Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/GW4_9yOO8mOvX4ZWk9-cYkngTjM.roa
File: GW4_9yOO8mOvX4ZWk9-cYkngTjM.roa (raw, json)
Hash identifier: 1pH/+Kj5rdnzFAtziIfA22zt1UHfexeBbs7Rz3EeRXA=
Subject key identifier: 19:6E:3F:F7:23:8E:F2:63:AF:5F:86:56:93:DF:9C:62:49:E0:4E:33
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 0186EEB864653FC87DB21C7E46AC68D4E27B
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/GW4_9yOO8mOvX4ZWk9-cYkngTjM.roa
Signing time: Fri 17 Mar 2023 08:38:27 +0000
ROA not before: Fri 17 Mar 2023 08:38:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43791
IP address blocks: 185.212.221.0/24 maxlen: 24
185.212.220.0/24 maxlen: 24
185.212.223.0/24 maxlen: 24
185.212.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:b8:64:65:3f:c8:7d:b2:1c:7e:46:ac:68:d4:e2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Mar 17 08:38:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=196e3ff7238ef263af5f865693df9c6249e04e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:e7:48:9e:c7:11:db:17:bb:c0:90:92:01:
29:6a:bb:36:37:05:49:08:9e:e9:f3:9c:20:c8:6b:
32:24:bf:f1:f3:85:20:2b:c3:c9:c1:78:34:05:45:
b1:c8:18:4f:ff:9e:5e:b3:65:0f:f7:17:ef:d2:bc:
71:38:c2:89:cc:08:4d:49:16:95:51:0b:b3:14:09:
e4:d5:89:51:c6:1e:7e:3c:2a:1d:c5:b8:a9:ec:67:
9f:f5:7c:5d:56:25:75:35:b1:5c:0e:d8:7f:03:dd:
dc:33:4c:ff:cb:07:47:fe:aa:21:8d:3f:3e:c8:7b:
70:77:0c:fd:47:76:54:50:2b:9d:90:8a:fa:b3:3d:
dc:8f:37:e4:63:a2:6b:b3:5f:16:35:32:de:80:f3:
98:d1:b6:07:22:0d:d7:09:13:6e:11:6d:59:0a:58:
f7:6e:d0:ca:2e:52:b3:04:0a:c1:5f:2d:5a:ad:da:
70:fb:9c:4e:a5:1c:a2:31:30:03:b8:ee:4a:9e:68:
bd:34:9f:ae:cd:eb:f4:c6:3c:83:81:86:e4:b7:a6:
cf:97:52:b0:08:3c:0c:c8:80:78:bd:1d:86:4b:f4:
5f:68:95:79:05:c4:5f:19:04:69:7d:3e:d9:ea:79:
7e:0d:ba:e7:8b:37:ec:6d:ef:6e:bf:61:45:a9:c9:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:3F:F7:23:8E:F2:63:AF:5F:86:56:93:DF:9C:62:49:E0:4E:33
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/GW4_9yOO8mOvX4ZWk9-cYkngTjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:6e:51:62:74:a8:7f:17:bc:73:9a:49:60:9f:66:e9:5c:80:
13:05:ef:fc:ef:c4:02:b1:24:ba:86:ab:bf:e2:41:40:91:45:
e3:bc:77:63:4b:1b:20:0f:27:bd:b9:26:5c:20:49:4e:c4:43:
94:03:87:6f:f1:68:f0:a9:a1:aa:0c:76:5b:05:c4:c4:f6:4c:
8c:e2:92:ac:b6:ca:5e:62:5c:b5:a2:53:e7:3d:8e:c1:0e:81:
50:67:63:bf:84:6c:93:92:94:bf:55:31:64:cf:bb:df:a2:d7:
af:8e:54:e3:37:07:fe:bf:e8:8a:4d:9e:70:63:93:a0:e0:01:
7d:d9:ef:00:72:7f:32:a2:b2:96:b8:09:59:40:b1:eb:8d:e8:
f3:ee:25:e8:16:5e:59:13:97:b9:db:a6:24:63:ac:dc:0c:78:
65:54:86:b3:54:7a:22:a5:69:54:00:43:3a:f1:25:62:9b:26:
e5:43:d3:0a:95:d8:53:44:e8:52:13:30:6a:4a:a6:d1:81:c1:
b9:16:55:f2:7a:9e:fb:22:d4:e0:83:54:e1:3e:1f:d6:a1:8d:
4e:95:d8:bb:8c:c2:d0:4f:7c:32:50:1c:1b:3f:29:6c:20:ec:
08:41:48:a7:33:13:c3:52:f7:a1:44:e9:d8:2f:ab:78:90:69:
82:8f:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:06 2024 by rpki-client on console-fra.rpki-client.org