Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/GSoSctvR5e7_LIr8szeGojeWixE.roa
File: GSoSctvR5e7_LIr8szeGojeWixE.roa (raw, json)
Hash identifier: J4rk1AUWtefyFU+cewCN9QW1/fj3hZiW8ZJJGqvFVRE=
Subject key identifier: 19:2A:12:72:DB:D1:E5:EE:FF:2C:8A:FC:B3:37:86:A2:37:96:8B:11
Certificate issuer: /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial: 01856E01CC25E95D026AA37CEF46C4D11931
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/GSoSctvR5e7_LIr8szeGojeWixE.roa
Signing time: Sun 01 Jan 2023 15:44:49 +0000
ROA not before: Sun 01 Jan 2023 15:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62282
IP address blocks: 37.156.216.0/21 maxlen: 21
37.156.217.0/24 maxlen: 24
37.156.219.0/24 maxlen: 24
37.156.222.0/24 maxlen: 24
37.156.220.0/24 maxlen: 24
185.193.24.0/22 maxlen: 22
37.156.221.0/24 maxlen: 24
185.193.27.0/24 maxlen: 24
185.193.25.0/24 maxlen: 24
185.193.26.0/24 maxlen: 24
185.38.166.0/24 maxlen: 24
185.38.164.0/22 maxlen: 22
185.79.244.0/22 maxlen: 22
185.79.245.0/24 maxlen: 24
185.79.246.0/24 maxlen: 24
185.79.244.0/24 maxlen: 24
185.79.247.0/24 maxlen: 24
2a01:41a0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:cc:25:e9:5d:02:6a:a3:7c:ef:46:c4:d1:19:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
Validity
Not Before: Jan 1 15:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=192a1272dbd1e5eeff2c8afcb33786a237968b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:41:fe:eb:bf:13:82:09:b4:35:ac:4d:49:
26:9d:3b:5f:4c:97:ae:47:ea:5b:86:6c:6b:d8:68:
b4:b0:95:19:5a:41:60:a7:9a:24:a9:26:ac:63:b0:
3b:b8:b3:8b:75:a0:f8:2e:b6:19:e9:9e:11:9e:a5:
9b:31:2b:4e:9a:35:36:34:e6:f2:e4:46:58:87:a3:
1e:42:b0:a5:3f:1e:6e:66:70:02:a4:c1:b6:f3:ce:
d5:84:36:a9:67:f1:d7:8c:71:46:15:59:d0:2f:f0:
e4:75:82:b9:05:b1:9a:f0:71:ed:a2:84:43:dd:64:
93:3b:5d:28:ba:8a:a6:f5:f8:26:c3:20:a9:87:3d:
c4:3e:a4:d4:3f:6b:12:bc:f2:92:c2:d3:35:2f:63:
66:4b:51:f2:7b:4f:99:38:29:c3:c2:b6:08:49:56:
4c:eb:30:57:21:44:b5:3f:89:23:c3:71:57:7e:1a:
ae:76:31:a6:d1:9c:20:30:7e:cd:31:71:89:30:03:
be:20:c0:8b:09:9a:8e:94:18:88:2c:2a:d1:7a:1d:
df:35:85:71:0b:cb:09:2f:72:bb:0a:70:4b:8d:06:
c8:cc:2a:e0:01:a4:60:40:bb:3e:a1:11:6a:a0:4d:
cf:74:b5:f0:e9:ba:32:ca:9f:bd:8f:07:0e:e0:fb:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:12:72:DB:D1:E5:EE:FF:2C:8A:FC:B3:37:86:A2:37:96:8B:11
X509v3 Authority Key Identifier:
keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/GSoSctvR5e7_LIr8szeGojeWixE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.216.0/21
185.38.164.0/22
185.79.244.0/22
185.193.24.0/22
IPv6:
2a01:41a0::/32
Signature Algorithm: sha256WithRSAEncryption
bd:02:22:aa:f7:28:c9:27:dd:76:4e:7a:0e:79:9f:01:27:9f:
c1:b5:1d:d8:8f:fe:5e:9a:2b:94:b8:ef:30:62:ec:68:87:f9:
d6:b2:e2:0b:74:9d:84:e1:3a:7c:78:c1:db:e2:7c:84:b2:9c:
07:e9:c6:f2:f6:34:70:26:91:5f:27:80:23:1d:30:c3:8f:7c:
11:76:a8:76:d2:53:52:e7:6f:11:14:0b:d0:5f:fd:0b:0f:08:
ab:24:54:5f:ed:65:ba:80:d3:8a:27:73:d4:73:6a:56:70:d0:
f5:63:d0:a7:bc:71:3b:a1:b0:88:d6:2c:f2:b8:08:c3:6b:23:
d9:94:8e:16:25:ad:61:26:ff:79:19:95:d9:9b:f2:c0:3b:a7:
81:85:8b:1f:9b:5d:12:ec:ed:17:16:79:5f:b3:5a:71:39:41:
54:57:2f:e9:27:5c:69:90:a0:fd:ef:d6:ad:c0:7b:7e:28:45:
00:73:51:8c:bd:15:b7:bb:a4:27:08:af:ff:d1:08:5c:3f:5a:
a2:2c:20:4a:35:4c:99:85:e8:60:4b:dd:66:d8:91:27:4f:1b:
9b:29:fc:c4:b8:1c:86:ee:41:32:ff:bf:a0:18:59:50:c1:cc:
d4:13:21:5b:2b:36:5a:0d:c1:fe:22:74:b6:de:2c:e2:ea:49:
e5:3b:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:03 2024 by rpki-client on console-ams.rpki-client.org