Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/guns4q1s4lHmXcoLfyP5MOOhLLs.roa
File: guns4q1s4lHmXcoLfyP5MOOhLLs.roa (raw, json)
Hash identifier: clFateZwPvw1uLClollpDeKuTLnYTlXXsxRZ3L2kypc=
Subject key identifier: 82:E9:EC:E2:AD:6C:E2:51:E6:5D:CA:0B:7F:23:F9:30:E3:A1:2C:BB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 018771C7BDB38267F2C986DA14916D1F74FD
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/guns4q1s4lHmXcoLfyP5MOOhLLs.roa
Signing time: Tue 11 Apr 2023 19:25:28 +0000
ROA not before: Tue 11 Apr 2023 19:25:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 185.213.171.0/24 maxlen: 24
185.213.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 16:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:c7:bd:b3:82:67:f2:c9:86:da:14:91:6d:1f:74:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Apr 11 19:25:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82e9ece2ad6ce251e65dca0b7f23f930e3a12cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:4f:b7:2e:09:6b:52:86:e8:e5:49:a6:f3:
11:d3:36:7b:04:1d:aa:e5:f6:74:61:fc:38:85:10:
e5:a3:f7:d1:f8:ec:19:5a:39:53:59:f1:b6:88:b0:
03:e4:50:ed:c6:72:e5:bb:63:13:22:f1:10:b4:59:
84:41:fa:36:6d:7c:f8:74:65:29:d5:e1:a0:ef:42:
bb:29:bc:87:0d:ab:ed:7a:fc:86:a1:a8:31:ca:65:
7c:a0:a4:90:7d:5f:68:76:ea:a0:6f:ae:25:0d:dd:
04:9f:b9:6c:3f:ca:30:f5:3b:29:31:22:04:57:63:
e0:66:c0:a9:a9:a9:ad:69:2f:e1:77:dd:39:b1:54:
d3:d1:16:68:13:04:df:22:78:6f:67:e0:85:6b:03:
e2:93:9e:dd:02:b1:7b:1c:ac:ec:55:23:d6:18:fe:
38:9b:e9:f8:f1:fa:74:cf:0d:d4:ed:b2:5d:0e:e4:
3e:6f:62:cb:cb:36:40:62:55:9e:7c:b2:65:a9:22:
e4:d9:c6:b9:e4:ca:20:5b:62:63:0b:c0:9a:47:d7:
28:3a:e3:05:00:57:cc:2a:43:2a:da:5b:df:27:1f:
9e:33:24:42:de:b6:c9:5b:fc:a9:ca:84:25:be:47:
96:bb:30:12:53:2f:7e:8f:97:77:09:51:ba:78:f7:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:EC:E2:AD:6C:E2:51:E6:5D:CA:0B:7F:23:F9:30:E3:A1:2C:BB
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/guns4q1s4lHmXcoLfyP5MOOhLLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.169.0/24
185.213.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ce:f8:a3:63:a6:a9:8f:df:00:9a:38:14:19:98:65:43:a9:
eb:8d:41:42:a7:4a:cd:58:94:8c:17:dc:e0:67:4e:09:04:56:
72:30:f2:17:dc:b4:7f:0f:2d:5a:6b:20:cb:04:98:7e:bc:8b:
bd:78:4c:3c:7f:47:c9:07:79:23:12:46:0a:7e:9c:9f:01:c6:
72:95:69:04:d8:c7:c6:4e:09:80:cf:18:4a:2c:b0:d1:c1:4e:
a9:4c:40:1d:98:e0:53:23:81:d8:66:e2:b5:38:4d:a8:a5:ac:
bd:7b:38:c6:30:13:e7:0c:f1:e1:e4:5c:70:83:c7:5a:fa:83:
58:f1:b1:b9:2b:c6:e0:65:2a:40:ff:e1:ed:32:a2:45:99:bd:
b8:c0:1c:87:16:69:b1:31:1f:87:49:8a:b9:ad:b6:94:df:06:
74:8f:47:13:2e:9f:88:d4:b3:07:43:16:68:21:45:00:fd:66:
3e:08:3a:28:b7:28:4f:77:42:c2:90:d0:72:43:b9:34:b7:25:
db:a3:bb:71:63:fc:27:10:83:c9:a3:d3:f4:d7:92:cb:f7:da:
95:19:30:64:52:e4:e9:64:e8:c8:4d:00:5d:3d:12:3b:3d:c8:
64:02:a3:c5:76:3d:1a:31:03:44:8c:58:02:2c:80:0c:f6:67:
c6:48:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:02 2024 by rpki-client on console-ams.rpki-client.org