Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Gz1NCO2A6AnDKP7GwrboSJVeXOM.roa
File: Gz1NCO2A6AnDKP7GwrboSJVeXOM.roa (raw, json)
Hash identifier: Nv2GD15H6gmzhY8ml5gZ/jqHSed6RB3hR1SHd3dCXj0=
Subject key identifier: 1B:3D:4D:08:ED:80:E8:09:C3:28:FE:C6:C2:B6:E8:48:95:5E:5C:E3
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E08D4821AD6D70238670FC267ADD7A650
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Gz1NCO2A6AnDKP7GwrboSJVeXOM.roa
Signing time: Mon 04 Mar 2024 09:38:48 +0000
ROA not before: Mon 04 Mar 2024 09:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42240
IP address blocks: 185.161.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 15:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:d4:82:1a:d6:d7:02:38:67:0f:c2:67:ad:d7:a6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 4 09:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b3d4d08ed80e809c328fec6c2b6e848955e5ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:8f:2f:66:1e:73:23:ba:40:d6:ab:2a:37:
d5:d4:a5:9b:c9:aa:5b:37:e5:f6:27:4f:2d:be:0e:
c4:51:c8:cf:5b:5b:93:a4:e2:c7:5c:e2:d3:91:33:
f2:bf:d7:cc:83:e6:a0:f0:f7:87:f6:e7:18:0f:2c:
91:be:13:97:09:a2:9e:8c:ea:fc:0e:75:4d:dc:3d:
a3:71:4f:b1:1d:33:bd:7f:c5:34:1d:e2:99:c7:2c:
72:d6:a5:36:b9:5d:99:78:ef:1f:59:43:ca:71:0b:
ad:a4:9e:e6:d9:d0:a0:c5:d1:f9:0b:36:31:bc:97:
6e:99:ac:bc:d5:0b:b5:fe:d0:ca:f5:07:ab:00:a9:
86:b2:b1:39:cc:15:df:21:cf:6e:8b:0a:79:0e:3d:
c7:57:75:6a:d1:e1:cd:00:a3:f8:6f:09:79:b4:62:
44:79:4d:33:5c:6c:82:e3:4a:a4:97:3b:08:f7:57:
7d:46:7f:b9:30:f4:78:75:0f:47:fe:5b:1b:3f:44:
b6:25:a1:0f:b4:14:59:a5:03:fb:b6:cf:cb:ed:d0:
09:3a:ef:11:4e:26:b5:2c:2f:6d:f8:b8:23:bc:72:
53:de:80:26:d2:f5:d2:18:ca:34:47:17:e3:a8:1e:
3b:47:9e:b7:12:0f:e5:c3:e5:44:1e:b9:dd:e1:57:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:4D:08:ED:80:E8:09:C3:28:FE:C6:C2:B6:E8:48:95:5E:5C:E3
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Gz1NCO2A6AnDKP7GwrboSJVeXOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b3:63:08:da:be:19:77:1c:5d:5e:e2:72:8b:2a:5a:e8:c8:
67:9d:e5:f1:05:ba:2c:fa:ca:a2:2e:18:63:8a:aa:a6:d0:b7:
f0:09:3b:af:71:95:88:77:62:33:26:a2:18:cd:83:44:2a:b6:
18:b7:2a:5d:e6:dd:41:c2:94:2a:b3:67:dd:56:45:67:f7:9a:
d2:9e:43:de:db:33:60:fa:a9:7f:14:6a:28:ba:5c:05:00:3b:
7b:f9:83:11:4b:c3:cd:84:47:46:95:7b:44:fd:71:25:58:08:
c2:51:03:81:5a:b2:7a:99:cd:75:69:41:4a:31:db:c1:95:fe:
fb:ae:27:b2:08:96:22:71:31:7e:2c:f4:90:5f:9a:82:a1:17:
7d:a7:e1:f8:fa:b0:cf:c5:16:4f:ec:f1:b1:2f:f1:30:27:90:
18:40:66:d0:c7:a1:56:44:cd:8f:a6:67:53:3e:75:bd:59:b5:
ae:c5:cf:97:50:34:27:ed:cc:d7:5c:22:b5:42:f7:e4:8b:bf:
fb:97:51:f3:98:3c:e9:9b:45:2e:3c:e1:7f:28:94:d9:8a:a5:
31:bb:7b:38:03:df:23:ca:92:30:b5:0a:89:81:f5:99:3e:59:
2d:04:ec:98:49:2f:64:f2:3c:c0:be:f4:cd:d7:7d:62:c4:45:
fb:61:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org