Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/Gp0S3nLuVCR8eaiEHP01kIi6evI.roa
File: Gp0S3nLuVCR8eaiEHP01kIi6evI.roa (raw, json)
Hash identifier: 4cc2N8lYACfMzTImw5Y5XViYVPK6RtMzilVxO+iLkv8=
Subject key identifier: 1A:9D:12:DE:72:EE:54:24:7C:79:A8:84:1C:FD:35:90:88:BA:7A:F2
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 0188E83E4A163BD4C0A3615943B2FCD39E20
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/Gp0S3nLuVCR8eaiEHP01kIi6evI.roa
Signing time: Fri 23 Jun 2023 12:32:56 +0000
ROA not before: Fri 23 Jun 2023 12:32:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135357
IP address blocks: 185.216.251.0/24 maxlen: 24
185.216.250.0/24 maxlen: 24
185.216.249.0/24 maxlen: 24
185.216.248.0/22 maxlen: 22
185.216.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:3e:4a:16:3b:d4:c0:a3:61:59:43:b2:fc:d3:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Jun 23 12:32:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a9d12de72ee54247c79a8841cfd359088ba7af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:86:48:c7:80:4a:b4:3b:29:ad:9b:c2:da:
a2:74:79:7e:43:e7:be:3d:f6:3c:9d:e0:67:6e:27:
71:8e:db:5a:b8:79:59:03:9e:65:d6:0f:90:26:6c:
4f:72:c7:aa:b8:19:88:f0:20:4c:aa:6e:ac:c9:90:
0d:82:b2:be:14:13:0b:5e:9a:47:9e:b9:c7:71:a0:
d2:b3:e7:35:b2:b6:5b:f9:ab:61:a7:73:47:e2:59:
84:db:ae:6f:56:20:17:37:d7:0d:a8:10:b9:2d:18:
a5:0e:c2:22:01:44:98:1b:f7:52:b9:a2:d4:75:03:
57:02:0a:6d:bf:75:be:82:d9:4f:e9:4f:62:2e:9b:
15:66:4a:07:0f:32:7c:89:88:ac:98:ff:cc:a5:7c:
59:b7:ca:2f:7a:92:10:ab:fd:98:6d:db:1e:60:a0:
86:d2:c7:c7:ba:39:36:2a:5c:be:ce:8d:10:1d:84:
4e:64:f2:15:3a:82:45:0e:f0:21:67:02:23:a6:c2:
b0:d2:e0:16:72:05:61:b9:a1:0d:59:c1:7e:39:bb:
f2:b4:21:1d:97:f3:ae:0f:b6:ce:64:90:12:56:e9:
6c:64:da:9e:6a:97:0b:8a:9e:17:42:28:f0:6c:29:
e0:ea:43:7f:50:e6:cb:0c:50:df:d2:db:6a:3d:e0:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9D:12:DE:72:EE:54:24:7C:79:A8:84:1C:FD:35:90:88:BA:7A:F2
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/Gp0S3nLuVCR8eaiEHP01kIi6evI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
18:c8:26:e7:07:27:5b:27:e6:15:1f:e7:5b:de:79:5d:e1:2a:
0b:14:c4:63:49:64:9d:0e:b8:01:f3:79:ed:7c:25:01:0d:23:
15:53:7b:bb:27:50:7d:e0:03:0f:35:98:c3:c8:73:03:9a:52:
77:74:62:70:f8:ce:58:0e:d1:f1:a0:c4:72:29:95:63:13:d5:
07:cc:5a:06:d4:5d:47:d1:b1:d4:ed:42:be:e7:c1:89:f0:fc:
9a:89:16:df:9b:ce:13:04:62:bd:ff:1a:47:e2:5d:23:d2:27:
f9:32:9d:9f:db:1c:ba:91:99:ef:0b:bc:c2:54:fe:ef:9b:3c:
81:32:7d:ea:12:b4:43:b2:fe:fe:96:d2:66:24:b4:5f:b0:75:
34:83:c4:ac:4c:30:6d:b7:6b:cf:d7:a5:24:2c:a7:54:72:5c:
eb:54:06:24:79:8b:6b:58:2e:2a:11:e1:c2:4d:77:82:8e:90:
eb:ab:31:4b:55:39:42:23:a9:28:a8:1d:97:24:1e:23:7a:dc:
66:42:4f:8c:20:3c:0c:a5:39:66:a5:cf:40:fa:e4:bc:63:60:
9d:ce:40:50:28:98:63:23:4d:81:4f:ea:54:3f:12:5e:98:9d:
0c:04:d3:45:73:35:d2:48:d7:e0:6d:5f:fc:c6:48:11:06:49:
dc:d2:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:38 2024 by rpki-client on console-ams.rpki-client.org