Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/gSPY7nWuo-i-wUvWECBCC2KdRX4.roa
File: gSPY7nWuo-i-wUvWECBCC2KdRX4.roa (raw, json)
Hash identifier: 5kXJ58BOdMe1YjtVCYduHV1Dlo+Ddf6lxitw2hmShrg=
Subject key identifier: 81:23:D8:EE:75:AE:A3:E8:BE:C1:4B:D6:10:20:42:0B:62:9D:45:7E
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 018572710F5C620CF5F59CC1352D7163E52F
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/gSPY7nWuo-i-wUvWECBCC2KdRX4.roa
Signing time: Mon 02 Jan 2023 12:24:50 +0000
ROA not before: Mon 02 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 185.59.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:0f:5c:62:0c:f5:f5:9c:c1:35:2d:71:63:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Jan 2 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8123d8ee75aea3e8bec14bd61020420b629d457e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:90:4b:60:2a:76:ca:37:c1:b9:af:75:f1:
62:72:d8:75:80:81:98:bb:74:ef:22:20:f4:53:2d:
95:3a:0f:f6:b9:2e:09:77:2d:ef:4a:ec:28:e2:b0:
5d:14:77:9e:28:94:e1:f3:39:7f:f4:db:0d:7c:cc:
57:ee:dd:ba:d0:b7:2a:43:1b:9c:f6:ee:3e:fb:e6:
2f:a3:01:88:0e:6b:88:56:1f:86:77:f7:10:16:c9:
cd:69:e0:4e:4e:19:aa:6b:35:40:e9:24:3f:bf:3b:
49:dd:5b:35:dc:1a:bd:cd:0b:11:9b:06:16:17:46:
61:d6:c1:08:a3:ab:d5:5a:02:57:d0:b8:64:34:bd:
2d:24:3f:f5:d9:c2:90:08:d6:a1:40:f7:1a:28:02:
6f:83:69:88:75:c0:fd:f8:31:09:1a:a6:3a:6c:a8:
ae:21:9c:83:6e:28:dc:af:a9:29:8b:98:cb:0d:d5:
63:06:74:f4:5d:3a:8e:8f:29:d0:17:75:d5:78:5d:
91:db:ce:9d:1d:a1:5a:f5:cc:e7:ca:70:4e:7a:d8:
ea:c8:13:23:31:c3:be:e2:8e:49:2a:07:98:55:68:
3f:74:3a:a8:6b:82:9f:9c:2b:59:64:91:88:08:4a:
25:ec:a3:0d:28:0a:68:df:e7:1d:0a:89:ec:81:33:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:23:D8:EE:75:AE:A3:E8:BE:C1:4B:D6:10:20:42:0B:62:9D:45:7E
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/gSPY7nWuo-i-wUvWECBCC2KdRX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.218.0/24
Signature Algorithm: sha256WithRSAEncryption
81:57:2b:bf:80:78:dc:17:20:70:31:64:7e:2c:02:fd:08:d2:
5e:b9:7d:45:87:16:f4:a9:59:22:e1:38:af:de:16:88:36:f4:
d3:46:50:1c:48:3e:68:10:5b:bd:cf:ff:04:83:35:c8:bf:81:
48:3a:bd:b4:e2:b5:a0:94:97:ee:0a:db:1a:7e:0a:c2:af:cd:
b8:fb:12:52:67:9e:72:f8:28:06:3f:e6:8e:2a:30:71:cf:6e:
ed:74:98:20:b9:8b:9b:61:3d:47:3d:8b:22:63:28:39:88:10:
28:0b:cc:18:6b:a9:b1:2d:4c:01:df:97:53:73:d6:36:d8:aa:
b4:12:cd:3f:22:87:00:3e:1d:d2:e0:36:67:e0:96:b1:0a:a4:
77:3e:1e:06:6f:2c:47:8b:6a:6c:76:c5:ef:ca:85:8f:08:49:
64:49:a8:5b:bb:a7:1f:61:27:d7:dc:15:c8:69:75:b5:d6:a8:
93:6b:75:94:fe:8f:de:7a:fb:09:61:1f:29:8b:d5:33:66:f8:
44:73:b1:fc:04:f8:d6:ef:bf:34:2d:3a:c7:8a:cf:59:1d:b0:
60:bd:ea:dc:d4:56:73:1f:17:c7:8b:b6:f8:01:b3:6c:56:b8:
91:18:f4:a6:56:4d:76:41:12:12:97:43:e2:65:fb:4f:f4:f4:
70:ab:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:09 2024 by rpki-client on console-ams.rpki-client.org