Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/GFYQBB7UTVe261_lTFncqV34opg.roa
File: GFYQBB7UTVe261_lTFncqV34opg.roa (raw, json)
Hash identifier: pVgL0ZgBFDXkyKeW5OE5IKh3UojWZR55Pv83yO1TZKA=
Subject key identifier: 18:56:10:04:1E:D4:4D:57:B6:EB:5F:E5:4C:59:DC:A9:5D:F8:A2:98
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 01856D9D0D66B3E19E0266D526940B292F66
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/GFYQBB7UTVe261_lTFncqV34opg.roa
Signing time: Sun 01 Jan 2023 13:54:47 +0000
ROA not before: Sun 01 Jan 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200432
IP address blocks: 185.107.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 13:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0d:66:b3:e1:9e:02:66:d5:26:94:0b:29:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Jan 1 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=185610041ed44d57b6eb5fe54c59dca95df8a298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:4b:30:ea:7d:27:b2:61:ae:e0:ee:15:be:
d3:8e:24:60:ca:1d:c6:a0:dc:fe:ce:90:f4:ee:1f:
18:9e:d1:7c:13:10:ad:d5:be:9a:c0:4b:75:d1:86:
81:a5:2a:8f:58:cd:1d:9d:d6:50:5d:cb:7b:7a:e8:
2a:b2:c6:4e:1f:d7:f5:fe:9e:96:d2:4a:09:89:b9:
ec:7c:ba:8a:76:24:4d:aa:b5:f2:8c:11:f3:57:c6:
3f:7b:2c:2e:8b:15:b1:ba:d7:4b:c3:30:41:8c:dc:
4e:e0:4d:48:e5:f5:35:b2:47:77:44:14:cd:c8:75:
90:e2:cd:94:f5:4f:01:18:b2:9e:38:ef:ba:8e:55:
30:f9:21:7f:d6:19:27:d2:9b:45:39:49:d7:b3:93:
32:4d:ad:cb:7e:e9:8b:b4:3f:a5:3d:68:ec:b9:49:
73:81:87:80:ca:fc:58:c8:dd:26:e9:db:43:8a:47:
9e:54:a7:bd:1f:ce:58:b3:d0:82:4e:ca:88:3c:3e:
fd:ea:fb:bd:3f:0a:f8:fe:34:5d:eb:45:8a:4e:68:
cb:51:8d:05:5a:f1:f7:3e:9b:96:17:35:40:58:6a:
41:92:b4:31:c3:04:bc:fc:ca:87:d4:df:ed:f8:25:
38:3b:7d:7d:fa:eb:bf:5f:02:d3:70:00:e2:3f:0d:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:10:04:1E:D4:4D:57:B6:EB:5F:E5:4C:59:DC:A9:5D:F8:A2:98
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/GFYQBB7UTVe261_lTFncqV34opg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c8:5b:ed:23:b4:45:13:51:54:14:2b:b0:19:02:0f:38:06:
12:7d:07:53:e4:bd:90:dd:26:85:25:44:e1:62:69:25:d2:d9:
85:14:15:50:13:71:41:e8:e7:ec:2f:e8:55:5e:d0:6b:3c:21:
b3:cf:29:4e:ff:99:6d:72:30:db:20:5f:37:3b:bf:2a:a3:99:
11:ed:d1:e4:a6:f0:2b:b0:e3:17:ee:00:f4:f1:9f:6b:d8:c0:
94:0a:28:96:d8:06:6c:43:e7:18:62:63:be:4b:bd:e3:58:2a:
30:5f:22:0e:25:81:4f:19:b3:65:bb:cf:49:76:0c:89:73:50:
7e:b6:f0:c8:a3:5f:65:a6:88:5f:43:c7:d4:37:c1:4c:72:5f:
25:fe:6f:b4:23:9d:83:e8:10:2b:f7:d7:4a:b3:90:2d:a5:f8:
ca:02:e2:b5:ef:73:62:fc:cc:a7:aa:80:69:5c:e4:97:77:9f:
46:e4:02:58:62:93:8e:ed:2b:fe:48:87:52:88:5c:f1:82:e2:
bc:52:99:20:b4:af:66:39:92:37:6f:63:39:4c:5d:84:7f:9d:
92:30:5b:e0:3a:88:e7:8e:f6:fc:04:3c:ae:9d:ef:4b:22:86:
2d:09:2c:c5:55:be:10:07:2c:12:eb:f6:1e:e4:25:4a:0a:de:
68:d5:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-fra.rpki-client.org