Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/GcUlXwpHjxgjDmuMLlSaHb-xM2g.roa
File: GcUlXwpHjxgjDmuMLlSaHb-xM2g.roa (raw, json)
Hash identifier: BOxnVvJnm6du5/8PinkSFWnpSSb/ZhO4FpqHNEs7uZY=
Subject key identifier: 19:C5:25:5F:0A:47:8F:18:23:0E:6B:8C:2E:54:9A:1D:BF:B1:33:68
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 0189013F11A78A345E10686EC02413B50BEA
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/GcUlXwpHjxgjDmuMLlSaHb-xM2g.roa
Signing time: Wed 28 Jun 2023 09:04:17 +0000
ROA not before: Wed 28 Jun 2023 09:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.54.231.0/24 maxlen: 24
185.54.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 10:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:3f:11:a7:8a:34:5e:10:68:6e:c0:24:13:b5:0b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jun 28 09:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19c5255f0a478f18230e6b8c2e549a1dbfb13368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:e8:76:02:c4:93:1d:16:df:51:0b:68:79:
59:91:fe:36:67:77:26:a6:37:5f:82:90:ea:22:87:
ec:60:2d:74:27:85:f4:52:e7:65:48:c8:26:02:ab:
0f:0f:6f:8d:3a:71:47:a4:50:c5:6a:88:bc:40:77:
3a:3e:30:ec:c6:bb:a1:5d:86:5b:6f:bf:67:56:28:
60:22:e9:d9:35:99:a5:12:52:71:18:8e:46:a9:f4:
c5:db:2b:0e:ac:74:99:2c:03:29:25:0a:5b:8d:d7:
60:5a:05:01:10:b7:47:0c:4a:ac:b3:1e:40:05:48:
4e:5d:cb:76:13:99:bd:72:fd:b6:76:fe:ec:60:67:
a6:e2:76:60:82:f0:0e:ed:bf:f1:2a:1d:96:f0:5e:
47:ca:ff:80:a4:64:32:b1:54:3e:d7:7f:cc:f6:29:
0c:85:87:cc:93:4d:5d:b6:77:65:df:ed:44:3b:ae:
60:a3:c1:d0:30:85:9d:35:dd:d0:3d:5a:ab:d3:dc:
59:25:70:9a:f3:be:59:98:8a:83:e7:4f:92:a3:04:
64:90:6c:f8:8a:41:96:56:81:92:70:9d:46:12:70:
7f:70:86:63:18:d0:71:fc:8a:92:3b:db:7f:47:de:
31:88:3d:37:8b:e5:a2:1d:c0:75:bd:d1:e1:7f:3a:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:25:5F:0A:47:8F:18:23:0E:6B:8C:2E:54:9A:1D:BF:B1:33:68
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/GcUlXwpHjxgjDmuMLlSaHb-xM2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.229.0/24
185.54.231.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8c:60:2e:4d:c3:31:36:c6:92:c7:4a:e7:27:fc:a2:ef:b3:
3f:8d:7a:89:5f:df:40:97:be:44:e2:41:6f:c8:54:52:44:d7:
86:d4:25:97:6a:5a:f7:fc:d3:a0:73:17:50:63:df:9c:15:fe:
9d:58:20:a3:50:c7:c8:90:4e:f1:fd:0e:5e:76:c8:e8:78:c4:
62:48:ef:08:a9:76:e5:99:7a:10:aa:31:d6:6f:6d:72:b2:25:
af:61:cb:9d:a3:3b:79:e9:d9:06:b3:0a:43:47:3f:c7:81:6b:
3e:fc:85:1e:3d:98:4c:31:ea:8d:89:7a:a2:7d:ed:c8:2a:a7:
ce:e1:fa:06:d5:0c:99:66:cd:ae:24:01:e1:47:a2:3f:5d:3d:
d9:a8:20:a7:55:5f:15:07:31:74:45:96:c2:7e:42:79:ae:09:
d2:c7:12:75:3f:53:a4:82:21:40:e4:fc:20:80:cc:ad:78:85:
30:6f:e4:ef:a0:ad:0a:5e:61:a4:46:4e:2f:47:44:3c:70:95:
20:09:8a:c1:45:13:de:bd:66:aa:96:97:d0:12:cf:7a:50:eb:
67:4e:e5:4f:d6:f1:24:23:14:ad:37:9b:06:3a:5d:78:ed:70:
c6:e1:2f:c8:72:3d:bd:64:6c:b6:89:43:c7:89:11:79:cb:b5:
b1:69:25:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:08 2024 by rpki-client on console-ams.rpki-client.org