Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gsrgun_ZIfDQvwddeXMYGN1Da9o.roa
File: gsrgun_ZIfDQvwddeXMYGN1Da9o.roa (raw, json)
Hash identifier: Qh1EOQdkh6lANE6102LttcLj4rtBrNzrr8TcwvaCVZo=
Subject key identifier: 82:CA:E0:BA:7F:D9:21:F0:D0:BF:07:5D:79:73:18:18:DD:43:6B:DA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0190791C6BE2BBB5D697A96E9B9DE8E4CBA6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gsrgun_ZIfDQvwddeXMYGN1Da9o.roa
Signing time: Wed 03 Jul 2024 15:00:24 +0000
ROA not before: Wed 03 Jul 2024 15:00:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 45.8.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 16:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:1c:6b:e2:bb:b5:d6:97:a9:6e:9b:9d:e8:e4:cb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 3 15:00:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82cae0ba7fd921f0d0bf075d79731818dd436bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:dd:fd:9e:a6:c1:10:99:1e:91:89:7f:97:
6e:3d:d9:32:78:90:ff:d3:e4:bc:9a:64:14:f2:60:
db:80:2f:b3:fd:02:30:b8:6b:c3:1d:c1:02:84:f7:
a9:60:a8:d3:23:a9:75:33:60:ba:a8:60:28:ab:08:
06:af:d3:ab:b3:37:d1:82:68:a0:c6:60:dd:38:43:
70:0a:72:d1:1b:75:7b:7d:b2:a2:fc:61:a8:6f:56:
8e:e8:c2:c2:cf:cd:d7:8c:27:df:84:c3:6b:80:94:
1a:c4:d1:3d:05:10:56:80:49:31:dc:d8:0a:ca:10:
9a:58:9a:ed:3c:e1:e5:6a:d2:23:19:a3:d1:bc:85:
7e:2c:26:91:7d:57:6e:2e:34:b5:8d:95:ac:38:b5:
fa:a3:0c:c8:ed:d5:84:71:af:69:c9:a9:db:62:0d:
01:0d:cd:9f:d8:45:29:2d:4e:69:0e:df:08:3e:4a:
8d:83:ec:50:bd:8a:c9:f9:ad:93:0e:5b:e6:2f:16:
89:6b:cc:cc:83:62:3d:99:10:20:1d:a1:bb:99:bf:
fe:84:e3:0c:ab:a2:32:7e:fb:5b:a4:5d:c3:28:02:
23:e0:f3:dc:6d:87:46:7d:42:c8:14:56:a0:d9:5b:
23:bd:ba:5b:6a:1f:21:b6:03:8a:34:b0:6c:2c:7f:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CA:E0:BA:7F:D9:21:F0:D0:BF:07:5D:79:73:18:18:DD:43:6B:DA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gsrgun_ZIfDQvwddeXMYGN1Da9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f7:2c:8c:15:3d:df:60:64:ce:c9:20:6b:ef:45:ab:f3:7a:
06:b0:b7:b0:8c:5c:dc:a4:e3:df:c2:14:76:4e:d8:53:29:90:
7b:43:3f:75:2d:e3:45:51:a5:eb:10:16:04:01:d3:ff:1f:43:
33:84:b4:db:9e:9b:4d:55:e1:6c:79:a1:c8:86:c0:e9:52:53:
4c:b6:6b:2f:03:86:0f:d8:e6:91:32:bd:11:ab:88:3d:7f:78:
4a:6a:ea:10:2c:fe:8f:9c:99:fe:d8:15:d9:7e:f9:29:6b:db:
d0:b6:08:c7:ec:20:52:c1:b2:60:dd:ca:b2:69:fa:2f:7b:fe:
3c:e5:dd:66:01:e6:42:9b:33:32:5e:53:35:c1:f0:98:4e:d3:
3e:9d:70:a2:23:d4:4b:14:58:21:2a:33:8e:a3:c7:27:d0:20:
93:21:92:67:fa:e4:48:7f:e0:ee:f8:db:40:55:96:b8:5e:0a:
5b:22:32:1e:ad:eb:f9:f5:4c:08:a4:db:98:2b:c9:11:86:82:
10:05:05:b9:79:4c:5c:ab:4d:bb:6a:62:db:27:19:08:59:f1:
0f:88:ff:71:d9:25:dd:33:0e:48:95:02:1f:80:23:ba:6e:1b:
ab:9d:6c:ff:3e:ec:5d:7e:ce:b7:74:8a:52:2c:43:93:c2:fb:
0a:64:90:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:59 2025 by rpki-client