Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/GLtJkL-eMLGxAJjr7FQXRUsMTq4.roa
File: GLtJkL-eMLGxAJjr7FQXRUsMTq4.roa (raw, json)
Hash identifier: xI1Xd0bsPbQzBlY/gUiTkBDSIqHOccVAgvzS7CYkyF8=
Subject key identifier: 18:BB:49:90:BF:9E:30:B1:B1:00:98:EB:EC:54:17:45:4B:0C:4E:AE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5011AEA5343D81461D82703A736DC46
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/GLtJkL-eMLGxAJjr7FQXRUsMTq4.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.198.243.0/24 maxlen: 24
185.192.69.0/24 maxlen: 24
91.217.249.0/24 maxlen: 24
185.217.117.0/24 maxlen: 24
185.198.240.0/24 maxlen: 24
45.80.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 05:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1a:ea:53:43:d8:14:61:d8:27:03:a7:36:dc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18bb4990bf9e30b1b10098ebec5417454b0c4eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:1d:06:22:1a:9d:0b:3e:b9:95:1c:b3:a7:
c4:0d:37:53:29:7f:9a:a9:1c:ec:4d:72:45:88:78:
e8:b5:a8:eb:51:a3:d9:7a:02:2f:28:e3:44:cf:2e:
1b:d8:f0:c6:93:7d:90:45:88:25:aa:9c:13:4c:08:
5f:02:3b:1c:59:aa:1f:02:53:f2:0f:ed:c0:d2:98:
0f:47:79:b7:0f:6b:0d:4b:23:1e:e0:88:9f:a9:fe:
92:df:d8:e5:80:72:7b:26:11:a7:79:6c:26:07:30:
cb:3e:31:a9:0b:60:84:18:41:13:05:f2:b8:b7:97:
c0:c1:ed:db:28:20:d8:76:b0:e6:0c:7a:09:26:21:
4f:62:33:c0:b8:8c:d0:00:a3:9b:24:dc:1b:29:fd:
77:40:1f:4d:d4:7c:bb:18:ac:ad:25:91:7b:80:9f:
94:ac:ad:7e:81:41:a9:41:82:03:22:59:cd:ef:29:
0e:99:43:af:e5:ca:35:f4:34:37:21:51:fc:e2:ce:
f3:0e:df:d8:21:b5:12:89:74:6b:1e:e3:1e:04:15:
63:f6:cc:c0:8b:b1:cf:d6:07:12:ab:6e:ab:97:1d:
62:03:9d:5b:b6:be:e8:f6:87:6e:cf:16:15:ef:6c:
33:d2:d3:87:cd:3a:cf:51:73:2b:01:de:67:70:36:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BB:49:90:BF:9E:30:B1:B1:00:98:EB:EC:54:17:45:4B:0C:4E:AE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/GLtJkL-eMLGxAJjr7FQXRUsMTq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.157.0/24
91.217.249.0/24
185.192.69.0/24
185.198.240.0/24
185.198.243.0/24
185.217.117.0/24
Signature Algorithm: sha256WithRSAEncryption
91:dc:44:04:10:df:da:d1:a7:69:9a:ed:de:23:a9:c3:dc:46:
cc:5b:4a:3d:48:e4:0a:04:51:65:78:42:d0:7b:65:01:d0:3f:
09:21:58:a2:92:a0:17:cc:c9:67:e6:4f:35:99:45:7c:e2:2f:
30:27:b5:c1:21:b1:9f:97:20:4f:23:b3:90:f5:97:63:fb:46:
51:17:b8:68:1b:d0:2f:4d:81:12:f5:eb:55:7e:7f:95:b9:e9:
6f:c9:33:97:3a:66:84:12:db:cd:ea:53:1c:5a:f2:26:8c:b5:
b0:9a:97:dd:30:c2:b0:b9:47:f0:f5:24:f9:d7:65:03:f2:21:
9f:02:c2:47:f1:57:c5:80:b7:15:a7:ed:b0:03:c6:ae:47:dd:
91:34:31:0a:97:5a:35:21:2b:b3:8f:7f:50:29:69:6b:3f:0b:
46:a0:a3:76:b6:16:53:fb:f1:37:c8:be:36:73:a3:89:88:5b:
87:53:ab:96:24:17:a2:39:0f:44:14:03:7d:fe:5c:b4:ab:0c:
be:bf:64:0c:3c:7e:2e:f9:a5:9c:22:8c:75:22:f4:73:14:b0:
76:66:93:89:87:9f:8d:01:72:5b:ef:86:15:12:dd:8a:ff:58:
46:1e:ce:b8:b6:52:2e:f0:da:21:36:57:6f:f8:b3:69:44:2a:
66:c8:59:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 06:23:31 2024 by rpki-client on console-fra.rpki-client.org