Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/gyixyTTPLf54rNjTsvCMBuTXBoA.roa
File: gyixyTTPLf54rNjTsvCMBuTXBoA.roa (raw, json)
Hash identifier: uH+vuKMBhRmpoaQhrSR00dZ2tU4y48n/j8zitIOSnp8=
Subject key identifier: 83:28:B1:C9:34:CF:2D:FE:78:AC:D8:D3:B2:F0:8C:06:E4:D7:06:80
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 018862930E554078DD494E5EA9CAFBA690D2
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/gyixyTTPLf54rNjTsvCMBuTXBoA.roa
Signing time: Sun 28 May 2023 13:36:24 +0000
ROA not before: Sun 28 May 2023 13:36:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9137
IP address blocks: 213.204.0.0/19 maxlen: 19
185.82.56.0/22 maxlen: 22
2a02:5640::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 25 Aug 2023 10:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:62:93:0e:55:40:78:dd:49:4e:5e:a9:ca:fb:a6:90:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: May 28 13:36:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8328b1c934cf2dfe78acd8d3b2f08c06e4d70680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:61:21:5d:7b:07:54:aa:3a:2f:ef:5c:9a:
d1:0d:9d:6f:21:5e:7d:9b:54:fa:a2:d9:bb:a4:1f:
db:03:08:ec:44:be:88:04:7d:34:a2:1b:23:8e:d5:
f2:28:4b:42:29:f3:fa:ef:6c:29:a7:3f:c3:52:f2:
a5:87:68:75:5b:0a:ef:96:43:af:54:af:51:c1:3a:
67:20:9c:1d:11:09:41:96:67:45:ef:5f:96:f5:04:
8a:dc:b9:c1:92:2f:10:75:07:85:46:5d:9a:a2:ef:
f2:51:13:0b:5a:c6:b9:ea:c8:4a:89:a9:33:ec:ad:
d1:79:bc:20:a1:d5:68:19:17:e1:5d:70:84:98:7a:
97:34:52:c6:77:ef:39:8c:ab:7a:a5:78:64:49:97:
1b:ec:e3:ab:24:ac:a5:bb:7c:72:5b:af:e6:55:08:
1e:f2:e0:f1:44:03:a1:ad:c8:86:99:fa:1a:af:62:
22:dc:61:78:2e:db:12:7b:05:75:6b:c3:82:81:37:
a0:65:e4:12:ee:7d:ae:21:3c:fb:d6:22:9c:02:75:
62:f9:e1:bd:2e:cc:79:cb:be:cf:4b:4c:a1:81:9c:
d0:0e:c4:38:22:7e:68:ab:69:25:c1:91:37:96:8a:
6e:8e:0c:06:c5:b7:bf:c9:7d:1e:b8:5e:51:a2:ed:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:B1:C9:34:CF:2D:FE:78:AC:D8:D3:B2:F0:8C:06:E4:D7:06:80
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/gyixyTTPLf54rNjTsvCMBuTXBoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.56.0/22
213.204.0.0/19
IPv6:
2a02:5640::/29
Signature Algorithm: sha256WithRSAEncryption
36:ad:88:9b:aa:b8:b4:f9:78:bf:c1:96:fa:70:e1:ca:55:f3:
a3:22:8f:2d:be:08:0d:4a:fc:7f:0a:71:f3:09:d3:ca:ae:0d:
59:39:ba:7b:94:0a:2d:47:9c:98:4c:e3:c3:85:b8:f9:cd:19:
cf:7d:11:5a:cd:b0:a1:ad:84:8f:08:67:26:7a:73:45:f0:bc:
d9:fa:02:80:4b:9e:9a:1a:cb:d9:e0:a3:9b:e9:35:9c:4f:b3:
b0:ab:7a:77:21:08:5e:88:e2:a2:3d:c4:ff:34:4b:f7:05:95:
a1:9a:6d:1a:44:27:b7:6e:1a:ba:23:16:85:ba:fc:3c:18:a5:
19:f3:71:cb:38:d4:35:9e:86:f4:b3:63:db:10:a0:18:57:16:
00:6e:f8:d0:59:8c:f8:85:f5:7f:2f:34:bf:e3:c8:e4:1d:07:
0d:d6:d6:1f:a4:2e:24:8e:ed:6e:dd:28:58:ff:c5:3c:6a:3d:
5f:93:42:f1:04:7f:3d:06:52:a4:b0:7e:93:0d:0a:d7:1b:88:
2f:65:e4:1b:db:4a:87:7d:34:6a:1e:a5:44:9f:5b:2e:f0:21:
e2:ad:db:f2:95:45:d8:5b:5e:33:86:28:c8:08:c3:b5:85:9e:
4f:6d:57:f6:f2:ea:e5:c6:71:34:02:fd:89:58:40:15:55:e1:
1b:7b:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:38 2024 by rpki-client on console-ams.rpki-client.org