Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/GzU7Q7TsKKHmYRd24fSqe46UtWw.roa
File: GzU7Q7TsKKHmYRd24fSqe46UtWw.roa (raw, json)
Hash identifier: GPp5RaHEpH3Z0tzRfGdj1C64zA4LUuXMNz0LCulQ9EE=
Subject key identifier: 1B:35:3B:43:B4:EC:28:A1:E6:61:17:76:E1:F4:AA:7B:8E:94:B5:6C
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 018CC348E9639E0538CD3969A2166FB253E7
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/GzU7Q7TsKKHmYRd24fSqe46UtWw.roa
Signing time: Mon 01 Jan 2024 04:29:44 +0000
ROA not before: Mon 01 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50538
IP address blocks: 85.234.109.0/24 maxlen: 24
85.234.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e9:63:9e:05:38:cd:39:69:a2:16:6f:b2:53:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b353b43b4ec28a1e6611776e1f4aa7b8e94b56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:f8:29:b3:dc:24:cb:f8:ba:d7:3e:2e:24:
45:59:37:fc:99:c0:76:cc:8a:97:6c:d8:64:8c:5c:
b5:f7:e8:5e:10:5b:f8:53:00:e1:4b:9b:79:ae:1f:
1e:63:b6:cc:2d:1e:1a:24:93:b3:d3:99:5c:55:9b:
32:bc:b5:4c:2f:44:a4:36:e5:73:e6:07:3f:41:f1:
49:5d:5b:4f:5f:e2:03:71:89:61:c4:56:ef:1b:aa:
4c:c5:76:95:d4:a5:1e:38:6f:7f:87:9e:17:56:0f:
69:59:cd:b2:f2:29:29:64:11:81:bb:bc:44:c4:a9:
d4:24:a3:57:87:06:5c:45:1d:c7:1c:fd:3b:a2:b6:
90:91:20:09:e2:73:16:d6:43:bb:5d:a1:a7:13:01:
d9:14:d2:e0:eb:16:6f:cf:a1:fd:b7:60:30:3d:93:
fd:71:0f:00:f6:2a:d2:e8:4d:98:c5:56:bf:31:49:
fc:ae:2d:9f:2d:12:27:74:ac:28:d1:09:4c:31:2b:
b8:b9:63:17:6e:5f:85:a0:93:bb:e5:05:bf:88:c5:
57:3f:60:65:23:0c:99:ad:9f:52:5a:f2:cb:2f:45:
f5:a8:77:39:7d:96:ef:1f:81:51:eb:08:88:f2:45:
28:ea:5b:ef:77:b4:05:15:7f:b9:2a:51:c7:e2:f5:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:3B:43:B4:EC:28:A1:E6:61:17:76:E1:F4:AA:7B:8E:94:B5:6C
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/GzU7Q7TsKKHmYRd24fSqe46UtWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.108.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:ae:2c:57:1e:da:56:1c:28:4a:20:4e:bc:6d:b9:31:ec:d3:
5b:d0:6d:d2:ff:73:b2:d4:a5:16:1f:0e:ce:64:eb:94:84:cb:
32:f0:67:ac:13:bd:de:16:2d:61:00:e1:63:cc:56:3b:fd:02:
cf:aa:b6:be:c3:6f:60:37:1d:e4:17:44:da:5b:50:bb:c7:ee:
8d:0d:43:0f:ca:ba:d5:f1:12:9c:87:31:19:cc:81:f2:03:25:
66:7b:ad:c2:a4:63:9d:9b:90:d9:d8:7e:5b:76:bb:cf:b5:82:
e9:92:b6:ed:c6:5c:1b:c5:56:58:81:2e:b5:08:56:c6:4f:4f:
8d:76:c7:3c:82:57:e8:b1:a8:b6:47:77:44:ec:9f:89:2a:c2:
68:a2:b8:3e:88:ef:1b:a0:fc:a4:ab:91:a9:ac:89:43:fa:d4:
a8:4e:51:a7:54:04:4e:5c:c5:f5:2b:9f:1c:f9:c3:55:8d:33:
69:e6:8b:75:df:f8:bf:4f:cf:78:4c:a1:c7:43:69:72:68:b2:
04:9c:ce:2d:cb:eb:09:8a:82:00:29:e1:36:58:19:f7:f5:05:
e0:c3:a2:d0:e6:ff:8d:46:29:d3:33:56:7e:83:0e:94:5e:b7:
0c:62:98:f9:d8:e8:59:8d:5e:43:94:3d:4b:fe:45:84:c3:8d:
22:41:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org