Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/GM2Lt7Nd9rk_Td4Gswlhtj3An-E.roa
File: GM2Lt7Nd9rk_Td4Gswlhtj3An-E.roa (raw, json)
Hash identifier: Kgv2YWULqRl23NBRTRj2Z71/cxz5o5FHXkcfQEm/qhk=
Subject key identifier: 18:CD:8B:B7:B3:5D:F6:B9:3F:4D:DE:06:B3:09:61:B6:3D:C0:9F:E1
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018C342AFC959F7DDF023EFB1169B93F7814
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/GM2Lt7Nd9rk_Td4Gswlhtj3An-E.roa
Signing time: Mon 04 Dec 2023 09:31:21 +0000
ROA not before: Mon 04 Dec 2023 09:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 185.238.251.0/24 maxlen: 24
185.238.249.0/24 maxlen: 24
31.220.14.0/24 maxlen: 24
193.9.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:2a:fc:95:9f:7d:df:02:3e:fb:11:69:b9:3f:78:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Dec 4 09:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18cd8bb7b35df6b93f4dde06b30961b63dc09fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:96:b8:4c:26:c1:28:e2:b0:94:2d:20:c3:
8d:b8:c8:8b:59:51:ff:20:f3:dd:97:49:2d:47:31:
c0:76:74:fa:18:3d:f7:8d:cb:58:b9:3d:28:9b:26:
c9:97:c9:aa:50:5a:21:9b:30:4f:50:12:7c:fa:97:
4a:49:63:ec:e1:6f:f8:77:ee:e0:29:ec:6a:df:22:
7b:e8:51:2b:17:f3:b5:42:7e:7c:96:0a:90:58:79:
e3:71:bc:fb:3d:d0:b9:51:df:73:d9:b0:8a:6a:38:
42:f1:3c:10:23:d0:ae:12:7d:a9:66:d5:b2:69:1f:
61:a3:3f:17:35:2b:3f:7f:74:63:07:3c:93:c0:1f:
de:4f:ec:4b:07:04:83:ed:6f:ed:6e:05:e7:9c:69:
70:eb:f0:67:36:4c:4f:d7:27:a7:a4:1c:55:11:98:
87:c3:23:72:62:92:e8:c4:b8:b2:b7:26:b7:a4:78:
3e:98:4d:84:a4:be:9b:02:15:f3:96:8e:29:da:8d:
10:2e:3c:69:dd:10:b2:28:b1:bb:bd:8b:43:2d:66:
94:91:e6:c4:62:9b:7e:9c:01:71:8d:e3:fd:5e:06:
66:38:9f:3a:81:ea:50:29:2e:5e:82:f8:46:d0:24:
71:66:20:ce:c0:1c:8a:d2:81:28:f7:71:da:0c:99:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CD:8B:B7:B3:5D:F6:B9:3F:4D:DE:06:B3:09:61:B6:3D:C0:9F:E1
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/GM2Lt7Nd9rk_Td4Gswlhtj3An-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.14.0/24
185.238.249.0/24
185.238.251.0/24
193.9.45.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4e:0f:f6:25:27:64:1b:81:2f:b3:f8:a5:7c:bd:79:d7:11:
4f:c1:64:ca:1f:bc:5a:1a:5f:29:b0:4c:9d:82:44:9e:4c:be:
a7:a1:b2:49:e7:a5:41:a7:fa:4b:5e:82:ca:1a:8c:8e:89:12:
33:75:f8:b3:2a:30:24:5c:e1:8b:b1:fc:9a:c3:05:b4:d9:3f:
b3:6c:4f:b7:ea:8d:83:b3:75:79:f5:5f:b7:ac:2b:48:f6:c1:
d2:0e:cf:00:df:d0:f6:e0:c5:cf:ca:ed:1a:ef:e9:50:26:29:
fb:7b:35:ac:c0:94:61:69:0b:d1:ce:cb:70:dd:33:0d:43:aa:
a3:ec:73:d7:83:1f:18:da:e1:0e:7f:45:e4:f5:da:92:df:86:
42:ac:2f:00:3c:eb:bd:fc:ea:0a:b0:43:6d:f5:b6:60:c4:06:
42:a4:ab:29:a7:c0:07:46:3d:50:8c:96:44:dc:3f:c2:2f:1a:
fc:24:14:a8:c5:57:b7:fa:a6:2a:13:70:88:8f:8b:31:7f:30:
a3:56:58:4d:74:e6:49:c2:60:ff:e0:07:5b:f3:bc:8b:12:65:
2e:52:7a:55:96:b8:6f:9f:9e:2a:e1:eb:48:9c:83:ae:3f:7a:
71:49:c2:7a:8c:9d:c0:e6:49:02:1b:7e:cf:2c:5a:c7:97:01:
cb:30:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:20 2024 by rpki-client on console-ams.rpki-client.org