Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/GTwoJJnl6_cjigQF9I-7sTEF1qs.roa
File: GTwoJJnl6_cjigQF9I-7sTEF1qs.roa (raw, json)
Hash identifier: NGJB3/74YgRZfqWKEZnfmNqsSiZSXBYCJf8y7PlciY8=
Subject key identifier: 19:3C:28:24:99:E5:EB:F7:23:8A:04:05:F4:8F:BB:B1:31:05:D6:AB
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018D04640883CD6C47F1019F3E15494243F1
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/GTwoJJnl6_cjigQF9I-7sTEF1qs.roa
Signing time: Sat 13 Jan 2024 19:54:41 +0000
ROA not before: Sat 13 Jan 2024 19:54:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.86.142.0/23 maxlen: 24
185.86.140.0/23 maxlen: 24
37.218.208.0/21 maxlen: 24
37.218.216.0/21 maxlen: 24
82.163.68.0/22 maxlen: 24
188.215.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 18:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:04:64:08:83:cd:6c:47:f1:01:9f:3e:15:49:42:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 13 19:54:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=193c282499e5ebf7238a0405f48fbbb13105d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:04:80:d3:cd:fc:5c:96:37:9d:e4:0b:29:
e6:93:fe:f2:1d:1b:1a:31:c8:79:2c:23:55:eb:ae:
d0:f9:f8:6f:ff:00:fc:89:4f:25:fb:18:a7:89:43:
2b:5e:a3:cd:05:61:69:11:d0:4d:fd:c7:c4:18:03:
37:f8:57:fc:dc:70:c5:55:19:76:61:73:06:be:21:
0d:fd:a4:ce:e7:44:36:92:fb:25:d3:a8:7e:74:7f:
b9:f1:8d:29:f2:15:84:de:65:b4:23:f5:a2:fd:39:
82:da:1f:bc:3e:fc:7d:62:a9:35:b3:2c:9c:3e:e7:
88:0e:de:e0:e6:d7:15:7e:7a:08:c2:b1:69:57:6d:
f7:23:7f:84:8c:e5:47:29:d8:8c:29:ab:ff:e6:a0:
cc:d4:5b:d4:d9:b5:88:e2:d5:bc:de:6d:4d:ff:b3:
2a:00:67:1f:b0:dd:02:81:78:a1:fd:01:89:8c:6a:
c8:14:38:14:24:11:77:4c:9a:a1:5b:dc:59:be:9a:
b3:6f:8a:bd:0e:0a:c3:c5:f4:c2:ef:5a:b2:8f:c7:
42:7e:6c:05:81:07:fd:f7:39:ed:2b:1a:39:f1:7d:
d9:82:f2:af:46:7f:a1:08:ab:2f:f2:f3:bb:8b:56:
0c:28:26:53:d8:a2:9b:4e:d7:de:53:1f:e6:8f:d6:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3C:28:24:99:E5:EB:F7:23:8A:04:05:F4:8F:BB:B1:31:05:D6:AB
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/GTwoJJnl6_cjigQF9I-7sTEF1qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.208.0/20
82.163.68.0/22
185.86.140.0/22
188.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
07:97:21:51:79:14:06:34:9b:b2:5d:da:43:09:89:11:8b:97:
56:80:1e:b5:db:56:d6:20:aa:40:ec:1d:4b:b3:38:e8:ea:9d:
7e:30:f7:3a:83:8b:78:8c:1a:bb:61:75:d7:5f:ce:63:ed:69:
5c:5b:79:55:a0:55:61:72:aa:25:bb:e0:4f:fd:cb:12:7f:55:
bc:9f:ca:0e:49:24:4a:eb:dd:b8:51:4d:ca:45:23:10:b3:0a:
74:52:7b:c4:b9:09:7b:a7:c1:e2:3b:a9:cb:71:af:9c:b9:99:
b8:38:8c:d5:b7:67:2d:90:4e:b6:dc:94:c5:b7:f7:8c:33:f1:
d0:2c:1a:f4:8a:11:01:02:c9:d7:bf:cf:7a:5e:e3:ea:04:b7:
32:e9:09:01:3b:35:8c:47:4d:ab:d3:02:8c:6a:01:84:39:1f:
d6:dd:85:13:18:d3:50:13:e1:f7:7e:c3:14:e1:ed:f9:96:fd:
e4:c5:35:3f:65:15:05:ce:19:f9:ea:c1:c6:d8:f3:bf:42:5c:
d3:ce:b9:80:39:dc:ad:29:76:7f:82:90:a6:43:ef:57:9a:fe:
86:52:44:01:c8:b7:48:fa:e6:da:b6:ef:36:0e:05:42:4a:73:
8d:3d:38:03:09:5c:e9:f1:26:d5:4b:8b:1f:37:17:1d:5a:20:
3a:a5:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org