Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/Gb9pgT__gxISL2EkXzxIm4xoqP0.roa
File: Gb9pgT__gxISL2EkXzxIm4xoqP0.roa (raw, json)
Hash identifier: +n/TGEMrw+dYMlCeRGT23YL7sHgCs7gI0wnVpdo68C4=
Subject key identifier: 19:BF:69:81:3F:FF:83:12:12:2F:61:24:5F:3C:48:9B:8C:68:A8:FD
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 0185701EDB7CA534FEF38F4B720FC43F7ED9
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/Gb9pgT__gxISL2EkXzxIm4xoqP0.roa
Signing time: Mon 02 Jan 2023 01:35:48 +0000
ROA not before: Mon 02 Jan 2023 01:35:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211057
IP address blocks: 185.203.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:db:7c:a5:34:fe:f3:8f:4b:72:0f:c4:3f:7e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: Jan 2 01:35:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19bf69813fff8312122f61245f3c489b8c68a8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:13:9a:61:28:29:fa:59:1e:c3:45:8b:1a:
9e:4a:9c:60:b2:84:15:98:d1:95:31:ac:84:17:97:
2b:41:e1:7a:e5:74:e2:fd:da:ed:ae:2b:1e:82:96:
8e:2e:5b:a1:1f:8d:b6:65:8a:dc:94:c2:0b:1f:95:
f5:98:86:d7:c9:5f:e6:bf:64:67:1c:6a:79:3d:40:
92:32:9a:3a:39:53:b1:0c:15:86:ee:21:97:18:64:
06:fc:dd:d3:22:85:6d:00:e8:c1:f5:5e:39:2b:73:
ce:59:2a:ce:c0:86:aa:cd:1a:5b:dd:1b:d7:72:74:
e7:dd:32:dc:87:52:33:96:45:66:1d:71:1f:54:7e:
da:69:ea:4f:a9:28:0e:4b:dc:de:b8:44:d0:5a:98:
e9:8d:c9:81:d6:b7:32:ab:24:a9:ef:db:17:4d:d6:
03:33:7d:4e:84:b6:4f:d8:be:74:e1:b2:48:2d:d5:
be:0c:50:36:7f:bb:d0:b3:08:4c:c2:a2:e8:04:40:
e2:b8:6c:b8:10:0c:19:dd:05:23:e8:19:4c:28:40:
bf:90:99:d0:36:f4:93:f6:90:61:f8:5f:09:cb:f1:
8e:c5:bb:c5:fd:92:3c:93:2b:86:54:0d:6d:16:c9:
6c:60:e4:2a:1e:d1:1e:ca:20:e0:15:7f:6a:30:1e:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BF:69:81:3F:FF:83:12:12:2F:61:24:5F:3C:48:9B:8C:68:A8:FD
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/Gb9pgT__gxISL2EkXzxIm4xoqP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.66.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f0:54:00:71:dd:27:41:c6:14:4c:c3:a9:f3:6e:f2:85:df:
57:a6:6b:21:2d:ca:d4:b8:1a:09:75:eb:58:20:a3:45:ac:4d:
fe:f5:4d:51:a4:9c:9c:60:13:63:09:97:b8:eb:16:b8:16:81:
3b:4e:74:d1:2d:73:4d:ec:fd:75:63:b0:c8:0f:76:d2:ae:0b:
d0:26:80:d5:2e:1d:ea:98:56:27:93:61:01:00:e9:f7:1d:21:
2c:1d:1d:4e:b9:3e:24:5e:f6:6c:ba:1e:3d:33:da:2a:54:18:
f6:23:2f:9c:f2:e9:61:45:97:87:1e:73:85:08:1d:4b:e3:de:
a2:d1:49:89:19:1a:41:db:f5:c8:8c:1e:ff:38:88:37:e3:ea:
4c:63:c3:53:ac:81:91:e9:a8:91:23:8a:25:12:2c:99:91:98:
24:d2:8c:64:7b:89:b1:2e:84:e2:9b:0b:ef:99:16:59:32:55:
b7:0e:db:a2:2f:14:52:8d:4f:72:79:a7:70:39:bd:99:0a:5a:
47:88:6c:ef:c0:12:29:7b:a0:c2:84:be:ea:3a:11:25:11:a7:
c1:cc:bb:3f:e9:3a:c3:69:f0:99:01:11:9c:30:fa:2d:35:3a:
f0:44:c4:15:da:67:c7:01:97:08:04:23:97:34:36:6a:d1:e1:
30:bb:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:21 2024 by rpki-client on console-ams.rpki-client.org