Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/gS689ULj_zwPQd4vipgY_cGmSy8.roa
File: gS689ULj_zwPQd4vipgY_cGmSy8.roa (raw, json)
Hash identifier: teUT29HvPec3uUTy7/Qm8CjsUR6FLyW0/mZNL/TuyR0=
Subject key identifier: 81:2E:BC:F5:42:E3:FF:3C:0F:41:DE:2F:8A:98:18:FD:C1:A6:4B:2F
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018F2F540C3EC40AE20F4437C6DA4472D79E
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/gS689ULj_zwPQd4vipgY_cGmSy8.roa
Signing time: Tue 30 Apr 2024 14:06:28 +0000
ROA not before: Tue 30 Apr 2024 14:06:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 185.233.184.0/24 maxlen: 24
185.244.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 13:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:54:0c:3e:c4:0a:e2:0f:44:37:c6:da:44:72:d7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Apr 30 14:06:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=812ebcf542e3ff3c0f41de2f8a9818fdc1a64b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:78:fc:7b:4d:36:f7:af:4c:8d:95:79:bc:
85:5d:26:67:8b:aa:94:a9:0b:95:57:37:33:31:7f:
60:00:37:20:b1:9f:54:31:1b:5c:35:fb:b2:b1:42:
58:46:1c:64:34:a4:fe:b5:77:70:43:d7:b9:03:ba:
28:23:c2:96:f4:2f:68:2d:b3:e0:1e:05:a4:2e:db:
70:1e:05:16:da:5c:d4:e8:6e:7c:6b:24:69:6e:57:
2a:d8:5a:87:a2:9e:42:85:94:d2:67:0c:71:13:0a:
30:ac:26:55:df:c3:cc:24:85:df:f1:1c:65:24:e9:
4e:3d:e8:c5:59:ff:4d:04:94:c2:32:51:a9:2f:a2:
fe:bd:14:70:f7:ee:7a:5c:c0:73:42:33:33:1c:0c:
7d:92:b0:3a:90:b1:a2:9a:06:97:bc:cf:88:60:8b:
49:d1:bc:6f:20:51:a0:2e:c0:5d:8e:30:2b:50:b4:
b1:77:21:87:ec:3c:a3:52:c9:de:a1:b1:ee:ed:45:
94:04:4b:93:9e:d6:0d:56:32:de:a8:65:e8:09:b1:
ac:4e:e0:d4:a3:84:ed:63:34:5e:8a:ec:9c:46:77:
51:30:b0:0d:7b:1f:7d:0a:35:9b:90:8c:12:29:47:
f3:8c:86:17:8b:b4:6d:9b:69:9c:31:bb:a4:8c:fa:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2E:BC:F5:42:E3:FF:3C:0F:41:DE:2F:8A:98:18:FD:C1:A6:4B:2F
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/gS689ULj_zwPQd4vipgY_cGmSy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.184.0/24
185.244.49.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3a:52:ac:e3:65:28:33:1d:34:ae:93:69:81:04:cc:9c:7c:
4e:6e:6d:66:5b:71:bc:77:69:e6:b9:f8:f2:35:2e:0f:45:a6:
c0:ea:da:ea:9a:a2:41:04:2e:bc:7a:10:ca:40:f7:98:a4:5a:
44:cf:8c:40:88:77:03:8c:36:e0:03:41:a3:ea:77:20:dc:fa:
66:fe:9e:83:ae:f0:b3:ea:66:24:32:2e:65:95:34:b4:54:49:
45:60:7f:be:b5:c5:9f:fb:40:7e:f6:22:82:2d:44:41:dc:75:
4d:e6:8c:d2:82:ed:e1:5b:fa:be:e9:4f:6c:f9:22:aa:07:6f:
73:4a:5a:60:46:ba:d2:4a:ea:39:f3:d0:a6:26:47:2b:19:6a:
c3:6f:f2:0b:67:63:24:73:e0:be:5e:8e:35:48:77:20:df:da:
de:78:ab:4d:eb:42:ce:02:01:1e:84:b9:6d:40:40:e7:1f:e6:
6d:b8:6b:91:4c:86:a7:2c:9f:af:e8:4b:b1:85:7a:c9:61:9d:
8a:f5:42:09:e0:fb:7d:86:d2:10:47:ee:4e:2a:f1:27:fa:d8:
28:5a:52:05:28:ab:5d:85:2a:37:e1:c1:65:bf:05:ad:7b:e5:
a1:2c:b0:71:ae:2c:9f:a7:93:bf:54:37:42:f4:92:7d:d2:be:
95:ba:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:31:45 2024 by rpki-client on console-fra.rpki-client.org