Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/0GLcpzO3zQBe4H2VzjXkvSy0u3U.roa
File: 0GLcpzO3zQBe4H2VzjXkvSy0u3U.roa (raw, json)
Hash identifier: AgU0YloF42/moNr/ayPNe2zUitKSwjEOpKVZOGrZZdQ=
Subject key identifier: D0:62:DC:A7:33:B7:CD:00:5E:E0:7D:95:CE:35:E4:BD:2C:B4:BB:75
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 018963CB213DD73F0863C792A3A67FD7C0F9
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/0GLcpzO3zQBe4H2VzjXkvSy0u3U.roa
Signing time: Mon 17 Jul 2023 12:20:03 +0000
ROA not before: Mon 17 Jul 2023 12:20:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.18.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:cb:21:3d:d7:3f:08:63:c7:92:a3:a6:7f:d7:c0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jul 17 12:20:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d062dca733b7cd005ee07d95ce35e4bd2cb4bb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:8c:34:ec:e1:2f:b7:dc:db:ae:06:dd:be:
e8:9f:5e:82:2b:59:9f:7c:a5:c0:85:fa:62:92:0c:
7b:19:ad:71:3e:7b:68:cd:b0:2b:db:06:17:38:01:
c7:05:de:13:28:e8:9a:47:4c:0d:9b:8e:44:e5:e1:
69:0f:5b:ba:99:a1:55:e6:76:a6:42:ae:ff:f3:e9:
1c:73:3b:18:57:a7:35:42:88:26:9d:38:98:08:e6:
a4:97:26:bf:9a:da:0c:e7:f3:85:a9:b9:9d:dc:0b:
9d:a8:99:c9:d1:99:ee:3d:ab:bd:88:f5:5c:08:3b:
16:2c:88:cf:26:6c:9d:1d:42:32:ba:83:b7:64:f4:
e0:59:e6:72:a5:aa:eb:84:25:6e:f7:bc:67:e3:ce:
b8:b8:f7:6a:76:6f:88:a9:93:e6:3c:eb:a4:01:75:
47:16:28:42:f8:c4:23:31:bf:c0:52:98:bb:e9:89:
ea:d1:3b:3d:4a:67:dd:59:f2:28:08:4b:ca:b9:3f:
50:6c:9b:32:2e:b4:fe:41:42:17:9a:06:54:89:31:
31:31:3d:64:96:5a:8d:76:72:70:f0:4f:00:62:f0:
04:c5:7f:18:24:84:c0:fe:69:a0:ed:c6:c7:ad:1d:
a2:90:77:fb:45:81:49:ed:72:e1:2d:d4:22:dd:09:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:DC:A7:33:B7:CD:00:5E:E0:7D:95:CE:35:E4:BD:2C:B4:BB:75
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/0GLcpzO3zQBe4H2VzjXkvSy0u3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8b:ed:6a:81:53:42:56:8a:1e:3a:ba:b3:56:c8:1b:6f:05:
b0:a1:50:19:15:49:03:81:b8:8c:35:c2:93:79:b5:16:cf:d7:
67:b9:d5:55:cc:4a:1b:cc:23:3c:a1:bb:e3:4c:28:b2:20:0d:
3f:b0:0e:bb:3c:14:67:ee:20:c5:4c:4a:53:93:19:80:8a:b9:
69:9b:bd:d7:70:42:ef:92:31:6d:a6:1f:d9:84:c2:50:65:c5:
c2:31:d1:5c:1f:24:a8:38:3d:a3:ed:6d:fb:3d:b5:e9:d3:b3:
c4:46:06:b2:83:ac:a7:01:b7:49:51:4c:67:ec:11:72:09:02:
f6:1e:33:e5:95:a7:f3:08:59:3a:95:7d:3d:6b:d8:4c:48:60:
17:84:f2:f0:71:cb:4c:cb:9e:c8:1e:39:54:36:f8:78:30:91:
10:c4:e0:4d:41:5d:ec:c7:8c:91:4c:ff:ab:bc:da:45:ae:b2:
27:9e:b0:88:ec:14:31:66:1d:76:2a:f7:23:ea:03:8a:51:88:
7b:7c:4a:bb:8f:e3:44:a3:6a:6a:da:1b:7b:86:f1:11:1b:53:
41:db:cf:6f:74:6c:87:90:87:d9:75:ef:ca:b4:bd:37:ed:a3:
ee:22:97:c2:9e:9f:c5:c8:17:b2:0d:8f:7a:52:86:04:5c:d6:
64:d4:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:18 2024 by rpki-client on console-fra.rpki-client.org