Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/gxZ-iv3Ie0upPKv2tQ7hGtPZgXU.roa
File: gxZ-iv3Ie0upPKv2tQ7hGtPZgXU.roa (raw, json)
Hash identifier: UY1WNrrk9XsWkEcwnxToXVDPEeMfrceqLUD6QgqoU+4=
Subject key identifier: 83:16:7E:8A:FD:C8:7B:4B:A9:3C:AB:F6:B5:0E:E1:1A:D3:D9:81:75
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 01859FFC21B84E5AFFA868A6EC67F952A42C
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/gxZ-iv3Ie0upPKv2tQ7hGtPZgXU.roa
Signing time: Wed 11 Jan 2023 08:39:39 +0000
ROA not before: Wed 11 Jan 2023 08:39:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 185.248.95.0/24 maxlen: 24
185.248.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:fc:21:b8:4e:5a:ff:a8:68:a6:ec:67:f9:52:a4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Jan 11 08:39:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83167e8afdc87b4ba93cabf6b50ee11ad3d98175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:78:d7:46:5a:99:62:14:d8:26:d9:7e:bb:
61:23:aa:5f:5e:93:3f:72:ac:96:b4:eb:43:d9:39:
e8:f4:fd:1a:89:c2:5c:32:93:2c:c9:9c:64:96:f5:
cb:db:80:64:41:3d:6b:0e:08:a5:6d:8f:77:7b:0e:
13:05:c8:27:61:8a:46:29:bf:3a:ee:08:16:c9:32:
ac:98:37:e6:71:86:c0:40:cc:a0:3e:fd:80:05:16:
d7:ab:70:0b:18:01:87:fe:29:4b:8c:da:43:f9:c5:
ec:5c:64:ef:99:34:d1:9d:a2:47:8e:1c:6e:fa:ce:
4f:e8:e1:8f:f2:18:e9:ce:75:db:b1:a6:1f:ae:e1:
e9:2d:e3:99:b0:da:bb:65:f1:cc:51:b1:43:11:ee:
41:a7:95:8f:3d:9a:36:70:43:2d:43:23:0f:13:9e:
37:a3:02:f0:4d:a2:e8:6d:82:6a:14:19:5c:51:7f:
b1:36:a5:5d:bb:cf:cf:e3:67:5f:f0:de:6c:71:b8:
26:c2:a9:98:1d:f1:c4:c5:a5:49:86:e6:60:1f:f3:
82:16:3e:f2:e6:cf:4b:d2:cc:c7:13:45:35:13:fc:
e5:ac:9d:d8:d9:e2:5c:9f:d9:4d:91:9d:30:57:b7:
a1:95:0b:90:d3:e9:1a:78:b9:cb:50:7b:9a:f4:92:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:16:7E:8A:FD:C8:7B:4B:A9:3C:AB:F6:B5:0E:E1:1A:D3:D9:81:75
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/gxZ-iv3Ie0upPKv2tQ7hGtPZgXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.94.0/23
Signature Algorithm: sha256WithRSAEncryption
66:d0:6e:4c:b6:64:d7:b8:34:5f:ff:1c:ec:ae:dd:5f:3b:f3:
b7:08:fd:24:62:c4:43:e3:d6:d0:37:0d:ab:0e:08:e7:4f:63:
f7:08:68:2d:ea:b5:08:21:56:5c:8d:13:56:b2:f9:cb:7d:4b:
68:c1:21:02:35:9a:7a:3e:cb:fc:eb:26:f4:6a:8d:27:34:fe:
58:25:ec:b8:c2:d4:c0:22:da:71:37:69:a2:6a:6a:9b:89:a4:
c1:3e:d6:d4:49:7b:93:5a:b5:07:0c:d9:34:dc:23:3e:fb:1a:
ab:02:80:10:e3:5e:0c:b2:82:39:7a:04:75:60:d3:1f:31:d8:
ed:62:a5:27:73:ae:cd:3c:31:b8:94:02:c7:5c:97:3d:91:e1:
4c:a2:4f:81:e4:58:96:83:d8:c4:ab:75:5d:cf:51:47:53:0b:
bf:62:95:38:6d:a5:ed:94:a2:1b:68:b4:4b:66:46:44:3c:14:
cc:d4:7c:2f:33:c4:bc:62:64:23:29:7d:06:fc:93:72:5d:79:
ea:2e:53:00:4b:9d:14:43:9a:96:14:70:19:b8:24:31:6c:cf:
bb:19:12:36:35:10:0a:ef:1b:84:b3:09:3d:9b:7f:5b:4f:16:
38:a9:a4:20:6c:2f:b7:ff:a9:ef:5a:69:e5:66:d1:4e:f2:4b:
36:69:7b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:19 2024 by rpki-client on console-fra.rpki-client.org