Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/gxCdzCPeS6WDLkVqP2cL6hyBWVc.roa
File: gxCdzCPeS6WDLkVqP2cL6hyBWVc.roa (raw, json)
Hash identifier: jaGpyftl7XMY2294oTLmC4uE40lz6w8s8PMWQScmcRU=
Subject key identifier: 83:10:9D:CC:23:DE:4B:A5:83:2E:45:6A:3F:67:0B:EA:1C:81:59:57
Certificate issuer: /CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Certificate serial: 0185711E71E2FA9A24EB8E645DD7B48B0C3F
Authority key identifier: 14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/gxCdzCPeS6WDLkVqP2cL6hyBWVc.roa
Signing time: Mon 02 Jan 2023 06:14:58 +0000
ROA not before: Mon 02 Jan 2023 06:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203906
IP address blocks: 185.50.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:71:e2:fa:9a:24:eb:8e:64:5d:d7:b4:8b:0c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Validity
Not Before: Jan 2 06:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83109dcc23de4ba5832e456a3f670bea1c815957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:4a:72:51:24:02:b3:2b:5d:c1:bf:bb:57:
5f:31:53:70:80:36:84:d7:f5:89:cf:9b:3b:43:ae:
40:be:e4:ed:9e:82:66:c0:be:5e:4b:64:d3:60:56:
11:a5:22:3b:23:d3:71:3d:e3:16:da:e7:3e:dd:55:
30:22:4c:7d:81:a9:80:06:dd:93:4b:f7:5e:f7:3e:
33:23:62:7a:86:d9:a7:e0:09:61:a2:c4:cc:48:c2:
03:f7:b0:ea:90:1e:b8:c7:05:a9:09:a8:c8:c0:ce:
e7:8f:7a:27:06:a2:d6:62:81:68:30:f9:b3:d1:1d:
a5:85:12:1b:72:88:6e:48:b7:be:bf:eb:fe:4c:d1:
da:20:55:bb:4e:55:00:e8:a7:5d:41:41:ce:c4:41:
0a:a5:ac:44:88:dd:7e:9a:b7:5a:f8:fa:64:02:30:
5a:b3:b3:e5:a0:a6:31:f8:f6:7a:e3:c6:ec:29:05:
ed:22:3b:64:00:72:fc:03:1e:1c:cc:46:eb:46:ef:
5e:ca:13:61:3b:fe:1e:82:98:52:33:ae:80:eb:e9:
75:15:4d:10:e4:91:78:b2:83:59:92:c7:36:95:5d:
30:be:5f:09:23:f0:62:cb:3c:74:cb:3d:dc:3e:7d:
7a:2b:8e:fb:39:e0:ba:bb:3e:27:37:96:2a:6a:a1:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:10:9D:CC:23:DE:4B:A5:83:2E:45:6A:3F:67:0B:EA:1C:81:59:57
X509v3 Authority Key Identifier:
keyid:14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/gxCdzCPeS6WDLkVqP2cL6hyBWVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:95:58:42:20:67:cf:01:f9:a3:21:3c:4d:b9:6e:fb:eb:28:
e5:50:42:93:ba:76:14:19:b7:81:de:1b:12:8e:b1:99:99:bb:
bc:ed:d8:9c:a3:01:4c:9f:29:5d:d2:30:24:d5:5c:f0:5b:75:
ac:07:2c:0e:b6:61:7e:cb:be:69:3b:ab:c1:1e:b3:8c:79:91:
c8:e3:71:bd:ed:ff:ec:67:d5:d9:cd:20:22:64:f5:bb:3a:45:
99:3f:d1:4a:8b:85:99:32:f1:be:14:61:70:70:2c:a3:37:3b:
6f:09:e4:97:e1:70:cc:6a:32:56:42:66:76:71:5b:57:e9:e3:
db:f7:aa:f9:57:df:ad:c0:7a:41:7e:b9:95:d8:e0:cb:a0:00:
a8:e1:aa:04:d5:06:ea:34:75:e8:7d:52:b1:1e:37:e9:46:0f:
b0:8f:35:f2:67:54:59:21:b1:18:0a:e7:96:f4:17:84:84:71:
31:8d:23:f0:1e:ee:76:7b:75:87:44:c6:d0:86:7f:c6:a0:c6:
0b:c7:32:af:db:07:14:a5:a4:c9:0a:16:c0:8b:f9:dd:f9:03:
e8:33:f7:cf:35:58:73:3e:bd:2e:fa:56:0e:1a:7c:d4:32:08:
f4:86:e3:1b:fd:02:89:25:fe:a0:42:6d:80:ce:16:81:84:c7:
23:46:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org