Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/gLQ0v-WTVYeIfGWJpKDFO1VcHYs.roa
File: gLQ0v-WTVYeIfGWJpKDFO1VcHYs.roa (raw, json)
Hash identifier: mz2wLrWbeO7RNJ/kgahLR2CdfeyKnuQvl0zElmRohBI=
Subject key identifier: 80:B4:34:BF:E5:93:55:87:88:7C:65:89:A4:A0:C5:3B:55:5C:1D:8B
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 01857082A6A1CBA199B79D90BFA89B9C8854
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/gLQ0v-WTVYeIfGWJpKDFO1VcHYs.roa
Signing time: Mon 02 Jan 2023 03:24:48 +0000
ROA not before: Mon 02 Jan 2023 03:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48062
IP address blocks: 185.197.180.0/24 maxlen: 26
2a10:f000::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:a6:a1:cb:a1:99:b7:9d:90:bf:a8:9b:9c:88:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Jan 2 03:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80b434bfe5935587887c6589a4a0c53b555c1d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:bd:aa:a6:10:7d:40:fc:be:a7:46:8a:d8:
17:c9:e9:c7:4c:d6:d6:6c:c9:47:cb:ab:1f:c8:2c:
dc:76:bd:d6:d4:9a:13:ba:74:b0:18:93:a3:a7:1f:
4f:f2:81:00:d0:e6:f6:92:4f:a1:a3:4a:d3:51:cc:
f9:cd:7a:23:32:f0:87:d9:c7:00:dc:8e:84:91:51:
44:f0:03:16:bd:ab:9a:0a:1a:83:93:45:bf:34:99:
74:1d:b3:d4:05:1d:22:de:4d:2d:61:fc:4a:0d:be:
99:8a:0e:76:f8:82:89:44:12:07:2a:65:e6:df:bc:
25:73:8c:73:76:87:b4:8a:91:47:f4:af:e1:7b:f7:
22:e9:ce:d3:fd:65:04:c3:92:d2:9b:29:6a:7d:1d:
01:65:a1:31:0e:1e:9c:8a:70:35:06:02:20:a2:e1:
b0:5e:c9:f9:5e:08:5c:1c:45:8b:b5:99:31:44:04:
58:ad:79:fd:ff:72:ed:4d:1b:f7:49:4c:b3:63:d6:
7f:8f:65:b0:73:69:1d:7b:e0:6b:4e:51:1c:0b:76:
a5:bc:70:7b:c8:28:7b:21:d5:57:96:c8:35:4f:55:
81:c8:51:7f:32:89:d2:95:1a:9d:98:96:af:5b:02:
8a:a7:44:32:6c:5b:af:9e:bd:4c:91:5a:42:ac:8b:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B4:34:BF:E5:93:55:87:88:7C:65:89:A4:A0:C5:3B:55:5C:1D:8B
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/gLQ0v-WTVYeIfGWJpKDFO1VcHYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.180.0/24
IPv6:
2a10:f000::/32
Signature Algorithm: sha256WithRSAEncryption
9c:2d:16:cb:fc:10:6b:c9:f6:83:f4:7c:25:13:d1:84:80:05:
87:91:8b:c4:d8:2b:2d:7e:75:16:b3:07:ff:65:4c:e6:94:6f:
ba:89:b8:cf:32:52:1a:d5:97:a1:c4:aa:64:b9:12:bc:c1:c6:
a7:99:91:90:2f:0b:67:c0:b4:4f:dd:be:9e:65:a9:62:53:6b:
f1:76:c7:40:b1:03:13:2e:a1:2a:1d:93:ea:b6:cb:b4:83:eb:
61:a5:5f:f1:24:50:9f:0f:58:4b:da:26:25:bb:f8:4f:a5:ae:
d8:f2:cc:0b:5b:04:79:ee:1d:a3:a8:32:f6:67:c3:5d:a5:9d:
c7:2a:ae:95:ee:3c:d0:8a:18:f9:12:6e:54:40:57:bb:6c:17:
6d:e8:f4:d3:a4:3f:70:68:7e:d8:43:37:ff:67:31:73:36:31:
c7:44:e8:d0:9a:46:ab:c9:e4:48:f8:a4:e1:c6:d0:db:c5:64:
7c:f6:a3:80:2c:69:4c:ce:ef:10:ae:d6:44:ee:cd:a8:ee:4a:
af:87:e4:5f:a5:d9:cd:8c:90:22:b1:da:d8:04:cc:41:8a:fc:
2a:00:11:a3:dd:7a:d6:e3:70:0a:31:1e:fc:3c:f0:49:9b:b4:
fb:3a:34:1a:d6:87:60:3d:73:c3:2e:ae:38:60:b8:32:08:0f:
5a:c9:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org