Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/gfSShThHPNoBDyHq5J-xGbv9zEw.roa
File: gfSShThHPNoBDyHq5J-xGbv9zEw.roa (raw, json)
Hash identifier: 5gsyS0QcYV+5tJa/CPgIrv2yQcEaahjGzVC3Ujq5Re4=
Subject key identifier: 81:F4:92:85:38:47:3C:DA:01:0F:21:EA:E4:9F:B1:19:BB:FD:CC:4C
Certificate issuer: /CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Certificate serial: 018572559B7DB1002B82C9E06CDA27C2DBD7
Authority key identifier: 9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/gfSShThHPNoBDyHq5J-xGbv9zEw.roa
Signing time: Mon 02 Jan 2023 11:54:51 +0000
ROA not before: Mon 02 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34444
IP address blocks: 185.10.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:9b:7d:b1:00:2b:82:c9:e0:6c:da:27:c2:db:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Validity
Not Before: Jan 2 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f4928538473cda010f21eae49fb119bbfdcc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:fd:28:2c:88:ef:08:4b:74:25:6d:69:79:
b6:23:fa:27:e3:b8:d4:1b:7b:c8:c6:6a:92:2b:6b:
f5:8d:63:86:c2:79:7d:d2:8a:07:24:6d:77:a2:2f:
95:0e:0f:81:c3:55:a0:fd:d6:79:69:a7:ac:d5:d2:
b1:75:ff:1b:65:40:05:c4:36:65:2d:87:a6:80:f8:
9e:61:3b:84:2e:1a:e7:47:0b:59:6e:b0:05:c7:98:
e8:ad:6e:59:b2:16:87:54:5a:02:a5:1c:d9:35:7f:
7c:44:ac:56:64:30:15:78:1e:c8:03:ed:41:20:69:
b0:08:c9:3b:2a:f4:09:7f:d0:78:44:e9:db:48:41:
37:43:b7:4f:e6:9b:1f:20:bd:5f:88:84:46:d4:ae:
b7:db:65:25:bc:a2:00:26:97:40:fb:5d:98:d8:2f:
92:c0:32:da:88:75:ed:5d:34:2d:04:7b:db:a6:f5:
57:9b:b3:91:dd:0b:f4:e3:71:5a:c1:0d:19:36:0d:
4f:71:a5:71:89:13:29:45:88:e5:3c:38:24:e9:1d:
59:c9:3e:67:c6:a9:4b:f3:71:92:85:34:e3:f0:c3:
54:5e:ac:98:28:95:30:f0:8a:3f:b2:e3:fb:19:43:
28:4e:c5:20:c6:5e:76:b3:7a:b3:ad:87:44:0e:82:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F4:92:85:38:47:3C:DA:01:0F:21:EA:E4:9F:B1:19:BB:FD:CC:4C
X509v3 Authority Key Identifier:
keyid:9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/gfSShThHPNoBDyHq5J-xGbv9zEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.241.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c4:df:31:b8:ec:9c:9c:2a:ee:46:60:59:2f:41:df:84:28:
f8:23:27:06:95:d8:fd:26:e8:11:eb:68:75:5e:fa:56:ff:07:
5f:57:b0:cf:ac:94:0b:b3:78:13:05:2b:4e:fd:03:17:2f:21:
f2:5c:ec:12:55:f3:c0:51:3e:7f:a6:c6:2b:48:97:55:97:fa:
fd:2e:11:c1:37:c4:1c:a6:22:87:04:7a:bf:9f:ed:9c:16:4f:
26:32:d6:55:34:a7:5d:eb:80:14:56:bc:8e:89:85:db:1c:5f:
85:7f:11:fa:0e:03:89:d4:6b:9c:2a:23:80:21:4c:61:08:9b:
48:39:07:5c:c5:32:fd:98:d2:84:b2:52:16:08:f1:b5:71:89:
02:74:bb:ba:98:21:3d:52:39:0e:17:0a:8a:43:37:40:90:38:
ea:69:a2:9c:d0:9c:da:08:1b:e4:bd:c7:6d:dc:b2:ea:ec:69:
b9:ce:6d:71:34:e1:87:13:80:e6:f6:24:32:22:09:aa:5c:94:
9c:72:b3:02:54:cc:00:08:57:fe:9d:d7:03:fc:c3:35:73:29:
f3:70:02:52:07:a8:eb:c2:cd:61:be:92:fe:8e:fe:57:65:c9:
b3:c2:31:ce:de:d0:cd:c0:65:4d:e3:03:85:c2:f3:a7:fc:5f:
0d:43:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:03 2024 by rpki-client on console-ams.rpki-client.org