Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/gEqDHIUqxhop3-7JgZ_Ih9R1qN4.roa
File: gEqDHIUqxhop3-7JgZ_Ih9R1qN4.roa (raw, json)
Hash identifier: D6E33LmQ3D34yQWreLjlfptYO5iMzua/+TVxWJbwais=
Subject key identifier: 80:4A:83:1C:85:2A:C6:1A:29:DF:EE:C9:81:9F:C8:87:D4:75:A8:DE
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 018570FBB829155EEE716DD19559FD868294
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/gEqDHIUqxhop3-7JgZ_Ih9R1qN4.roa
Signing time: Mon 02 Jan 2023 05:37:02 +0000
ROA not before: Mon 02 Jan 2023 05:37:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204798
IP address blocks: 185.239.178.0/24 maxlen: 24
185.239.177.0/24 maxlen: 24
185.239.179.0/24 maxlen: 24
185.239.176.0/24 maxlen: 24
2a0f:c9c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:b8:29:15:5e:ee:71:6d:d1:95:59:fd:86:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 2 05:37:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804a831c852ac61a29dfeec9819fc887d475a8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:99:f2:0f:39:55:46:3b:4f:64:74:4a:f6:
4c:f2:63:53:ed:22:8e:c6:db:28:bf:9a:6a:48:2c:
b3:86:a1:0b:be:85:dd:3a:1c:4b:2b:9b:c2:1e:0c:
25:94:1f:0e:cc:8a:f1:c6:4f:1b:ac:52:d4:87:fb:
7d:6a:70:ca:92:a2:1b:1c:e6:7d:44:84:3f:70:50:
70:e7:6b:46:97:83:2a:d1:d6:31:4e:48:1b:b5:f1:
c3:85:fc:49:f5:e2:d2:ba:1e:22:86:87:7f:9b:f9:
b1:c3:9e:ef:28:97:ed:8d:28:cc:ac:05:cf:57:fa:
0f:bc:1e:03:b0:a3:58:4d:5b:af:24:c4:f1:88:43:
07:37:0f:41:13:b0:11:04:2f:15:28:51:3b:6a:44:
e2:80:d1:c6:70:3d:12:40:ba:6b:80:f1:78:6a:9b:
6f:1a:d1:e6:87:dd:42:68:99:be:dc:56:dd:fb:fe:
12:f7:95:64:68:bc:9c:3f:06:ec:f4:1e:4a:c3:4a:
f5:91:1a:2d:a5:7e:d7:9d:35:b9:bd:e2:73:10:1f:
ec:84:28:80:8e:b5:44:0a:7e:89:05:39:0d:96:8b:
86:0b:ef:d8:99:ca:94:b9:58:f8:c9:8a:ee:16:97:
ea:19:a5:d5:44:cf:6d:9c:81:6b:a5:48:2c:90:2a:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4A:83:1C:85:2A:C6:1A:29:DF:EE:C9:81:9F:C8:87:D4:75:A8:DE
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/gEqDHIUqxhop3-7JgZ_Ih9R1qN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.176.0/22
IPv6:
2a0f:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:ff:80:c1:5f:23:c7:6f:7d:41:d0:a2:b3:c2:e6:c9:d5:f5:
9a:30:0b:da:b3:0a:ce:b9:38:ff:93:df:aa:64:35:8d:a4:f3:
00:f5:e4:bd:1e:ec:a8:e0:d1:f5:76:7d:49:2e:1f:70:5e:f3:
eb:ff:46:53:70:89:a1:70:8a:c6:f9:c9:c7:55:c3:0b:6d:63:
9f:37:b7:c4:3b:75:d9:58:bd:13:b0:fd:5c:e1:43:c9:64:95:
6e:56:e8:3a:87:84:d1:03:1f:1d:59:d2:c3:a3:b5:af:25:ac:
41:4c:ed:b6:c1:e5:93:33:07:6e:98:bd:d8:33:d2:47:dd:c3:
47:aa:db:bc:46:2f:5a:23:e5:8d:b4:11:03:9b:ce:ba:50:e7:
2f:82:38:0b:33:9e:fb:b9:48:11:dc:7a:60:cb:af:27:94:7d:
fd:a8:a8:70:3e:02:91:0b:16:87:07:dc:91:7b:6a:94:51:27:
37:82:46:6e:de:01:2e:b2:14:40:88:fc:0e:8a:28:0d:b1:a0:
db:1a:81:52:9a:35:7a:92:6c:fb:54:dd:57:7b:20:99:76:b8:
f7:9b:8c:6a:a7:cc:32:60:5b:7f:cd:f0:78:40:bd:4c:75:29:
4b:60:7f:5d:40:4f:76:89:38:98:36:3a:d2:91:72:6e:26:5f:
08:bd:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:31 2024 by rpki-client on console-fra.rpki-client.org