Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/GrmL4MbMICfrM-FTcQHZaCR35Zc.roa
File: GrmL4MbMICfrM-FTcQHZaCR35Zc.roa (raw, json)
Hash identifier: gEhUidYAaBQK9h76AX/jvMYgmH+A4Ll15EVpKIz/wcE=
Subject key identifier: 1A:B9:8B:E0:C6:CC:20:27:EB:33:E1:53:71:01:D9:68:24:77:E5:97
Certificate issuer: /CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Certificate serial: 01856CCAEA26CA995420AA172794809A3EF9
Authority key identifier: 5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/GrmL4MbMICfrM-FTcQHZaCR35Zc.roa
Signing time: Sun 01 Jan 2023 10:05:15 +0000
ROA not before: Sun 01 Jan 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41821
IP address blocks: 185.210.80.0/22 maxlen: 24
2a0b:6040::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ea:26:ca:99:54:20:aa:17:27:94:80:9a:3e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Validity
Not Before: Jan 1 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ab98be0c6cc2027eb33e1537101d9682477e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:80:fe:58:fc:53:12:18:0a:79:2e:6c:58:
4e:69:ac:bd:2b:36:1f:0b:68:ac:35:e2:bc:f1:ee:
85:39:17:2f:c9:b8:85:a2:43:f8:a1:28:dd:3c:ec:
fd:85:9f:fb:07:8a:8d:bc:04:d9:1e:7e:de:bd:d1:
e2:fc:99:a0:d6:48:41:b2:a4:0f:f7:2f:cc:26:b7:
29:98:0a:9f:56:04:f0:d8:53:ae:71:e8:9c:36:46:
7b:29:ec:97:31:6f:54:da:ab:01:8f:63:94:e4:78:
b7:f0:1e:67:9d:2f:a6:32:26:39:57:b1:83:b9:57:
6c:70:be:45:36:9c:be:b7:ac:b0:e5:cc:f2:b0:2e:
ac:0f:e1:2a:4b:b7:8d:64:b6:66:5b:d6:9c:d9:d8:
a8:01:16:a6:3e:80:23:ee:cd:20:fe:7e:13:50:ee:
31:9f:9d:c5:7c:a8:12:78:b2:dc:d9:8d:46:cf:9e:
87:5e:c8:89:b1:cc:31:ab:6d:26:fd:81:2f:df:cf:
5b:e9:98:06:fd:b3:7c:3d:33:14:82:20:18:7f:c3:
4b:b1:04:fc:7c:6d:27:d9:ae:e8:72:15:99:cc:5b:
c3:d5:b3:ad:15:fb:17:55:d6:d9:7d:62:21:48:ab:
7d:9d:2e:14:40:7d:fb:ab:49:84:c0:e1:0b:b4:5d:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B9:8B:E0:C6:CC:20:27:EB:33:E1:53:71:01:D9:68:24:77:E5:97
X509v3 Authority Key Identifier:
keyid:5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/GrmL4MbMICfrM-FTcQHZaCR35Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.80.0/22
IPv6:
2a0b:6040::/32
Signature Algorithm: sha256WithRSAEncryption
4a:65:a3:0f:4b:b4:ec:d1:7c:e8:67:a0:3e:72:35:5a:c5:8c:
e9:ba:6d:7e:cf:05:67:e7:73:a3:28:06:c8:06:d0:d9:07:cb:
01:03:ec:eb:30:56:57:47:d5:fc:a1:d7:dd:96:a2:17:9c:7b:
00:99:3d:70:ab:6b:f5:7d:a9:4b:68:c7:19:44:ca:99:f8:f6:
2c:16:81:6b:36:7b:7f:c5:0f:41:c0:ee:b1:7d:01:6b:3b:a3:
02:81:bc:df:b0:57:29:f4:47:c1:ad:38:ff:68:f9:92:2a:04:
25:eb:f5:43:e5:e7:ea:8f:78:cf:7e:10:06:58:6c:53:fd:32:
15:76:8c:25:7c:6a:47:4c:29:d4:81:bf:9b:3f:2c:e1:e9:01:
62:3c:cb:81:23:6c:01:d7:17:62:88:3d:51:68:74:cc:e3:45:
a3:88:be:70:d8:33:7f:8a:74:d6:c0:71:5c:e5:0c:dd:62:7b:
e0:09:07:4e:2c:76:df:fd:00:bf:8e:38:f2:81:ff:05:c1:c1:
e6:de:8e:15:a1:2d:5b:12:92:8d:6e:e5:76:b5:74:52:5b:46:
83:e1:2b:12:cc:2e:14:c8:02:66:84:87:9b:b4:11:e5:20:04:
1a:4f:94:26:1a:2f:29:ad:e1:65:aa:27:f8:c2:68:69:22:ce:
88:d9:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:08 2024 by rpki-client on console-ams.rpki-client.org