Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/gbdstCk8dK6Tn4EsTAq7hMRDh5I.roa
File: gbdstCk8dK6Tn4EsTAq7hMRDh5I.roa (raw, json)
Hash identifier: YbFXmt/4d9N13422e4/tOsFNkQtBpgO9G2iolJOF+HQ=
Subject key identifier: 81:B7:6C:B4:29:3C:74:AE:93:9F:81:2C:4C:0A:BB:84:C4:43:87:92
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 01875BE896DD67D49E8DC09CDC1C76051276
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/gbdstCk8dK6Tn4EsTAq7hMRDh5I.roa
Signing time: Fri 07 Apr 2023 13:29:42 +0000
ROA not before: Fri 07 Apr 2023 13:29:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.248.51.0/24 maxlen: 24
185.248.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Apr 2023 08:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:e8:96:dd:67:d4:9e:8d:c0:9c:dc:1c:76:05:12:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Apr 7 13:29:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81b76cb4293c74ae939f812c4c0abb84c4438792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:d6:23:a1:92:a6:70:22:e1:5e:c7:3a:93:
46:33:33:09:d5:aa:a5:ff:e5:9e:2e:96:e4:40:2b:
f0:8e:d3:b3:67:99:1b:8c:40:a1:4a:69:ad:29:08:
01:17:7b:3d:10:9f:92:fe:be:ed:5f:2d:c1:80:d2:
d7:7e:b2:90:b5:da:27:75:ec:25:00:17:5b:f3:2a:
83:d2:1f:8a:a7:8b:8d:c8:47:c9:8f:1a:ef:bb:f0:
88:ee:45:d1:b2:62:51:66:1f:82:11:74:66:a4:1b:
44:41:69:e7:76:19:95:2a:47:13:7b:02:63:2c:c7:
92:d5:00:23:b1:8d:e3:d0:c9:2e:3e:c2:70:9d:b0:
eb:89:6b:a3:cc:3d:4b:ef:2c:64:97:e9:c3:66:b2:
61:4b:06:dc:d1:aa:06:49:90:13:8e:4f:06:cc:22:
12:00:34:cb:37:f7:26:9d:5d:2e:7c:24:83:e8:b8:
c5:d2:be:fb:7f:f1:6d:0b:87:aa:c8:a3:ee:03:40:
da:85:c4:44:60:49:84:19:ba:6e:40:06:1e:be:44:
07:28:37:d4:e9:b3:9f:7e:2b:79:ee:a0:af:f7:61:
db:ce:9d:e7:ea:be:28:96:6a:54:4e:11:2f:14:47:
27:96:f4:8e:da:ae:95:e3:dd:6c:0f:b4:60:21:e0:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:6C:B4:29:3C:74:AE:93:9F:81:2C:4C:0A:BB:84:C4:43:87:92
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/gbdstCk8dK6Tn4EsTAq7hMRDh5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.49.0/24
185.248.51.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1b:cd:46:c3:b8:33:7d:9b:d9:32:09:c8:2e:2e:69:7f:83:
82:b1:23:f1:c8:9a:7c:c1:0c:25:e7:0d:8d:e4:fe:a9:db:ae:
da:98:28:41:02:ba:37:12:b1:e7:1f:81:86:7c:9c:3b:34:36:
67:2a:58:fb:87:8a:89:88:77:68:98:20:ac:e5:2b:cb:5d:de:
72:d1:32:29:89:8f:8d:84:77:72:ec:45:38:25:33:9d:08:89:
58:9a:3c:27:aa:0f:ae:2f:df:45:93:4a:33:65:28:4f:b2:9f:
a4:e7:b5:31:56:91:43:73:fe:ba:7b:44:fc:53:0c:69:ce:37:
4d:40:4e:e4:e8:7d:2d:b1:4e:07:bf:7a:3d:bc:10:49:f4:31:
86:2e:bb:8c:34:c3:bf:73:b3:b1:ae:d6:7f:13:09:9d:bf:39:
e4:2d:bc:b6:2c:2d:ee:c5:ce:6b:f4:86:87:64:86:e1:a4:26:
4a:ae:f0:04:9f:e5:e8:12:f9:0b:79:2b:34:b9:c3:4e:3e:03:
05:f3:90:59:ef:37:8e:07:f5:ee:73:74:f4:74:b1:d2:53:d7:
62:59:f0:27:80:17:9f:02:33:6e:ce:ad:97:32:ee:56:e7:aa:
82:bb:3a:d9:d9:cc:77:3b:53:b5:2d:3e:ef:80:1f:6d:f8:5d:
cc:e8:92:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdb6JbdZ9SejcCc3Bx2BRJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjMwNDA3MTMyOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWI3NmNiNDI5M2M3NGFlOTM5ZjgxMmM0YzBhYmI4NGM0NDM4NzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiLWI6GSpnAi4V7HOpNGMzMJ1aql
/+WeLpbkQCvwjtOzZ5kbjEChSmmtKQgBF3s9EJ+S/r7tXy3BgNLXfrKQtdondewl
ABdb8yqD0h+Kp4uNyEfJjxrvu/CI7kXRsmJRZh+CEXRmpBtEQWnndhmVKkcTewJj
LMeS1QAjsY3j0MkuPsJwnbDriWujzD1L7yxkl+nDZrJhSwbc0aoGSZATjk8GzCIS
ADTLN/cmnV0ufCSD6LjF0r77f/FtC4eqyKPuA0DahcREYEmEGbpuQAYevkQHKDfU
6bOffit57qCv92Hbzp3n6r4olmpUThEvFEcnlvSO2q6V491sD7RgIeBm2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIG3bLQpPHSuk5+BLEwKu4TEQ4eSMB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEvZ2Jkc3RDazhkSzZUbjRFc1RBcTdoTVJEaDVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufgxAwQA
ufgzMA0GCSqGSIb3DQEBCwUAA4IBAQB4G81Gw7gzfZvZMgnILi5pf4OCsSPxyJp8
wQwl5w2N5P6p267amChBAro3ErHnH4GGfJw7NDZnKlj7h4qJiHdomCCs5SvLXd5y
0TIpiY+NhHdy7EU4JTOdCIlYmjwnqg+uL99Fk0ozZShPsp+k57UxVpFDc/66e0T8
UwxpzjdNQE7k6H0tsU4Hv3o9vBBJ9DGGLruMNMO/c7OxrtZ/EwmdvznkLby2LC3u
xc5r9IaHZIbhpCZKrvAEn+XoEvkLeSs0ucNOPgMF85BZ7zeOB/Xuc3T0dLHSU9di
WfAngBefAjNuzq2XMu5W56qCuzrZ2cx3O1O1LT7vgB9t+F3M6JKI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:07 2024 by rpki-client on console-ams.rpki-client.org