Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/GPGP1grLKqY_wMpBcL327bZng8U.roa
File: GPGP1grLKqY_wMpBcL327bZng8U.roa (raw, json)
Hash identifier: HMSeWd06vNEG6Y6NRXofQ1sJmg41iBrvz3KJ19B9OUI=
Subject key identifier: 18:F1:8F:D6:0A:CB:2A:A6:3F:C0:CA:41:70:BD:F6:ED:B6:67:83:C5
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 0187B2FBCCF088A6964BFA3EBFCFFB0DAE1F
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/GPGP1grLKqY_wMpBcL327bZng8U.roa
Signing time: Mon 24 Apr 2023 11:17:39 +0000
ROA not before: Mon 24 Apr 2023 11:17:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 185.139.180.0/24 maxlen: 24
195.177.112.0/24 maxlen: 24
195.177.115.0/24 maxlen: 24
195.177.114.0/24 maxlen: 24
195.177.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 21:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:fb:cc:f0:88:a6:96:4b:fa:3e:bf:cf:fb:0d:ae:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Apr 24 11:17:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18f18fd60acb2aa63fc0ca4170bdf6edb66783c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:28:2c:54:35:65:79:72:d6:eb:a0:c8:92:
f4:93:da:7f:45:3f:86:6b:3b:dc:7b:d7:4e:e2:dc:
f2:9a:dd:de:71:cb:a3:b5:8c:ce:54:2a:96:cf:80:
fd:54:18:49:48:ee:0c:e9:67:91:34:7b:f6:30:d1:
f2:ab:08:3b:c8:e2:32:b1:9a:58:b7:0d:03:69:84:
0e:46:fd:12:64:90:0f:4f:03:d4:84:fe:a9:fd:c3:
cc:23:ad:6b:3a:64:e0:07:e6:29:8a:9d:ed:c5:6f:
ba:71:4f:c7:20:a8:9d:cb:ef:d3:85:b0:2c:8a:62:
ae:28:24:c3:85:d9:62:be:3f:63:e7:37:e5:54:a0:
8a:c1:2e:de:67:b3:fe:51:02:10:a3:f3:fc:6e:f8:
17:9b:e3:b0:c7:e1:19:09:3e:d0:63:d2:3f:b4:35:
b4:54:b8:6d:20:6e:c6:32:e1:00:bb:fc:ae:6d:6d:
84:2d:c0:81:af:cd:38:04:b6:2a:ff:f8:29:ec:4a:
c6:63:87:69:6f:d5:53:c5:19:97:8e:01:91:11:9f:
93:56:ac:30:97:a9:ce:07:a0:b4:76:ed:96:8c:c3:
f8:fa:0e:d1:52:1b:e3:06:9c:83:10:e6:9a:9c:f0:
8b:a7:93:23:44:ae:27:e7:67:ce:75:c7:37:5f:85:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:8F:D6:0A:CB:2A:A6:3F:C0:CA:41:70:BD:F6:ED:B6:67:83:C5
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/GPGP1grLKqY_wMpBcL327bZng8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.180.0/24
195.177.112.0/22
Signature Algorithm: sha256WithRSAEncryption
81:32:7e:6c:b5:5e:32:94:a6:1c:28:73:7b:57:99:c8:27:82:
60:50:fa:aa:6c:be:6f:3c:17:35:67:2e:49:42:24:f0:07:14:
b1:15:69:6f:b9:71:d7:cc:83:38:14:21:f0:86:16:79:47:ed:
3e:df:e9:d8:ad:a0:66:ce:37:fc:cc:05:f8:a9:de:59:e2:05:
62:0e:8c:91:06:ef:67:24:2d:c7:89:2e:56:18:a4:2a:de:6d:
9b:24:e0:eb:87:48:58:66:2c:47:dc:b0:b3:24:dc:78:c7:d8:
61:d2:df:7c:11:db:f0:f0:46:72:60:64:c7:32:b3:19:25:2e:
84:9f:c9:61:e7:84:df:53:fa:8a:a9:5d:4f:54:89:07:fa:1e:
a4:21:ca:72:a1:b7:1c:8e:43:1f:16:1c:68:69:3e:12:b5:86:
ab:4f:72:b0:ac:12:7e:9c:1f:38:ab:fb:d0:ae:64:dc:06:55:
a7:3f:96:5e:c0:46:3b:82:02:3d:72:8d:1a:3b:ae:cb:48:a0:
8a:ed:03:2b:1c:3e:00:40:27:98:1b:b6:31:1f:0c:72:fc:d4:
1f:44:38:af:25:1c:96:fe:68:a6:e8:3c:75:74:f6:80:31:bd:
85:0a:44:6d:4d:ed:92:f9:2d:40:0c:8f:2a:f7:98:f6:55:68:
b8:a5:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:24 2024 by rpki-client on console-ams.rpki-client.org