Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/GBa2ZVeOrncTAKU-VGhjAHDBZzc.roa
File: GBa2ZVeOrncTAKU-VGhjAHDBZzc.roa (raw, json)
Hash identifier: fDk9jALwGGe/RUGXBh6YEfihfisibviaf/0UTP+Gwm8=
Subject key identifier: 18:16:B6:65:57:8E:AE:77:13:00:A5:3E:54:68:63:00:70:C1:67:37
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 018570153FA097C854075A2FB5696EC5B5BF
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/GBa2ZVeOrncTAKU-VGhjAHDBZzc.roa
Signing time: Mon 02 Jan 2023 01:25:18 +0000
ROA not before: Mon 02 Jan 2023 01:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24971
IP address blocks: 188.215.18.0/23 maxlen: 23
188.213.234.0/23 maxlen: 23
185.25.184.0/22 maxlen: 22
2a00:8220::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:3f:a0:97:c8:54:07:5a:2f:b5:69:6e:c5:b5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Jan 2 01:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1816b665578eae771300a53e5468630070c16737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:c6:dc:fd:c5:eb:42:d2:b9:d7:bd:1e:10:
15:d4:fb:f8:22:8c:32:9c:a8:49:7c:1b:53:c4:d9:
14:05:87:eb:de:28:59:f1:9b:be:33:29:42:3d:51:
ce:6a:6a:74:90:80:b4:84:0f:02:f4:de:4b:e1:a1:
aa:18:2f:4f:6d:e3:29:95:9b:55:f2:47:4c:01:df:
9c:8a:0a:67:34:f2:c9:a4:57:0e:8d:3d:21:45:5a:
27:7e:32:5d:52:f8:b7:a6:9e:db:89:df:f3:b0:52:
38:c7:12:a2:29:31:3a:4c:d8:44:81:f4:9e:1c:01:
f7:d2:59:99:ba:b8:d5:16:6a:61:51:c7:db:ef:b4:
ec:70:2a:72:b3:57:58:bc:c3:fc:05:ce:29:c1:ec:
3d:71:90:b0:e3:1e:07:be:79:f9:ec:ac:f0:71:10:
ab:74:3c:ba:d2:8f:47:00:38:00:00:75:07:02:25:
b3:2e:2e:b5:c6:8c:88:40:db:66:59:06:c3:03:64:
58:7b:18:d2:80:16:1d:be:8c:bb:16:cc:91:cc:64:
48:5f:86:e5:a8:f8:e5:ee:4e:da:a8:be:67:47:2b:
86:9e:12:86:08:af:40:70:a2:a3:f0:01:12:a5:65:
e8:41:94:29:7d:3d:45:67:7e:ad:de:62:1d:6b:10:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:16:B6:65:57:8E:AE:77:13:00:A5:3E:54:68:63:00:70:C1:67:37
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/GBa2ZVeOrncTAKU-VGhjAHDBZzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.184.0/22
188.213.234.0/23
188.215.18.0/23
IPv6:
2a00:8220::/32
Signature Algorithm: sha256WithRSAEncryption
66:3e:67:11:25:91:53:66:6d:b1:f4:33:29:2e:7b:c3:45:aa:
19:27:33:ff:67:77:14:30:40:21:78:c5:38:29:87:85:45:8d:
9c:92:9c:26:3a:7c:44:15:52:3c:c6:f7:09:fa:7d:e6:04:21:
0c:d4:e3:40:19:b0:75:2e:34:55:c2:ee:0b:91:41:57:c6:2b:
5f:8b:d2:4a:a7:d1:7e:d6:26:58:df:94:8d:ff:89:f0:aa:59:
bc:e7:76:eb:d0:f0:fc:f2:e9:1f:9f:60:f1:0f:34:b2:96:c4:
05:0d:28:83:49:2a:ac:c9:96:c2:02:80:4c:47:9d:23:73:32:
3c:32:4c:ba:1b:00:5a:fd:6e:e5:05:24:51:3b:f4:e5:f2:9d:
fb:a3:58:bb:b6:86:33:fd:9e:f6:22:fd:0c:8f:25:75:87:09:
7e:92:26:f0:e9:a2:10:d7:d2:8c:2a:9f:36:43:23:f3:a8:c6:
ae:56:5a:92:8b:d0:33:a6:d4:c4:fc:fc:42:00:85:5d:41:7d:
d2:a7:16:d9:3d:03:0e:62:d8:5d:12:f1:89:b8:72:7b:e4:e3:
58:a5:96:c1:f9:24:c7:57:29:5c:10:e9:bc:6f:1d:99:34:ae:
a8:7c:dd:08:2c:3d:31:95:f0:0e:6c:c7:6a:8d:69:bb:40:36:
40:29:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:22 2024 by rpki-client on console-ams.rpki-client.org