/24 maxlen: 24
193.149.179.0/24 maxlen: 24
194.179.136.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 07:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:7a:a2:82:a4:6b:96:2e:6b:bd:00:4f:0f:e7:d1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: May 22 13:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b6fd3c605bb73af38c95db66fc118904c1af4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:d0:ba:ec:1d:bc:ef:e1:38:b1:8e:c0:de:
7b:61:ca:ef:e3:61:15:ac:92:92:cd:5c:fb:5f:82:
30:26:ba:fe:bc:05:a7:89:42:27:81:51:01:ee:12:
d0:22:f5:3b:64:51:96:d6:6c:59:51:c0:52:f5:99:
36:21:fe:17:3e:38:32:8c:22:ec:7d:99:69:36:46:
fe:07:c6:06:ce:9b:ca:52:0f:be:fd:92:13:33:0b:
d3:bd:dd:35:2d:54:cb:98:41:61:95:17:14:77:d9:
d7:82:7f:ff:7b:21:8d:6b:44:44:7f:31:14:28:f6:
48:e6:e4:9e:ca:aa:96:eb:be:d3:64:4b:3e:8a:a1:
86:0c:3a:88:3a:e1:53:7c:8d:46:84:b3:94:41:fb:
d6:94:6c:b8:84:da:4c:f8:d7:ca:c4:e8:30:64:a0:
7e:df:67:71:ae:22:7b:b6:9c:08:2b:36:03:ae:eb:
da:f8:2f:24:60:9e:93:94:79:50:15:66:e5:5b:77:
52:98:5c:17:28:fa:99:00:f5:4f:0e:a1:5b:44:8f:
b2:72:83:c5:d7:01:f0:dc:c2:1c:bb:54:f6:7c:68:
10:5c:af:5e:6e:7e:00:e2:e2:6c:78:a1:f1:b4:0e:
c9:86:0f:6e:1b:8f:1b:7f:c4:32:01:19:ea:5c:ff:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:D3:C6:05:BB:73:AF:38:C9:5D:B6:6F:C1:18:90:4C:1A:F4:B3
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/G2_TxgW7c684yV22b8EYkEwa9LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.46.0/24
193.149.179.0/24
194.179.136.0/23
Signature Algorithm: sha256WithRSAEncryption
33:c4:24:9f:fd:c7:3c:5e:fe:a4:99:7f:e1:82:60:05:fb:d8:
b0:21:f1:51:19:cd:85:39:08:1d:06:6e:8f:b0:3d:05:49:b1:
7f:99:51:33:5d:4b:e1:e7:8b:fd:d4:b4:61:6c:90:f9:e8:92:
21:12:c6:0e:20:2e:97:0c:02:96:7f:c5:38:30:6f:51:f1:71:
c3:6c:b7:fb:94:e2:5b:d0:64:0b:09:b7:ec:37:fe:7c:d3:17:
e7:56:d2:a2:4d:64:9b:cf:20:e3:42:ad:f6:e1:c0:5d:63:43:
fe:85:d7:25:36:b5:1b:67:cd:f6:46:19:e3:65:55:39:9e:e7:
bb:d7:e4:22:4b:98:19:fc:51:02:92:fc:b0:0a:6c:1e:4e:d2:
45:59:ad:50:25:16:21:f0:30:3f:93:88:03:c0:4f:15:d9:68:
db:db:22:95:dc:08:16:e5:26:33:98:bc:a6:ac:31:19:4f:35:
4f:2a:98:14:d4:1d:ed:0b:ba:a2:86:0c:52:e3:e5:87:3c:2d:
1b:53:a9:ff:b1:06:2d:85:e4:a8:c3:6a:f7:28:77:e3:94:60:
47:09:b9:84:48:50:08:48:a0:9b:57:39:d3:6c:df:53:96:cc:
ab:72:46:51:2b:6a:51:ca:4b:c6:6f:c2:58:c0:10:ae:29:f9:
35:f9:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 10:56:00 2024 by rpki-client on console-ams.rpki-client.org