Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/GMKn4sP5nF6z9MCloBCir_Wldkw.roa
File: GMKn4sP5nF6z9MCloBCir_Wldkw.roa (raw, json)
Hash identifier: FtOZtxpXlhZ/Hirm2fbjYENVvd797GtS+7MQhXc1fJE=
Subject key identifier: 18:C2:A7:E2:C3:F9:9C:5E:B3:F4:C0:A5:A0:10:A2:AF:F5:A5:76:4C
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 0185704281A0D9D799EF6C9B6F04065C0544
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/GMKn4sP5nF6z9MCloBCir_Wldkw.roa
Signing time: Mon 02 Jan 2023 02:14:44 +0000
ROA not before: Mon 02 Jan 2023 02:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60471
IP address blocks: 185.30.144.0/22 maxlen: 22
185.30.144.0/23 maxlen: 24
185.30.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:81:a0:d9:d7:99:ef:6c:9b:6f:04:06:5c:05:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Jan 2 02:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18c2a7e2c3f99c5eb3f4c0a5a010a2aff5a5764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:7b:fe:87:6e:a2:41:b7:df:22:c8:f4:3d:
dc:84:07:cf:b7:9b:5a:2b:bb:5a:6e:4a:94:bd:3b:
23:b2:da:67:99:2d:53:8e:7d:a7:dd:6d:b7:8c:87:
a9:e3:1c:9d:4b:2c:5d:dc:f2:c2:bf:c7:7d:64:4d:
4f:b9:5c:9a:38:c7:8a:70:4b:e3:a4:3c:40:cf:d3:
54:12:28:5c:9a:b0:f1:4c:d9:38:d8:68:38:cd:0e:
03:c8:3d:af:e0:a4:0d:e3:26:96:6d:89:f0:1a:e7:
4d:e3:65:fd:db:6b:fa:23:c3:eb:ec:f1:21:04:be:
fd:48:82:ba:06:80:ee:d4:a2:c8:36:27:da:58:87:
0e:7c:fb:73:9d:ee:7e:42:dc:47:50:3d:4c:2b:9a:
0c:13:83:c5:b4:95:90:e3:f9:ff:9f:52:32:62:70:
50:f8:a4:f5:93:71:41:c4:ac:75:0f:8e:b0:97:8b:
0e:05:cd:9b:a3:66:2e:2c:28:9b:ba:5f:33:96:9b:
fe:71:c5:5e:00:a4:3f:11:83:a2:2a:f4:b3:3d:65:
f3:6d:d5:ba:c2:a6:0e:e6:99:1c:e5:32:43:0c:0b:
f8:3d:ab:15:a0:50:b8:f9:c1:f2:46:49:ac:40:6b:
1b:7d:8e:64:c8:28:cb:7d:27:6e:d9:71:cd:8d:ab:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C2:A7:E2:C3:F9:9C:5E:B3:F4:C0:A5:A0:10:A2:AF:F5:A5:76:4C
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/GMKn4sP5nF6z9MCloBCir_Wldkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.144.0/22
Signature Algorithm: sha256WithRSAEncryption
41:05:4f:3d:aa:5b:58:4b:fb:42:be:ce:e0:55:1f:ed:40:a6:
4f:f7:64:90:9d:80:e7:0e:8a:35:68:3b:d9:25:4a:ff:f3:8b:
0a:a5:7f:03:0a:4e:49:c8:96:1d:fa:9d:39:9e:51:72:43:9e:
75:9e:f0:a2:af:cb:33:79:d8:68:2f:ab:f2:bc:33:97:2a:e0:
2a:c5:4b:b4:64:72:22:55:0d:e3:38:26:c7:8b:4d:f8:b3:13:
87:aa:cc:7e:a2:76:cb:39:df:a5:cd:5d:5e:b8:46:46:9a:ca:
a7:fc:2e:a2:3c:03:76:2f:27:b2:10:84:f2:b8:6a:42:47:f0:
be:b0:b7:28:d5:06:a1:9d:8a:18:cc:97:c4:3b:0c:8d:61:7a:
57:2a:08:95:67:06:f8:d0:7f:eb:e5:76:71:97:6d:a4:8e:16:
0d:78:76:23:5f:69:be:a5:b4:89:75:50:5d:2b:23:91:dc:11:
90:8f:2a:3f:45:e2:4e:de:f8:4b:c7:57:24:bd:8f:67:82:b2:
e0:13:95:80:a8:28:f0:db:62:8c:51:cd:c8:4e:19:a6:f7:28:
2c:0c:77:67:7d:fe:18:8b:ca:a1:52:af:0a:08:2c:a6:d9:60:
4b:ed:f1:a4:0a:44:f8:a2:8e:78:73:d7:11:8d:92:91:66:5d:
d0:bd:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:46 2024 by rpki-client on console-fra.rpki-client.org