Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/gjvVG-GGHpvETDZJxG9fqHDRaC8.roa
File: gjvVG-GGHpvETDZJxG9fqHDRaC8.roa (raw, json)
Hash identifier: RbM6krM3ZIbfGTqUk6B/oo4LQFyL7m2QQzsg8oOJ5lw=
Subject key identifier: 82:3B:D5:1B:E1:86:1E:9B:C4:4C:36:49:C4:6F:5F:A8:70:D1:68:2F
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018571D7C4C20E6244EAA9BC4BC1055D53EA
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/gjvVG-GGHpvETDZJxG9fqHDRaC8.roa
Signing time: Mon 02 Jan 2023 09:37:23 +0000
ROA not before: Mon 02 Jan 2023 09:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212157
IP address blocks: 185.52.4.0/22 maxlen: 24
2a04:9a00:1010::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Feb 2023 14:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c4:c2:0e:62:44:ea:a9:bc:4b:c1:05:5d:53:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 09:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=823bd51be1861e9bc44c3649c46f5fa870d1682f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:a0:37:1e:1d:bb:ac:5d:b2:d8:95:5a:e4:
d0:63:50:42:83:b1:36:24:5c:c8:cf:52:1f:e5:d8:
28:4c:53:8b:02:d4:a5:2e:92:5e:29:0c:8e:60:1a:
c0:d1:13:c4:54:4e:29:42:1d:9c:78:5c:0d:7e:7a:
42:9c:b6:e1:f1:86:ae:f6:0d:cb:39:bf:9c:7a:66:
54:74:13:31:06:a4:fd:f8:d6:1f:d6:db:73:c4:76:
09:24:a4:a6:c0:b6:4a:d6:a0:26:4c:47:8f:76:16:
b5:56:f1:cf:8d:af:bb:2d:cf:ff:3a:7c:54:62:21:
60:7c:f3:f1:e9:be:11:dc:80:38:ea:b9:f7:49:51:
8b:c4:94:74:c2:8a:9b:02:55:3a:71:bb:93:cd:cc:
a3:5a:7d:7c:4f:ed:4e:6f:46:de:ed:ee:86:4f:ff:
44:cf:6d:60:d5:2a:e3:ec:82:a8:59:87:4a:84:d8:
0b:7b:e9:f0:23:4a:72:8d:1f:3c:ce:47:ea:7c:4c:
9d:d4:61:e4:3c:69:5a:35:f7:00:f8:d5:28:a8:b9:
c8:9e:be:76:ea:65:1b:1f:82:0c:1f:b5:8f:58:16:
d4:fa:f0:de:2e:b4:11:79:d1:31:d8:c5:2b:5c:d5:
4e:f9:f4:82:c5:43:af:a6:43:92:b7:43:9b:65:15:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3B:D5:1B:E1:86:1E:9B:C4:4C:36:49:C4:6F:5F:A8:70:D1:68:2F
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/gjvVG-GGHpvETDZJxG9fqHDRaC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.4.0/22
IPv6:
2a04:9a00:1010::/44
Signature Algorithm: sha256WithRSAEncryption
b6:5a:76:4c:06:ce:08:ca:1c:67:0c:3d:f8:10:a4:fd:14:d3:
a9:f3:44:cb:22:23:f4:9c:51:aa:8d:12:13:09:95:2e:40:62:
ac:49:26:5e:50:87:b6:46:37:93:a6:2a:e4:b1:12:49:4d:0c:
e1:21:c5:db:e9:94:ce:21:5e:14:70:ed:d6:f8:75:3e:b0:71:
c8:7b:5e:b4:92:81:21:1e:a9:eb:40:1c:c0:3f:21:3b:c9:42:
0c:be:20:99:05:24:f8:90:27:20:98:f5:79:cb:db:80:1f:e6:
08:8d:2a:a2:f2:18:78:84:71:a4:d0:0b:4a:0a:76:9c:60:41:
18:9f:71:67:15:6a:f3:12:b8:88:61:14:b2:6d:99:f7:c8:f9:
5b:5d:5a:46:36:cb:d5:7c:a8:53:de:ea:52:65:4e:bc:76:3c:
c2:7c:4c:df:d9:26:be:f2:a9:11:c8:96:ab:fc:9d:5e:57:c3:
46:95:d5:cf:76:05:a6:7a:59:a5:3b:7b:69:34:4c:10:81:12:
06:a4:17:b0:c7:b2:5e:a9:ab:15:d8:ff:a6:13:0b:bc:ab:a1:
b0:d1:d1:35:c5:eb:92:0a:7f:f2:96:3a:54:1e:bd:59:4a:33:
20:b2:50:9f:1b:1d:d3:82:2f:c5:cd:18:f4:14:05:31:43:3b:
19:95:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org