Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Gf9VrfRfSN_w3AMGwVdQXGk6HtA.roa
File: Gf9VrfRfSN_w3AMGwVdQXGk6HtA.roa (raw, json)
Hash identifier: 7MuzJ6xAgDCpNVNhQtI+JzhSOn9JUY1fr7Md+YfUgnU=
Subject key identifier: 19:FF:55:AD:F4:5F:48:DF:F0:DC:03:06:C1:57:50:5C:69:3A:1E:D0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185710321B7DE6ED13A90D58A318E94BA9A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Gf9VrfRfSN_w3AMGwVdQXGk6HtA.roa
Signing time: Mon 02 Jan 2023 05:45:08 +0000
ROA not before: Mon 02 Jan 2023 05:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 185.121.122.0/23 maxlen: 24
185.121.121.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
220.158.196.0/22 maxlen: 24
45.144.226.0/24 maxlen: 24
62.197.138.0/23 maxlen: 24
193.239.164.0/23 maxlen: 24
62.197.137.0/24 maxlen: 24
62.197.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:21:b7:de:6e:d1:3a:90:d5:8a:31:8e:94:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ff55adf45f48dff0dc0306c157505c693a1ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:6c:96:30:df:b2:86:1d:1a:37:c9:8f:09:
f6:cc:03:ea:25:3b:b3:6b:97:67:3b:30:1b:15:ea:
11:28:e8:99:2d:4b:b6:0d:80:df:d8:07:95:99:47:
37:78:81:6f:f7:fa:f2:c0:40:0f:1e:c3:22:12:a4:
ff:9d:d5:4f:41:49:a6:c7:a6:a1:21:85:fa:68:76:
48:ba:3a:d3:bc:f4:fe:98:3c:22:15:c4:f8:5f:cf:
d2:68:62:a2:46:37:9b:66:29:b9:b1:50:22:82:fe:
62:56:0b:0b:dd:ef:b1:5c:4c:b2:25:f2:26:1f:9b:
74:8f:19:1f:d1:f7:09:ae:6a:50:46:f7:dd:14:30:
ff:96:93:c3:00:89:e3:ee:43:47:19:d2:13:35:ef:
80:d1:cb:0f:7e:e3:cd:f4:58:08:8e:2d:46:64:d2:
c0:d3:05:a3:c3:51:6a:0e:d6:33:18:94:17:0e:46:
82:73:27:63:44:27:e0:7c:0c:15:2d:bc:e2:56:20:
30:cb:01:6b:f4:1e:9c:c8:70:4e:77:9f:f0:4f:2c:
36:36:3d:e2:eb:e5:d2:f1:5c:5a:8b:e6:6e:d4:0e:
d1:86:24:c9:74:16:3e:1b:7e:40:01:24:da:1b:2c:
67:0b:29:08:5f:4a:04:10:9a:9e:34:1b:f6:90:29:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:55:AD:F4:5F:48:DF:F0:DC:03:06:C1:57:50:5C:69:3A:1E:D0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Gf9VrfRfSN_w3AMGwVdQXGk6HtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.226.0/24
62.197.137.0-62.197.143.255
185.121.121.0-185.121.123.255
185.239.243.0/24
193.239.164.0/23
220.158.196.0/22
Signature Algorithm: sha256WithRSAEncryption
34:6a:c7:0d:ed:ec:2b:f5:8c:c7:ef:1a:f4:a2:27:e5:11:72:
d5:0c:02:ec:a6:10:fe:98:48:37:09:36:c3:5f:6a:b0:8e:68:
18:4e:71:84:ba:52:26:4c:7f:91:1c:04:d1:e2:28:84:26:e2:
c0:6c:2d:3b:ed:af:64:81:f1:df:4d:5c:27:f8:85:f4:27:73:
27:a7:4e:08:5e:4a:9e:ed:dc:92:22:6f:f9:29:88:03:2d:c8:
eb:53:b5:bd:0f:4a:f6:8d:fa:f2:33:8a:81:80:74:0d:11:6d:
1d:f7:49:65:bc:62:6c:a7:c3:cd:62:4e:12:1a:2a:14:af:d7:
0a:44:68:e3:88:d5:8a:41:33:b1:7d:04:31:8c:a4:1c:15:54:
15:50:21:c1:58:d8:72:35:77:3f:f9:89:6a:a0:9c:f3:cd:64:
c4:bd:ab:6c:e7:fe:55:4b:5e:47:90:a9:8e:da:d9:6d:20:e1:
7e:a0:a1:03:fb:d7:4a:ff:74:9a:6e:98:50:5d:7e:95:f8:c1:
a4:70:39:92:11:af:5f:a9:7e:53:69:bf:c2:33:bf:67:13:d1:
b4:a3:09:67:b0:c0:ff:97:99:e9:c9:2a:a2:fd:5e:dd:5b:8d:
d4:99:9b:01:29:e8:53:9b:a4:3c:59:bb:84:e5:e0:f5:7e:c2:
c1:a2:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org