Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/GAOcN0KxGC2RXN4_L9e_gJb-ktM.roa
File: GAOcN0KxGC2RXN4_L9e_gJb-ktM.roa (raw, json)
Hash identifier: fe+AWW4+ukUrQ6DfGwXvn5bQnaIGVGd4vxlfTZ0D99A=
Subject key identifier: 18:03:9C:37:42:B1:18:2D:91:5C:DE:3F:2F:D7:BF:80:96:FE:92:D3
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 018571B0BF2BD601E319AEA56C9919109509
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/GAOcN0KxGC2RXN4_L9e_gJb-ktM.roa
Signing time: Mon 02 Jan 2023 08:54:46 +0000
ROA not before: Mon 02 Jan 2023 08:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31662
IP address blocks: 185.251.56.0/22 maxlen: 22
217.151.112.0/20 maxlen: 20
94.228.144.0/20 maxlen: 20
185.27.4.0/22 maxlen: 22
2a00:d28::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:bf:2b:d6:01:e3:19:ae:a5:6c:99:19:10:95:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Jan 2 08:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18039c3742b1182d915cde3f2fd7bf8096fe92d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:5b:07:13:da:24:3a:7c:e8:ad:1a:34:b7:
e4:ac:0f:20:f9:fc:ef:6f:01:4d:c3:01:39:9d:55:
10:35:0c:e8:4d:15:59:5d:ae:8e:7b:fc:5e:26:67:
4e:08:75:06:10:bc:99:50:a0:9f:bc:e2:c9:14:9a:
2c:8e:13:8d:34:37:24:b9:11:10:a9:fd:47:f4:4a:
0e:46:f7:6d:be:2f:57:bb:8d:e8:a2:b2:b2:9c:cc:
fb:5f:93:ee:86:e8:f1:7f:b9:3e:9b:ba:6f:5f:17:
c6:be:15:ad:f3:be:90:dc:7f:00:38:9e:c2:54:17:
5c:1b:26:70:9a:54:f3:eb:8b:06:b4:f4:cf:5f:4e:
15:49:2b:2d:ca:a2:e5:a1:69:09:69:6c:15:c5:a3:
8e:18:ff:ac:42:fe:b6:4f:13:72:94:b2:01:3f:75:
d3:89:67:df:85:0a:b9:24:5c:0f:44:6d:40:94:7b:
5c:51:27:07:e9:6d:93:04:61:fd:51:f9:de:e8:7d:
92:ab:ee:0b:de:c6:8c:36:ad:5b:c5:e7:f8:6c:92:
7e:08:23:c3:f0:a3:4c:bf:cf:45:8a:8b:2e:03:fb:
d6:b5:44:83:42:75:5a:f3:57:bf:48:3c:9c:19:22:
ef:ad:0f:98:a7:4a:36:95:c8:a9:1d:14:65:c8:64:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:9C:37:42:B1:18:2D:91:5C:DE:3F:2F:D7:BF:80:96:FE:92:D3
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/GAOcN0KxGC2RXN4_L9e_gJb-ktM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.144.0/20
185.27.4.0/22
185.251.56.0/22
217.151.112.0/20
IPv6:
2a00:d28::/32
Signature Algorithm: sha256WithRSAEncryption
38:36:0c:0b:fc:08:fc:18:fa:06:9d:67:49:b2:39:44:fc:d0:
d7:4b:d2:72:ea:03:12:1b:c6:a1:5d:6f:92:50:ae:77:eb:a8:
97:f8:da:cf:f3:90:41:0b:fc:79:88:bc:d2:4b:c9:23:2f:e0:
de:05:14:29:18:2d:52:b2:17:91:04:2f:3e:64:59:1a:01:0a:
43:a2:53:3f:e6:e3:bc:b7:10:87:41:45:62:3a:69:bc:70:85:
36:ee:a3:d0:21:20:f6:fe:7d:78:88:ac:10:cd:cc:3e:cc:f3:
1f:43:3f:1d:af:6c:cd:6b:b7:42:3e:3d:13:7c:99:6d:a6:4e:
65:51:a3:9a:61:ea:7f:9c:76:41:a7:18:1b:59:1c:5b:fc:46:
09:85:81:ff:04:a9:c1:47:1a:6b:26:5a:1d:c0:94:59:14:04:
e1:66:0c:87:22:25:bf:e1:62:e5:91:f6:09:35:42:27:f6:b1:
87:f5:2d:80:b4:b9:84:2e:27:97:c6:28:70:ba:09:93:74:a7:
1e:d1:6d:b6:79:96:ec:5a:72:cf:13:1d:00:1e:74:d2:2c:7a:
49:c5:06:2c:c4:9f:e8:7c:36:17:9f:5d:36:06:99:38:cb:88:
85:7e:c4:bd:56:b3:68:c8:78:d7:31:53:b3:5e:c2:b9:a5:99:
4e:77:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:59 2024 by rpki-client on console-ams.rpki-client.org