Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gTbx1rdooDB23_3WlAk4orGjSdM.roa
File: gTbx1rdooDB23_3WlAk4orGjSdM.roa (raw, json)
Hash identifier: 7ZxAG995bxT6CVA9EmYAwxXlHiZbA9oVv8CZSUtCtWY=
Subject key identifier: 81:36:F1:D6:B7:68:A0:30:76:DF:FD:D6:94:09:38:A2:B1:A3:49:D3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185EA6554847A46B96885125F1AAE36522A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gTbx1rdooDB23_3WlAk4orGjSdM.roa
Signing time: Wed 25 Jan 2023 19:26:27 +0000
ROA not before: Wed 25 Jan 2023 19:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.255.36.0/24 maxlen: 24
185.255.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jan 2023 11:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:65:54:84:7a:46:b9:68:85:12:5f:1a:ae:36:52:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 25 19:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8136f1d6b768a03076dffdd6940938a2b1a349d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:37:ca:b8:47:23:4d:dc:11:66:86:85:fb:
ad:69:f1:14:e8:6e:c8:fc:c3:ab:c3:32:33:23:c7:
4d:53:fa:d5:94:fc:08:7a:05:c0:9a:3b:47:f6:48:
76:5f:07:ea:fb:e1:d4:c3:b9:7f:42:dc:4e:5b:df:
13:65:d5:83:8a:07:44:97:09:d9:55:3b:a1:09:82:
02:cc:ec:ac:06:6a:6d:e2:10:1c:7b:1d:85:b5:e6:
43:01:72:a3:0d:8a:cf:89:fb:db:7d:60:7d:a9:04:
36:76:08:60:bf:66:d3:c9:13:8a:a5:2d:6c:d8:5c:
b3:86:1a:be:c7:44:87:c0:c1:d1:95:20:e4:64:11:
0b:35:70:e1:42:b5:b3:81:34:ff:77:90:63:cf:26:
98:79:a5:37:a4:06:dc:61:3a:6d:6b:a4:50:58:78:
f4:3e:64:25:4f:96:1c:97:96:8e:fd:71:ca:8b:83:
41:ab:23:ac:38:8d:24:a4:1f:ea:b9:72:c3:0b:14:
44:70:ad:b0:40:b5:64:2f:78:60:78:24:97:e0:1f:
cf:74:db:3b:54:a1:92:a8:d1:cb:68:65:b1:c3:ef:
36:5c:cb:ca:52:8a:13:06:34:b2:5e:de:2a:4b:6a:
6e:e3:3d:de:78:fd:a1:d6:65:bc:10:6d:33:ba:28:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:36:F1:D6:B7:68:A0:30:76:DF:FD:D6:94:09:38:A2:B1:A3:49:D3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gTbx1rdooDB23_3WlAk4orGjSdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.36.0/24
185.255.39.0/24
Signature Algorithm: sha256WithRSAEncryption
85:be:77:46:d4:a3:34:a3:fa:09:5c:ed:ec:f1:26:84:46:95:
f1:6a:0e:f0:c1:7b:34:12:0e:89:84:d6:4c:5e:f9:52:3d:03:
e0:57:e0:99:c9:d3:ee:f6:5d:52:ff:4d:e7:82:d5:8e:dd:0f:
c7:03:5c:5c:aa:65:06:39:fc:5d:18:45:d6:1a:ad:6d:2f:99:
c9:99:a4:da:90:63:ba:a9:9d:24:eb:e3:96:3c:d0:bf:63:90:
d3:7a:e0:4d:74:11:d1:48:87:f0:18:46:9d:28:a9:07:52:9c:
3e:f4:58:a3:86:38:f1:f3:e5:ac:95:d4:f6:36:14:fa:e8:f4:
64:70:83:16:5a:83:19:21:53:9a:24:6d:bd:db:6a:76:f3:43:
87:c4:87:10:5e:08:c0:cd:47:e2:a9:97:56:4c:5b:ba:ef:00:
92:1d:4f:4a:3f:55:79:bf:ae:3a:d5:44:f7:6f:66:92:af:53:
ea:ec:55:5c:9b:ec:b1:2f:53:34:83:18:03:6a:9c:84:c3:72:
f2:03:07:a0:1d:1a:30:27:63:4a:25:e9:85:dc:eb:17:d1:fc:
c2:26:66:d2:fa:cc:2f:4f:80:57:a2:e9:7d:73:cc:dd:60:97:
39:17:01:3a:84:03:7b:64:98:a5:73:c5:17:c2:b6:33:60:99:
15:e6:36:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:47 2024 by rpki-client on console-fra.rpki-client.org