Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/GcZW9STKUEhxPkEUyQIFQh9DSpU.roa
File: GcZW9STKUEhxPkEUyQIFQh9DSpU.roa (raw, json)
Hash identifier: CSvsdE9ZJd88lNdjvzchgoCpk6SQRey0C+FxPCHYZrM=
Subject key identifier: 19:C6:56:F5:24:CA:50:48:71:3E:41:14:C9:02:05:42:1F:43:4A:95
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 0185720C8432816DF39B0C042978A3710521
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/GcZW9STKUEhxPkEUyQIFQh9DSpU.roa
Signing time: Mon 02 Jan 2023 10:35:00 +0000
ROA not before: Mon 02 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60451
IP address blocks: 185.135.93.0/24 maxlen: 24
185.135.94.0/24 maxlen: 24
185.135.92.0/24 maxlen: 24
185.135.92.0/22 maxlen: 22
185.135.95.0/24 maxlen: 24
185.30.182.0/24 maxlen: 24
185.30.180.0/24 maxlen: 24
185.30.183.0/24 maxlen: 24
185.30.180.0/22 maxlen: 22
185.30.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:84:32:81:6d:f3:9b:0c:04:29:78:a3:71:05:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Jan 2 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19c656f524ca5048713e4114c90205421f434a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:c6:f2:df:78:1c:f3:36:15:bf:f2:0f:e7:
cd:12:00:ac:9d:b3:0f:2f:ae:e4:5e:d8:df:08:2d:
12:a5:1b:c5:79:3b:21:e9:88:30:5e:e6:b4:68:ea:
b1:39:b3:67:8c:6e:80:0d:b7:53:26:51:b9:dd:eb:
b4:1c:f8:75:16:61:72:44:73:3f:9e:a5:2c:b8:99:
02:aa:ce:48:63:c7:8c:cd:31:dc:92:f7:4b:41:e8:
66:6d:0f:72:e2:31:65:3d:66:b0:2e:c2:d3:d1:c6:
8f:b8:ce:44:c3:0d:e9:17:77:a8:e5:ef:86:31:6c:
06:9e:59:b2:73:96:8e:dd:9a:dd:9f:67:45:de:7b:
ef:56:b3:c7:db:82:5a:34:cd:44:26:e2:d4:7b:40:
dd:17:be:0d:39:24:93:5d:7e:0c:45:c4:ec:a2:4b:
fb:65:93:51:b1:49:07:15:f3:70:c6:43:49:d3:3c:
b0:f0:c6:d8:89:c6:e4:8b:1e:b6:cb:b9:dd:00:ee:
fe:e3:c9:c3:0f:b4:34:27:31:6d:75:6d:d1:82:6d:
e4:9b:8a:fd:b8:56:e0:0e:85:0b:9c:21:5a:e5:f3:
81:88:85:86:55:67:c8:94:fd:11:52:a9:df:c5:fe:
0f:c7:40:63:93:83:a7:d6:ac:d3:de:16:6c:83:76:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C6:56:F5:24:CA:50:48:71:3E:41:14:C9:02:05:42:1F:43:4A:95
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/GcZW9STKUEhxPkEUyQIFQh9DSpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.180.0/22
185.135.92.0/22
Signature Algorithm: sha256WithRSAEncryption
70:3f:8e:4b:d4:c2:86:cb:da:87:46:ad:ee:38:a1:2d:6c:fb:
b3:66:72:a4:7d:b4:e7:b6:34:47:57:16:3d:0c:dd:4a:6f:61:
55:39:44:8d:99:e1:e7:80:91:b7:2d:a9:d1:13:27:73:40:92:
56:ca:6e:81:b5:8f:66:bb:91:19:cf:76:ef:88:14:e4:18:89:
d5:d8:df:cd:df:1b:a2:32:07:89:07:26:43:06:cc:d7:cd:ce:
87:78:5a:28:e3:9b:4e:2f:59:73:b7:33:60:b1:d2:14:52:d0:
56:cf:b7:d0:61:a4:ed:2f:0d:66:a3:19:b0:e7:f5:75:33:db:
42:36:74:07:df:1a:ec:78:bd:10:ee:a8:04:a6:d0:c6:61:30:
39:be:b6:8b:73:bb:a6:92:16:cd:12:83:a2:78:a4:ca:6d:6f:
50:d6:ce:d6:c8:51:ad:64:43:c3:f3:a6:72:55:b4:b2:c6:44:
97:db:a2:29:5d:98:79:3c:57:71:fd:59:cc:89:89:e4:35:3d:
ad:b3:a7:20:0f:5b:13:c2:0a:cd:03:ac:1c:66:e1:0f:07:1b:
2a:20:c5:73:5b:d1:94:b3:cc:63:16:9f:d9:9f:c6:c7:0a:ed:
19:80:dc:29:41:2a:0e:39:23:13:75:43:38:31:c6:fe:30:17:
d1:c9:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:22 2024 by rpki-client on console-fra.rpki-client.org