Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/GJvh6aoILzcGHQqFAxX-cYQ8bjo.roa
File: GJvh6aoILzcGHQqFAxX-cYQ8bjo.roa (raw, json)
Hash identifier: rgjZEsCS95TMC82VdSuLAZCvSr2ameh042MLE6P/HN8=
Subject key identifier: 18:9B:E1:E9:AA:08:2F:37:06:1D:0A:85:03:15:FE:71:84:3C:6E:3A
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 01857079909052BD81ED119652816826571F
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/GJvh6aoILzcGHQqFAxX-cYQ8bjo.roa
Signing time: Mon 02 Jan 2023 03:14:53 +0000
ROA not before: Mon 02 Jan 2023 03:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 185.156.185.0/24 maxlen: 24
185.156.184.0/24 maxlen: 24
185.156.186.0/24 maxlen: 24
185.156.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:90:90:52:bd:81:ed:11:96:52:81:68:26:57:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Jan 2 03:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=189be1e9aa082f37061d0a850315fe71843c6e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:c4:2b:ee:82:53:38:ae:34:4a:b3:66:d9:
95:b0:3d:ef:9d:f7:48:1f:b7:77:79:a5:d3:3b:fd:
46:77:4c:9e:15:d1:a0:44:26:60:5f:58:20:31:78:
94:0e:a2:c6:ab:81:5d:00:fe:56:d8:49:b0:38:fc:
8c:b4:2e:d5:20:84:df:c9:76:38:1f:cf:56:7c:43:
3d:4d:48:05:77:31:2e:76:30:51:24:bf:65:35:8c:
2f:2f:3f:17:2d:2f:02:34:b9:47:14:27:d5:dd:f0:
0a:b7:4c:1a:c5:9a:9d:2d:ad:2a:46:5f:dd:3d:81:
14:5f:0e:c5:6b:99:3e:f1:9a:db:55:d9:91:ec:b3:
89:e3:4b:d8:07:8f:54:73:a3:d0:c2:ef:3a:8d:81:
88:db:72:37:72:59:8d:e2:be:75:c0:12:a0:d0:16:
72:24:f1:c2:a2:eb:ee:d7:f0:a2:45:97:96:34:78:
9d:ab:b5:e8:c5:5d:c0:bc:7e:4a:b0:29:31:02:aa:
f2:54:c5:4d:0e:8a:70:f5:89:f1:de:13:64:e9:ea:
ee:59:0c:49:df:3c:d9:a4:85:7c:20:63:3d:c6:07:
fd:0e:99:d4:6f:f9:29:9b:1c:b8:f7:ad:fc:a2:cd:
3b:4d:d5:77:17:63:b8:80:c0:72:36:ae:1c:30:fc:
95:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9B:E1:E9:AA:08:2F:37:06:1D:0A:85:03:15:FE:71:84:3C:6E:3A
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/GJvh6aoILzcGHQqFAxX-cYQ8bjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
08:3c:32:0b:4d:05:04:e9:bd:4b:98:74:87:57:37:8c:bb:93:
67:66:6d:df:09:59:f8:2e:61:42:b1:87:ce:ba:09:02:de:fb:
69:c2:fc:0a:a4:46:0c:cb:00:dc:1d:f2:6d:d1:72:66:be:d0:
28:2b:17:d8:99:e4:29:a3:37:d6:47:ad:a7:14:fa:d3:30:d0:
58:cd:35:98:8a:f5:f6:c9:e1:7d:da:8b:42:ef:ca:14:7b:0c:
7c:2f:34:e9:d1:42:45:c8:87:99:04:e1:33:68:34:ce:9f:c5:
8d:2c:54:8b:bd:06:ad:43:32:ce:fc:44:ef:e6:96:31:d2:81:
fa:1b:63:c2:3b:86:c9:b1:f9:9a:f6:44:f4:e6:93:fb:7e:12:
69:8b:ec:45:9a:de:fc:27:f2:24:5d:4c:78:16:c7:25:46:02:
c9:21:14:0b:d0:6f:48:d4:04:10:d7:ec:09:33:db:de:5c:d4:
f2:28:56:5f:e9:cb:60:16:ca:5e:aa:7d:be:3f:ba:36:a5:63:
85:71:b5:d6:c6:c3:b6:d8:69:75:21:98:00:06:be:1d:d6:d9:
c4:66:3f:1a:df:7a:9f:7c:c1:94:0f:a7:25:90:88:f6:0b:4d:
b4:bb:00:3f:fc:03:b1:eb:a0:4b:6a:a8:9f:3b:0b:8f:fc:da:
98:7c:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:45 2024 by rpki-client on console-ams.rpki-client.org