Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/GGusGT_MJ8ibQe594MXRzEwVLZc.roa
File: GGusGT_MJ8ibQe594MXRzEwVLZc.roa (raw, json)
Hash identifier: gvXVcHP43Sth8Rxw9d2KA2BCu9AAmvB67QdBpdddyWs=
Subject key identifier: 18:6B:AC:19:3F:CC:27:C8:9B:41:EE:7D:E0:C5:D1:CC:4C:15:2D:97
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 01856F5DF0549D978A71664DCE56DCBD72EC
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/GGusGT_MJ8ibQe594MXRzEwVLZc.roa
Signing time: Sun 01 Jan 2023 22:05:05 +0000
ROA not before: Sun 01 Jan 2023 22:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206144
IP address blocks: 185.195.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 02 Jan 2023 13:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f0:54:9d:97:8a:71:66:4d:ce:56:dc:bd:72:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 22:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=186bac193fcc27c89b41ee7de0c5d1cc4c152d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:be:6d:73:a7:c8:ec:7f:5e:32:46:b9:c7:
d4:57:86:55:86:1f:ba:7e:f7:cf:c3:8f:a6:96:15:
88:a8:ee:1f:79:07:30:28:72:72:5f:b5:f0:c1:89:
09:9b:93:17:58:2c:86:87:32:45:34:84:10:ee:53:
21:b6:c3:e9:ef:3b:43:4c:2c:90:a8:36:de:6a:16:
61:ec:25:e6:cd:84:e9:1a:42:b5:81:09:5e:9a:83:
b8:11:ed:b6:31:6f:45:ab:ff:15:b3:bb:8d:f8:f3:
4b:eb:51:f8:c4:68:12:e1:c4:72:c8:cb:d8:73:e3:
64:57:cd:47:cb:4f:3e:b9:e7:0c:88:b8:82:62:78:
de:00:27:1a:7b:5e:b6:0d:8c:b9:04:4a:d9:44:3b:
6e:ba:da:6d:c2:f0:71:8f:21:ac:bd:d4:c8:08:c2:
05:a1:66:41:3e:7b:10:7b:cb:cd:56:ac:46:14:df:
f2:af:85:ab:a3:d2:2e:8b:28:fe:29:f2:b8:28:d5:
79:6b:46:df:f0:9e:81:74:42:ad:21:8f:ef:e8:50:
d4:0b:19:45:74:b9:c4:c9:73:4d:61:cc:77:a3:25:
b9:6f:8c:74:17:96:1c:55:f8:9e:15:90:ff:b7:ac:
49:39:fe:04:38:42:e4:49:cb:ea:20:b8:55:85:86:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:AC:19:3F:CC:27:C8:9B:41:EE:7D:E0:C5:D1:CC:4C:15:2D:97
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/GGusGT_MJ8ibQe594MXRzEwVLZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ad:0a:30:63:7a:bc:b3:fa:dd:0b:ed:bd:2e:9c:0e:91:a6:
51:c3:c2:92:66:e7:4b:68:eb:8c:ce:10:b7:9d:50:89:83:9b:
ac:f6:2b:54:7d:de:3c:c0:6a:ba:c5:68:89:47:12:a7:3e:d4:
b8:22:f2:88:14:af:dd:cb:5e:3d:2a:8e:92:9f:4b:e1:5c:12:
9c:88:18:50:95:e1:27:7b:20:5d:ff:70:42:8b:d8:28:fd:c9:
b8:b4:40:fc:b4:89:4d:9f:b6:65:e0:ab:11:f1:ac:d7:0d:ee:
89:07:e1:50:66:a3:ef:9d:41:85:d4:0d:72:e7:9b:a2:34:9b:
b4:96:93:72:d6:94:43:ee:f6:80:bb:6d:a5:bc:4e:0c:8f:ea:
57:c9:12:fe:b8:b8:0b:13:45:ea:a8:92:ef:76:9c:aa:0a:0c:
08:99:ac:47:be:24:21:03:38:db:19:63:2b:74:75:5a:9a:14:
fd:6a:42:ec:3f:4b:60:ba:d0:33:c3:04:3b:00:3d:eb:ef:62:
d9:40:a9:11:f0:3f:b4:f2:ef:78:5d:bd:44:c4:97:29:85:fc:
9e:db:b7:c5:51:9f:b6:c8:a2:37:b7:4e:3e:77:5e:f7:ab:f4:
36:95:ce:87:19:15:8f:0c:24:05:77:09:32:f8:c4:ef:28:68:
a5:72:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org