Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Gq_TNSb1HwpdGMyCvM3aZT0W2D8.roa
File: Gq_TNSb1HwpdGMyCvM3aZT0W2D8.roa (raw, json)
Hash identifier: PWgVXH5zeC5ri/TVuInC2uPQGJxYvBK7QKT6BcEFOCk=
Subject key identifier: 1A:AF:D3:35:26:F5:1F:0A:5D:18:CC:82:BC:CD:DA:65:3D:16:D8:3F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018AF57B767F343A8E022BF071B97C24BA39
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Gq_TNSb1HwpdGMyCvM3aZT0W2D8.roa
Signing time: Tue 03 Oct 2023 12:20:23 +0000
ROA not before: Tue 03 Oct 2023 12:20:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 185.17.138.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 12:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:7b:76:7f:34:3a:8e:02:2b:f0:71:b9:7c:24:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 3 12:20:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aafd33526f51f0a5d18cc82bccdda653d16d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:44:df:5f:40:f3:5a:2f:6b:7b:5a:7d:ee:
fd:d7:83:12:99:9b:61:93:b6:cc:06:8b:7a:0f:07:
f9:ce:84:0e:02:eb:3d:c6:9d:f7:36:ce:b2:2e:36:
bf:9d:fb:5a:1f:67:27:69:e4:60:c6:de:83:5f:74:
ff:cc:e3:30:de:85:84:e8:78:d6:b5:cd:42:d3:14:
36:90:14:ec:22:f7:4b:3e:92:b0:96:e8:fe:d9:f2:
dc:b3:91:fc:0a:e1:f2:3b:b1:7b:33:1d:44:37:4e:
59:94:54:7a:d3:f1:15:1d:b9:b2:ed:14:f5:9f:60:
77:10:28:66:34:8d:e1:a9:0c:41:9c:18:b0:cb:05:
43:65:f8:a3:4c:6d:07:63:c7:9f:3f:2f:08:09:42:
54:32:41:21:20:56:ab:88:ac:a0:c9:ee:0d:4c:a7:
b9:c0:18:a6:bd:17:55:17:2b:1e:15:4c:e2:c8:1f:
3c:8d:48:cb:62:f5:aa:7d:c9:d3:c4:d0:54:ca:e7:
0e:71:4e:3e:1a:40:25:a9:99:7d:1a:71:52:42:60:
7d:15:a0:04:18:f1:c3:5e:bb:44:cb:52:ac:1d:ca:
93:25:f3:e8:b1:a3:4d:7d:64:3f:c1:3b:6c:51:3b:
5c:69:b3:51:38:36:53:c7:45:5a:bf:10:1e:f6:11:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AF:D3:35:26:F5:1F:0A:5D:18:CC:82:BC:CD:DA:65:3D:16:D8:3F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Gq_TNSb1HwpdGMyCvM3aZT0W2D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.138.0/23
Signature Algorithm: sha256WithRSAEncryption
49:42:7a:fc:3b:97:c0:ff:38:30:69:5f:51:cd:8f:e2:5e:14:
d4:a7:08:53:ae:ba:22:42:20:a3:b0:1d:d2:c2:5b:fa:fe:3a:
8b:28:39:a1:94:bf:13:9b:73:51:1d:91:35:32:7c:30:db:a1:
c2:65:64:72:6e:01:9d:1d:53:47:1d:00:de:6c:9d:cc:7d:37:
01:21:6b:9c:74:1f:75:79:59:7a:df:04:7c:8a:c8:d4:61:78:
65:e6:d6:50:e0:ee:65:b8:b4:c9:aa:ae:c9:78:ef:8c:e8:cf:
84:80:ca:b3:66:96:5d:56:a4:12:48:13:5d:24:d9:6b:a9:32:
27:a9:cd:0b:77:58:08:39:24:19:cb:12:9c:34:d3:58:49:9e:
14:9b:87:ad:e9:a0:56:b5:06:4f:c3:df:e4:9c:84:4b:be:b6:
27:73:9b:69:6d:8b:e9:e8:60:41:5d:3c:72:b2:79:5c:24:85:
3d:b4:c5:99:ac:85:ab:91:6e:27:6e:b4:37:a5:25:2b:4c:cb:
b4:c0:02:12:06:20:84:4a:08:6a:16:c8:da:43:48:6b:9c:84:
a6:70:c8:36:f8:ff:ab:e1:8d:e4:dd:d9:20:dd:c7:8e:57:54:
d6:99:0f:f7:dd:91:9c:2f:8c:86:f8:81:15:6a:c2:b6:fe:d0:
b9:b9:ae:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org