Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Gjuzn9LWSBZagJ1wEpji6XQVSus.roa
File: Gjuzn9LWSBZagJ1wEpji6XQVSus.roa (raw, json)
Hash identifier: SFXOk4Pmo1wnpRBTs4ByOl1KrZIs6qCSebP1Oy0KbSY=
Subject key identifier: 1A:3B:B3:9F:D2:D6:48:16:5A:80:9D:70:12:98:E2:E9:74:15:4A:EB
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018C96B512874BACEF718FE69D93634376D4
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Gjuzn9LWSBZagJ1wEpji6XQVSus.roa
Signing time: Sat 23 Dec 2023 12:44:58 +0000
ROA not before: Sat 23 Dec 2023 12:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.111.27.0/24 maxlen: 24
185.100.158.0/24 maxlen: 24
185.73.219.0/24 maxlen: 24
185.73.218.0/24 maxlen: 24
185.110.131.0/24 maxlen: 24
185.110.130.0/24 maxlen: 24
185.110.129.0/24 maxlen: 24
185.110.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:b5:12:87:4b:ac:ef:71:8f:e6:9d:93:63:43:76:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Dec 23 12:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a3bb39fd2d648165a809d701298e2e974154aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:26:78:43:1a:99:e3:d2:fa:8a:cc:06:f8:
a1:04:c7:7c:fc:a1:e1:4b:f9:93:59:75:58:3d:ef:
62:b5:8f:76:5a:c6:de:9c:19:98:c0:db:93:39:69:
22:2c:26:8c:5a:b0:c3:52:b7:9f:dd:da:09:e2:37:
d8:09:48:4a:f8:f0:9c:cc:5d:ca:47:7a:6a:7b:55:
cd:35:ea:6d:bb:2e:66:00:e2:f9:7a:ba:b4:6c:c4:
93:2d:37:f0:09:8e:f8:7c:19:0e:1c:99:59:6d:53:
9b:c8:2f:e0:da:d4:aa:78:a3:44:ca:5e:2b:80:f9:
cd:9c:50:9a:b2:3a:63:0a:8a:e9:ba:2d:ef:22:03:
5b:9f:58:26:63:6d:20:bf:78:3b:2e:1a:08:14:3f:
9b:78:74:dd:85:34:af:e9:2f:51:64:2b:67:97:22:
cd:31:ef:1f:b2:b0:8a:30:4a:c1:64:a9:59:d1:f0:
8f:64:a9:68:8c:8a:f9:de:58:9c:88:21:9e:21:82:
48:f4:1d:c4:6f:b9:80:17:87:dc:51:9a:fb:ac:4a:
ca:71:04:f4:cf:e4:eb:f7:56:94:e7:31:d4:d7:3a:
0c:76:24:30:3a:8d:bf:67:d0:bc:6d:00:04:d0:43:
37:00:66:4d:48:d5:94:c2:fe:59:0c:dc:b3:3e:f6:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:B3:9F:D2:D6:48:16:5A:80:9D:70:12:98:E2:E9:74:15:4A:EB
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Gjuzn9LWSBZagJ1wEpji6XQVSus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.218.0/23
185.100.158.0/24
185.110.128.0/22
185.111.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2e:e5:3c:4c:74:74:31:e7:96:27:a1:1d:1d:5d:ca:e0:e1:
1f:ea:74:04:66:df:56:2f:ba:12:be:bf:31:ba:4d:34:b8:69:
66:21:47:98:99:e3:85:35:c7:e5:36:35:f0:8e:92:2e:4b:bb:
ef:5f:e3:7d:3b:c9:1f:98:75:26:de:bf:2f:e5:80:df:b1:1a:
10:b4:b0:37:02:f7:78:42:6e:2e:82:d2:70:0a:7c:75:e8:76:
cd:df:49:a7:a7:e2:ac:b6:bc:05:c9:13:da:99:a7:e2:4a:3e:
9b:d4:f4:db:78:47:a9:3f:22:be:01:4b:c3:fb:20:c5:3b:6d:
03:08:eb:83:56:6d:32:27:bf:ea:d2:1d:5a:75:84:7f:6d:6e:
ab:cc:90:cb:67:3a:65:52:49:f2:06:ac:6a:94:31:5d:be:72:
1c:ec:35:81:68:7b:fc:31:2c:0b:42:34:db:0c:08:d4:6a:37:
60:9b:91:31:54:0a:7e:c4:9b:6b:0d:96:34:f5:c4:fa:ed:11:
33:f6:3d:06:95:47:10:af:96:79:1b:0a:1f:7d:4c:c2:ff:7f:
bd:f4:78:7e:ba:41:f8:e7:08:e7:11:2a:f2:2f:a9:8b:24:2e:
ec:44:8a:cb:ad:ce:c2:42:fd:ac:ef:9d:6c:a8:49:94:20:d9:
3a:27:8a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org