Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/_GCUOU04LXFpuGnt3r3WXWN_rmU.roa
File: _GCUOU04LXFpuGnt3r3WXWN_rmU.roa (raw, json)
Hash identifier: ffjjO3mqKjvf5OSljjzSksH0Y0hfyTlR8EBldWw04ls=
Subject key identifier: FC:60:94:39:4D:38:2D:71:69:B8:69:ED:DE:BD:D6:5D:63:7F:AE:65
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0185D5239683A37194CD32171481AA3326AE
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/_GCUOU04LXFpuGnt3r3WXWN_rmU.roa
Signing time: Sat 21 Jan 2023 16:22:37 +0000
ROA not before: Sat 21 Jan 2023 16:22:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.189.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 18:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d5:23:96:83:a3:71:94:cd:32:17:14:81:aa:33:26:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 21 16:22:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc6094394d382d7169b869eddebdd65d637fae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:8a:9e:96:ad:61:fc:fe:6a:69:1d:48:19:
47:a9:a6:2e:e3:d2:5e:4f:d3:61:23:fa:85:42:6e:
df:e6:08:40:30:d7:e8:bd:ef:cb:9b:56:c8:56:fd:
3c:d0:10:f0:50:e4:44:ea:8c:5d:ee:67:5a:b4:c6:
ef:ab:17:bd:f6:58:8a:fe:b7:62:84:f2:09:85:e6:
ab:99:7d:4e:0e:cc:b1:4f:12:8b:cf:83:97:14:86:
01:a0:7b:cc:9b:14:a8:d0:45:45:16:fe:40:fa:7f:
96:9e:cd:21:1c:6d:00:fc:78:27:6a:71:45:7e:4d:
93:3b:ae:81:b6:de:fd:88:72:82:ca:5d:da:09:42:
5f:c6:12:e4:11:75:b7:91:39:5a:d3:4a:0c:12:50:
f3:86:82:9e:c6:e2:70:9e:a6:54:91:f3:57:4f:3a:
cf:d6:ed:01:e1:ae:dd:b5:20:8b:bd:15:2d:88:39:
6f:d2:2c:19:01:0f:ea:83:c4:de:a6:85:07:18:54:
a1:05:fa:b0:7b:43:36:df:01:95:98:32:42:ca:f7:
39:65:95:c3:4c:44:13:5b:72:ae:d0:60:34:e5:16:
ee:f9:61:48:02:33:66:b9:2d:bb:bd:75:6e:47:0e:
72:68:0a:1a:10:5b:e1:21:ab:7e:74:a9:75:f0:9e:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:60:94:39:4D:38:2D:71:69:B8:69:ED:DE:BD:D6:5D:63:7F:AE:65
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/_GCUOU04LXFpuGnt3r3WXWN_rmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.35.0/24
Signature Algorithm: sha256WithRSAEncryption
68:38:70:77:02:c0:47:70:be:4e:6a:ae:0c:29:74:09:25:9d:
8d:2a:1c:a0:a9:29:6d:aa:63:68:8e:2d:86:e8:5c:e4:db:d1:
dc:b7:b2:26:4c:dc:da:37:32:f2:e5:23:44:eb:56:3f:65:e5:
61:53:b9:b0:3e:51:1f:e8:48:71:f8:0c:c4:a7:7b:44:54:30:
79:fa:de:ac:f9:03:1b:7f:c0:6b:b8:7d:73:94:1a:cb:89:ea:
e4:86:25:ce:d0:65:21:8f:17:88:ef:62:43:63:51:4c:8b:ca:
0b:95:34:10:14:41:ac:4b:23:8b:13:16:2d:d8:ec:71:e1:17:
80:7f:58:3f:6d:55:04:6e:ac:51:6b:6d:b0:81:dd:9a:0a:c1:
cf:af:e7:e3:50:79:38:9b:31:a7:90:f3:f5:a2:ce:34:30:d6:
42:82:9b:8c:12:1d:00:b5:ff:e8:64:48:5c:6d:84:ea:a2:91:
94:bb:36:0b:03:7f:1c:8e:e3:6d:09:92:13:4b:c6:71:4b:96:
7d:18:37:09:49:8f:80:a8:fd:d8:73:a0:47:5a:30:6b:08:e3:
df:6d:70:3e:55:d9:d4:28:15:cf:77:b6:0d:6e:9d:93:58:ea:
a0:45:47:8c:d5:05:46:43:c3:8a:9f:12:91:54:da:38:a3:db:
ca:66:c6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org