Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/GQvBlA9RXWyR7I-9jCzmOmAj2OA.roa
File: GQvBlA9RXWyR7I-9jCzmOmAj2OA.roa (raw, json)
Hash identifier: L/SkUg3w9L3b5AacTMjC0cYXmUAa6uvK5/KacNf9JIE=
Subject key identifier: 19:0B:C1:94:0F:51:5D:6C:91:EC:8F:BD:8C:2C:E6:3A:60:23:D8:E0
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 01857139F0551544443F0AC2C350640C612D
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/GQvBlA9RXWyR7I-9jCzmOmAj2OA.roa
Signing time: Mon 02 Jan 2023 06:45:00 +0000
ROA not before: Mon 02 Jan 2023 06:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6724
IP address blocks: 185.122.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:f0:55:15:44:44:3f:0a:c2:c3:50:64:0c:61:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Jan 2 06:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=190bc1940f515d6c91ec8fbd8c2ce63a6023d8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e5:42:a2:17:14:1b:75:a5:d3:34:b6:10:28:
14:30:5c:53:ff:0a:34:f3:e5:10:42:d2:27:0a:72:
d4:5a:d5:00:26:47:16:9d:79:cb:85:d7:90:7e:1b:
89:1c:7c:d4:2c:64:e5:5c:29:88:99:77:27:17:ea:
32:27:a2:da:9f:11:aa:f7:2c:e7:54:a6:62:09:98:
da:b7:5e:d7:0f:a0:62:9b:66:f9:de:82:68:ef:0f:
07:f5:5b:96:f6:de:7f:5c:74:65:6e:81:f1:f5:95:
a8:23:88:ae:90:b0:87:3e:f6:8f:41:a0:73:87:8d:
1f:eb:98:85:44:29:55:9f:de:cd:b8:53:d1:c5:88:
95:13:d2:1c:e3:58:88:92:20:da:bd:ef:54:d7:6c:
d2:27:55:3c:47:85:92:e9:34:dd:de:ce:80:f2:99:
6c:e6:ba:d0:20:eb:15:4b:35:cd:eb:28:0a:83:38:
c9:eb:13:2a:2d:07:60:4f:89:4e:69:21:c8:2a:7c:
a0:8e:c5:2b:45:08:ab:db:0a:19:e9:21:11:c1:73:
ea:4f:79:ac:96:90:94:81:c9:c1:87:50:d6:b9:09:
54:ae:2a:8d:dc:bf:7f:cd:59:99:ae:31:1a:5e:56:
1d:c2:98:29:14:9e:cb:ff:9a:ff:d3:38:0e:7d:08:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0B:C1:94:0F:51:5D:6C:91:EC:8F:BD:8C:2C:E6:3A:60:23:D8:E0
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/GQvBlA9RXWyR7I-9jCzmOmAj2OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2b:37:95:1b:c9:df:82:df:1d:59:71:23:4c:dc:cc:b8:34:
50:d0:a1:bc:e6:08:81:bb:36:d0:6f:b8:df:c3:f2:b1:04:fe:
02:1f:08:b6:0d:53:d7:ae:7b:49:10:61:de:9b:7e:53:ec:bc:
60:aa:35:3b:70:62:b0:9f:43:77:88:aa:0a:a3:ab:5f:9b:cf:
00:e6:15:76:c0:f0:7d:bf:5a:28:e0:da:01:98:7e:d4:b3:76:
31:73:51:54:77:29:15:54:e8:71:18:5f:ba:80:c6:87:12:b6:
b4:db:df:55:23:6f:dd:c8:5c:d8:de:33:b1:02:e9:84:f5:1c:
22:02:43:63:fb:61:a2:ec:e9:33:b2:f0:0d:02:c5:5d:1b:2b:
15:46:05:f3:6d:bc:f4:a4:5f:d8:d6:ba:49:cd:6c:7a:95:0c:
e8:95:c7:c8:b1:9e:e8:05:b4:c9:8a:f8:af:4b:c2:fb:f5:37:
cb:f7:9b:4c:b9:12:ae:68:62:8c:cb:41:87:bd:58:9a:3d:0c:
d1:34:fc:ee:90:99:04:1a:27:8d:db:7e:88:05:ef:91:e0:43:
92:34:75:24:a9:df:69:60:69:43:07:85:90:d7:1d:47:53:38:
c9:d8:5f:79:06:df:11:9e:ac:18:42:7e:9f:10:b7:79:30:a4:
10:2e:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:37 2024 by rpki-client on console-fra.rpki-client.org