Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/f6wopdkPAx3cZlhgrTsT9EFUGqY.roa
File: f6wopdkPAx3cZlhgrTsT9EFUGqY.roa (raw, json)
Hash identifier: qO1vKNnTtbg0/G0c2W3LzsREhrImUjA+Vo823i2835U=
Subject key identifier: 7F:AC:28:A5:D9:0F:03:1D:DC:66:58:60:AD:3B:13:F4:41:54:1A:A6
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01856F66F6B1496AE668AED51480F4E75978
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/f6wopdkPAx3cZlhgrTsT9EFUGqY.roa
Signing time: Sun 01 Jan 2023 22:14:56 +0000
ROA not before: Sun 01 Jan 2023 22:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213186
IP address blocks: 185.179.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 13:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f6:b1:49:6a:e6:68:ae:d5:14:80:f4:e7:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 22:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fac28a5d90f031ddc665860ad3b13f441541aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:4d:c0:27:34:64:37:68:a7:51:c5:c7:5b:
cc:bc:78:52:c1:8a:6d:83:a7:cd:1f:45:4b:53:41:
ae:b0:ab:98:c3:d2:9e:63:3f:37:9b:e0:2f:6f:6f:
d6:84:9d:35:ad:71:72:51:48:c4:38:86:9e:25:4b:
e8:6d:dc:9f:fd:64:88:65:fd:28:5c:74:ad:97:f5:
1a:db:6a:1d:94:f3:6d:7d:ee:8e:25:9d:0f:b7:7a:
ae:6e:0f:c3:d9:f5:ca:82:81:00:69:5a:84:88:1f:
b9:8d:d3:80:55:af:26:57:70:24:7a:97:ee:14:d2:
02:95:0a:ac:81:1a:f6:e0:a6:50:34:45:16:38:83:
e8:79:f6:56:9b:bb:ab:35:7e:74:8c:d9:a1:a7:b4:
0e:d9:24:79:34:fb:cd:22:8b:31:11:4d:12:0d:b8:
b5:03:33:f0:5f:5c:f6:17:ea:67:0a:0e:ee:b5:5c:
fd:ed:b7:33:34:44:aa:e3:7b:0b:16:e3:be:4b:70:
8f:8d:96:ef:20:f9:8b:d2:91:b9:7a:e5:4d:30:2c:
0c:2d:d4:48:36:a1:47:29:ff:85:07:c2:4e:0e:4a:
0f:b7:59:5d:fa:3f:a3:ce:7e:03:ef:20:6c:58:17:
32:bb:d4:f3:bb:fd:05:3d:12:98:ae:14:1c:46:28:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:28:A5:D9:0F:03:1D:DC:66:58:60:AD:3B:13:F4:41:54:1A:A6
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/f6wopdkPAx3cZlhgrTsT9EFUGqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.218.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:ef:d4:24:da:10:38:b4:2e:5f:ee:a7:fb:e8:f2:5a:2f:c0:
80:1e:cd:d8:aa:c7:3c:b5:de:2e:09:5c:e2:52:6e:b2:0a:96:
07:80:80:72:de:2e:ba:ed:61:ef:ae:13:c8:a9:e4:c5:45:f5:
70:5c:a2:0b:93:b1:f1:dd:21:ea:a9:22:5c:3f:c4:ba:77:42:
43:70:37:63:c8:d8:78:2c:2e:2f:66:f4:9a:21:a1:cd:2b:18:
df:ce:16:8d:d1:7f:f1:18:a3:d8:53:99:f9:6a:20:c7:a5:f0:
da:dd:35:b2:e3:1f:8e:c3:2e:e0:03:76:5a:a3:84:4d:a8:91:
29:78:97:ea:25:48:b1:b6:4b:59:92:20:23:c5:13:ac:76:09:
0a:11:a3:a1:24:e7:47:a6:55:91:fc:81:59:75:f9:a7:8e:8e:
7e:22:68:87:30:47:2d:af:e5:33:7e:d5:e8:af:da:2e:24:67:
e6:20:e6:a5:f0:5d:c0:b9:e2:11:7f:d4:0b:a8:7a:e7:37:c2:
01:1d:47:0c:ba:ed:4e:72:56:d0:1b:55:b1:99:80:93:a9:b3:
f9:3a:39:a7:fa:a4:ed:fe:9f:a3:2d:d0:bd:67:ff:9e:54:ac:
27:5a:7b:3a:3e:e8:0b:06:e8:f6:86:d1:7c:d7:72:a7:f0:5f:
17:6d:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org