Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/GzGGhFflw6va7R0gNEstqKEI7FM.roa
File: GzGGhFflw6va7R0gNEstqKEI7FM.roa (raw, json)
Hash identifier: 6ySVHO5PCez3Cb9+xgWFtnGv2Z7yZ4cjst24e6ZGPgw=
Subject key identifier: 1B:31:86:84:57:E5:C3:AB:DA:ED:1D:20:34:4B:2D:A8:A1:08:EC:53
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 018572BA38F81F54C1373CE1FEC84AA3692A
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/GzGGhFflw6va7R0gNEstqKEI7FM.roa
Signing time: Mon 02 Jan 2023 13:44:44 +0000
ROA not before: Mon 02 Jan 2023 13:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200977
IP address blocks: 185.90.240.0/24 maxlen: 24
185.90.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:38:f8:1f:54:c1:37:3c:e1:fe:c8:4a:a3:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Jan 2 13:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b31868457e5c3abdaed1d20344b2da8a108ec53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:87:7d:cc:e4:e2:e1:7f:a8:bb:c0:89:04:
5b:c1:a4:cf:7f:fd:6b:6c:8e:f9:68:e6:d4:ae:ff:
bf:c2:e8:4d:8a:77:95:5f:6a:71:31:33:9d:e0:03:
27:ef:e9:78:80:7c:8b:d2:8c:66:44:4a:66:7b:2c:
9f:57:4d:58:47:ec:9c:ac:eb:1c:69:d0:95:f0:10:
e1:32:06:7b:e1:fa:a8:74:91:f6:30:11:58:ba:14:
b2:b4:4a:a1:05:ee:1a:2a:a9:56:ce:45:dc:9b:70:
35:1e:2e:96:87:52:44:7a:59:c2:32:c2:92:a8:ab:
3f:b6:33:18:7a:d4:c6:b6:2a:1b:29:9f:50:ff:98:
48:c3:03:64:8f:b3:73:81:fa:28:ac:79:d8:92:d5:
f4:ab:c1:cf:2b:76:58:69:a5:ca:03:1c:a1:89:e7:
44:df:71:f5:7a:cc:11:5f:92:8b:83:f7:8b:1d:bb:
0e:1a:02:c4:ea:7b:60:fc:36:4d:40:9d:ea:94:8d:
b2:71:75:69:02:51:88:05:18:8c:ce:35:45:30:5b:
0f:9f:ae:4b:41:dd:4e:9a:4d:ca:6c:5d:cd:a8:ee:
99:a2:e7:3b:73:e0:79:87:44:67:4f:8b:b4:e5:a9:
75:e5:b5:63:f7:df:cd:24:f0:e9:a2:1d:cd:06:da:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:31:86:84:57:E5:C3:AB:DA:ED:1D:20:34:4B:2D:A8:A1:08:EC:53
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/GzGGhFflw6va7R0gNEstqKEI7FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.240.0/23
Signature Algorithm: sha256WithRSAEncryption
be:11:32:65:3b:0c:c6:55:91:ba:63:6f:f3:4e:18:92:5d:d3:
2f:71:82:90:1a:2e:96:05:ae:4c:cd:e7:8d:1d:6a:d2:23:05:
7a:0e:18:eb:47:96:cc:8d:f5:ed:9a:aa:b3:4c:5f:1c:f6:16:
1c:09:19:fb:bd:d4:a5:68:0a:93:f5:12:38:aa:3f:58:0c:2d:
8e:d9:02:ec:b0:57:18:66:c7:f6:37:b9:91:6c:9f:4b:8a:25:
13:03:0f:34:f4:fb:ff:d8:4d:dc:19:63:c2:19:04:cf:8f:53:
ef:ac:ca:a1:03:48:81:e1:60:52:27:80:fa:3f:32:97:8f:5b:
53:f7:b5:09:90:6b:c8:96:fc:28:c2:75:56:98:b1:64:24:09:
cc:95:75:39:dd:d7:b2:38:82:3b:3f:fa:14:94:3c:c1:36:75:
61:a8:3e:79:62:60:c2:b4:7b:7b:d1:8c:b9:d7:38:0e:9b:b0:
b0:34:39:95:dc:09:55:77:79:3e:c8:ca:44:0e:67:db:14:5f:
dd:b0:e1:7e:63:89:50:5b:61:2f:05:e0:04:93:59:33:29:78:
e0:5c:2d:c7:ae:1a:8c:b4:38:a4:83:6f:d8:8e:60:52:c0:db:
6c:08:c1:96:c0:aa:32:16:2d:d6:8d:b3:bd:96:b9:71:57:3f:
3f:15:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:03 2024 by rpki-client on console-ams.rpki-client.org