Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GpBogOi2NTBYzbSLlwsSijLF2ko.roa
File: GpBogOi2NTBYzbSLlwsSijLF2ko.roa (raw, json)
Hash identifier: gKpmcL3API4guZTEsbNAVqG9qErFDv4UQU2bWl0QAeU=
Subject key identifier: 1A:90:68:80:E8:B6:35:30:58:CD:B4:8B:97:0B:12:8A:32:C5:DA:4A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0188E5B185F342E45A3629719016C87D4681
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GpBogOi2NTBYzbSLlwsSijLF2ko.roa
Signing time: Fri 23 Jun 2023 00:39:56 +0000
ROA not before: Fri 23 Jun 2023 00:39:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 185.17.136.0/24 maxlen: 24
188.132.150.0/24 maxlen: 24
77.92.154.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
78.135.80.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e5:b1:85:f3:42:e4:5a:36:29:71:90:16:c8:7d:46:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 23 00:39:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a906880e8b6353058cdb48b970b128a32c5da4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:f1:cb:69:3b:c0:f4:a9:cc:44:ce:e4:4d:
a6:df:39:7b:c7:25:ed:11:b0:f1:78:e8:1d:ed:7b:
e2:97:e1:56:aa:5b:0b:fe:cc:04:8c:2f:7a:8a:77:
50:26:86:7d:2e:75:3f:2a:6c:a2:93:73:2e:38:65:
11:34:0f:67:e8:31:21:db:03:43:78:20:56:86:d9:
4d:f1:4d:ea:3a:92:c7:47:d4:7d:28:29:05:cf:8c:
cf:c4:10:3c:77:c8:8f:02:b7:4f:dc:7e:e1:28:6c:
40:b2:ff:fb:2f:36:2b:a8:49:f3:32:98:df:bf:f3:
51:fd:c4:03:2c:2e:72:ac:ed:9a:69:a6:f8:c3:0b:
5a:a5:56:45:f4:8c:d1:9b:b6:99:3b:43:7f:df:69:
0c:85:c1:a0:9f:d2:62:fa:35:75:9e:1e:bd:3d:e0:
6b:88:93:78:24:75:79:2d:3c:cf:80:3d:19:78:1f:
91:90:98:24:0a:2d:2a:6a:c0:85:64:ef:f5:1e:fc:
42:ec:70:09:26:7f:93:85:7d:36:2f:18:fb:1e:60:
8e:5e:ae:c0:80:9c:96:7a:9a:7b:b4:3d:2b:1c:1d:
27:2d:60:d0:b0:91:da:42:48:da:06:82:2a:e7:2d:
39:b9:78:71:7c:73:2e:3a:33:33:94:1d:a3:4b:3c:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:68:80:E8:B6:35:30:58:CD:B4:8B:97:0B:12:8A:32:C5:DA:4A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GpBogOi2NTBYzbSLlwsSijLF2ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.80.0/24
78.135.87.0-78.135.88.255
185.17.136.0/24
188.132.150.0/24
188.132.188.0/24
188.132.209.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8c:32:c6:7b:33:6a:93:19:f3:51:b4:fd:57:49:92:8e:6c:
5d:39:d8:67:1b:a6:87:bf:71:dd:fc:37:ea:f8:a7:0b:eb:7a:
b0:93:9f:7d:f6:3f:5c:60:f2:81:b1:06:40:a1:14:61:42:48:
a6:89:06:5d:7f:5b:46:a9:ab:1c:e1:14:51:ee:91:6f:92:54:
45:8a:a3:ff:50:43:cd:bb:64:11:60:7e:9a:e5:de:7f:42:0e:
27:a8:9d:10:f7:9b:d3:d3:c7:53:ea:90:44:90:34:3f:4e:c5:
ca:98:48:0f:eb:03:4e:4d:7c:ba:07:39:2f:cb:14:23:03:bb:
67:00:3e:fe:b7:d6:4d:1a:f5:b0:57:7b:ce:56:eb:b3:c3:af:
18:3a:72:6f:2a:2e:8c:71:03:43:6c:84:cc:69:13:56:08:fc:
7e:67:e9:9d:a3:3e:dd:9e:ac:7f:b9:54:0c:17:d1:e5:0f:c5:
49:3e:38:91:54:df:a4:81:dc:65:71:53:74:9d:c4:28:c2:88:
7f:f3:05:5f:22:60:d1:16:0c:c0:23:9e:48:a3:e3:ee:21:ad:
68:bb:b1:ad:89:31:75:d4:09:9d:25:82:8e:8d:50:1a:3f:1c:
9f:87:f0:5f:82:a8:e7:4d:89:ff:67:a6:64:3a:34:13:38:fe:
34:43:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org